aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2020-09-13Fix safestack issues in ct.hMatt Caswell1-2/+0
2020-09-13Fix safestack issues in ocsp.hMatt Caswell3-5/+0
2020-09-13Fix safestack issues in x509.hMatt Caswell12-28/+0
2020-09-13Fix safestack issues in ssl.hMatt Caswell10-17/+0
2020-09-12NonStop port updates for 3.0.0.Randall S. Becker1-0/+13
2020-09-09TLS fixes for CBC mode and no-deprecatedPauli3-24/+23
2020-09-09TLS: remove legacy code path supporting special CBC modePauli2-0/+8
2020-09-03Convert ssl3_cbc_digest_record() to use EVP_MD_is_a()Matt Caswell1-14/+7
2020-09-03Make ssl3_cbc_digest_record() use the real data_sizeMatt Caswell3-12/+9
2020-09-03Start using the provider side TLS HMAC implementationMatt Caswell1-24/+18
2020-09-03Add an HMAC implementation that is TLS awareMatt Caswell4-14/+50
2020-09-01also zero pad DHE public key in ClientKeyExchange message for interopFelix Monninger1-5/+9
2020-08-31Move KTLS inline functions only used by libssl into ssl/ktls.c.John Baldwin3-1/+241
2020-08-31Support for KTLS TX on FreeBSD for TLS 1.3.John Baldwin1-4/+0
2020-08-31Don't check errno if ktls_read_record() returned 0.John Baldwin1-1/+1
2020-08-31Add helper functions for FreeBSD KTLS.John Baldwin2-58/+10
2020-08-31Add a ktls_crypto_info_t typedef.John Baldwin2-5/+3
2020-08-29Check whether we have MD5-SHA1 and whether we need itMatt Caswell1-6/+49
2020-08-29Improve some error messages if a digest is not availableMatt Caswell3-2/+9
2020-08-29Ensure libssl creates libctx aware MAC keysMatt Caswell3-13/+29
2020-08-27apps: -msg flag enhancement 2/2Marc2-5/+9
2020-08-24Fix coverity CID #1465795 - Incorrect free deallocator used in SSL_add1_host()Shane Lontis1-1/+1
2020-08-13Appease -Werror=stringop-overflow=Patrick Steuer1-3/+2
2020-08-13Avoid segfault in SSL_export_keying_material if there is no sessionTomas Mraz1-1/+2
2020-08-12Mark SSL_CTX_set_ssl_version() as deprecated in 3.0Benjamin Kaduk1-0/+2
2020-08-09Add EVP signature with libctx methods.Shane Lontis6-21/+27
2020-08-07rand_drbg: remove RAND_DRBG.Pauli1-1/+0
2020-08-06Update copyright yearMatt Caswell1-1/+1
2020-08-03Disallow setting more than one IP address with SSL_add1_host()David Woodhouse1-2/+21
2020-08-03Make SSL_set1_host() and SSL_add1_host() take IP addressesDavid Woodhouse1-0/+10
2020-07-30unify spelling of serializePauli1-1/+1
2020-07-24Add X509 related libctx changes.Shane Lontis8-77/+147
2020-07-21Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni2-15/+26
2020-07-16Update copyright yearRichard Levitte2-2/+2
2020-07-16Revert "kdf: make function naming consistent."Matt Caswell2-15/+15
2020-07-16Revert "The EVP_MAC functions have been renamed for consistency. The EVP_MAC...Matt Caswell2-7/+7
2020-07-16deprecate engines in SSLPauli4-0/+12
2020-07-16Add SSL_get[01]_peer_certificate()Todd Short3-13/+14
2020-07-11Providerized libssl fallout: cleanup initBenjamin Kaduk1-61/+0
2020-07-08Fix an incorrect error flow in add_provider_groupsMatt Caswell1-1/+1
2020-07-07Add support to zeroize plaintext in S3 record layerMartin Elshuber3-0/+10
2020-07-06Ensure TLS padding is added during encryption on the provider sideMatt Caswell1-4/+16
2020-07-06Convert SSLv3 handling to use provider side CBC/MAC removalMatt Caswell4-46/+97
2020-07-06Make libssl start using the TLS provider CBC supportMatt Caswell2-50/+141
2020-07-06Add provider support for TLS CBC padding and MAC removalMatt Caswell1-0/+2
2020-07-06Remove SSL dependencies from tls_pad.cMatt Caswell3-77/+135
2020-07-06Split the padding/mac removal functions out into a separate fileMatt Caswell3-270/+283
2020-07-06Move MAC removal responsibility to the various protocol "enc" functionsMatt Caswell8-400/+375
2020-07-05SSL: fix misuse of ERR_LIB_SYSRichard Levitte1-1/+2
2020-07-05Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md filesDr. David von Oheimb2-79/+78