| Commit message (Expand) | Author | Age | Files | Lines |
* | This commit was manufactured by cvs2git to create tag 'OPENBSD_5_8_BASE'.OPENBSD_5_8_BASE | cvs2svn | 2015-08-02 | 1 | -2778/+0 |
* | Add linker warnings in case SSLv3_{,client,server}_method are referenced. | miod | 2015-07-29 | 1 | -1/+7 |
* | Remove support for the SSL_OP_TLS_D5_BUG compat hack from SSLeay. | doug | 2015-07-18 | 1 | -8/+4 |
* | Convert ssl3_get_client_certificate to CBS. | doug | 2015-07-14 | 1 | -15/+19 |
* | Convert ssl3_get_next_proto to CBS. | doug | 2015-06-20 | 1 | -14/+19 |
* | Remove Microsoft Server Gated Crypto. | doug | 2015-06-18 | 1 | -56/+7 |
* | KNF whitespace. | doug | 2015-06-17 | 1 | -2/+3 |
* | Remove ancient SSL_OP_NETSCAPE_CA_DN_BUG from SSLeay days. | doug | 2015-06-15 | 1 | -15/+5 |
* | Remove ancient compat hack SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG. | doug | 2015-06-15 | 1 | -24/+1 |
* | Remove 1997's compat hack SSL_OP_SSLEAY_080_CLIENT_DH_BUG. | doug | 2015-06-15 | 1 | -9/+4 |
* | Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls. | jsg | 2015-05-15 | 1 | -1/+2 |
* | Clean up the ssl_bytes_to_cipher_list() API - rather than having the | jsing | 2015-04-15 | 1 | -4/+4 |
* | Factor out the init_buf initialisation code, rather than duplicating it | jsing | 2015-03-27 | 1 | -15/+4 |
* | Fix CVE-2015-0205: Do not accept client authentication with Diffie-Hellman | bcook | 2015-02-25 | 1 | -2/+2 |
* | Convert several of the server side handshake functions to the new handshake | jsing | 2015-02-07 | 1 | -57/+25 |
* | Unifdef NETSCAPE_HANG_BUG. | jsing | 2015-02-06 | 1 | -22/+1 |
* | Bring back the horrible API that is get_cipher_by_char/put_cipher_by_char. | jsing | 2015-02-06 | 1 | -1/+3 |
* | don't leak timing info about padding errors by generating a fake key | tedu | 2014-12-29 | 1 | -5/+10 |
* | Add error handling for EVP_DigestInit_ex(). | doug | 2014-12-15 | 1 | -3/+4 |
* | unifdef OPENSSL_NO_NEXTPROTONEG, which is one of the last standing #ifndef | jsing | 2014-12-14 | 1 | -17/+1 |
* | ssl3_init_finished_mac() calls BIO_new() which can fail since it in turn | jsing | 2014-12-10 | 1 | -3/+10 |
* | Remove support for GOST R 34.10-94 signature authentication, along with | jsing | 2014-12-10 | 1 | -4/+2 |
* | Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov. | miod | 2014-11-18 | 1 | -22/+56 |
* | Sort and group includes. | jsing | 2014-11-16 | 1 | -5/+7 |
* | Add support for automatic DH ephemeral keys. | jsing | 2014-10-31 | 1 | -4/+17 |
* | Remove support for ephemeral/temporary RSA private keys. | jsing | 2014-10-31 | 1 | -80/+14 |
* | Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). | jsing | 2014-10-18 | 1 | -9/+4 |
* | Add support for automatic ephemeral EC keys. | jsing | 2014-10-03 | 1 | -3/+11 |
* | There is not much point checking ecdhp is not NULL... twice. | jsing | 2014-09-27 | 1 | -8/+3 |
* | remove obfuscating parens. man operator is your friend. | tedu | 2014-09-19 | 1 | -9/+9 |
* | Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them, | jsing | 2014-09-07 | 1 | -5/+3 |
* | Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and a | jsing | 2014-08-24 | 1 | -4/+3 |
* | Unchecked memory allocation and potential leak upon error in | miod | 2014-08-11 | 1 | -5/+12 |
* | Since we no longer need to support SSLv2-style cipher lists, start | jsing | 2014-08-10 | 1 | -3/+1 |
* | The RSA, DH, and ECDH temporary key callbacks expect the number of keybits | guenther | 2014-07-28 | 1 | -4/+7 |
* | The correct name for EDH is DHE, likewise EECDH should be ECDHE. | jsing | 2014-07-12 | 1 | -9/+9 |
* | Remove remnants from PSK, KRB5 and SRP. | jsing | 2014-07-12 | 1 | -40/+16 |
* | Place comments in a block above the if statement, rather than attempting | jsing | 2014-07-12 | 1 | -29/+31 |
* | As reported by David Ramos, most consumer of ssl_get_message() perform late | miod | 2014-07-11 | 1 | -41/+65 |
* | In ssl3_get_cert_verify(), allow for larger messages to accomodate keys | miod | 2014-07-11 | 1 | -3/+2 |
* | In ssl3_get_client_key_exchange() parsing a GOST session key, invoke the | miod | 2014-07-11 | 1 | -13/+8 |
* | Remove the PSK code. We don't need to drag around this | beck | 2014-07-11 | 1 | -108/+1 |
* | remove unused variable from ssl3_get_client_hello | bcook | 2014-07-10 | 1 | -3/+2 |
* | decompress libssl. ok beck jsing | tedu | 2014-07-10 | 1 | -96/+1 |
* | KNF comments, reflowing and moving out of the middle of argument lists in | guenther | 2014-07-10 | 1 | -32/+41 |
* | tedu the SSL export cipher handling - since we do not have enabled export | jsing | 2014-07-09 | 1 | -27/+6 |
* | fix the identical leak in three different files. | tedu | 2014-06-30 | 1 | -2/+3 |
* | convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoring | tedu | 2014-06-19 | 1 | -2/+2 |
* | In ssl3_send_newsession_ticket(), fix a memory leak in an error path. | miod | 2014-06-18 | 1 | -2/+4 |
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 |