| Commit message (Expand) | Author | Age | Files | Lines |
* | Remove support for fixed ECDH cipher suites - these is not widely supported | jsing | 2016-10-19 | 1 | -15/+7 |
* | Check for packet with truncated DTLS cookie. | guenther | 2016-09-22 | 1 | -12/+17 |
* | deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final. | beck | 2016-05-30 | 1 | -2/+2 |
* | X509_free(3) is NULL-safe, so remove NULL checks before its calls. | mmcc | 2016-03-11 | 1 | -5/+3 |
* | deprecate SSL_OP_SINGLE_DH_USElibressl-v2.3.2 | beck | 2016-01-27 | 1 | -20/+5 |
* | Use ECDH_size() instead of rolling our own. | jsing | 2015-09-13 | 1 | -6/+6 |
* | The *_accept() functions increment in_handshake at the start of the function, | jsing | 2015-09-13 | 1 | -16/+25 |
* | Remove most of the SSLv3 version checks and a few TLS v1.0. | doug | 2015-09-12 | 1 | -37/+24 |
* | Move handshake message header length determination into a separate | jsing | 2015-09-12 | 1 | -5/+8 |
* | Convert the rest of the server handshake functions to ssl3_handshake_msg_*. | jsing | 2015-09-12 | 1 | -44/+35 |
* | Rename functions that moved to t1_enc.c, with a tls1_ prefix instead of a | jsing | 2015-09-11 | 1 | -9/+9 |
* | Remove support for DTLS_BAD_VER. We do not support non-standard and | jsing | 2015-09-10 | 1 | -2/+2 |
* | Correct spelling of OPENSSL_cleanse. | jsing | 2015-09-10 | 1 | -4/+4 |
* | Remove the ssl_prepare_{client,server}hello_tlsext() functions, which are | jsing | 2015-09-01 | 1 | -6/+1 |
* | Remove SSLv3 method data structs and unlink s3_meth.c from the build. | doug | 2015-08-29 | 1 | -41/+1 |
* | Remove SSLv3 support from LibreSSL. | doug | 2015-08-27 | 1 | -15/+1 |
* | Add linker warnings in case SSLv3_{,client,server}_method are referenced. | miod | 2015-07-29 | 1 | -1/+7 |
* | Remove support for the SSL_OP_TLS_D5_BUG compat hack from SSLeay. | doug | 2015-07-18 | 1 | -8/+4 |
* | Convert ssl3_get_client_certificate to CBS. | doug | 2015-07-14 | 1 | -15/+19 |
* | Convert ssl3_get_next_proto to CBS. | doug | 2015-06-20 | 1 | -14/+19 |
* | Remove Microsoft Server Gated Crypto. | doug | 2015-06-18 | 1 | -56/+7 |
* | KNF whitespace. | doug | 2015-06-17 | 1 | -2/+3 |
* | Remove ancient SSL_OP_NETSCAPE_CA_DN_BUG from SSLeay days. | doug | 2015-06-15 | 1 | -15/+5 |
* | Remove ancient compat hack SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG. | doug | 2015-06-15 | 1 | -24/+1 |
* | Remove 1997's compat hack SSL_OP_SSLEAY_080_CLIENT_DH_BUG. | doug | 2015-06-15 | 1 | -9/+4 |
* | Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls. | jsg | 2015-05-15 | 1 | -1/+2 |
* | Clean up the ssl_bytes_to_cipher_list() API - rather than having the | jsing | 2015-04-15 | 1 | -4/+4 |
* | Factor out the init_buf initialisation code, rather than duplicating it | jsing | 2015-03-27 | 1 | -15/+4 |
* | Fix CVE-2015-0205: Do not accept client authentication with Diffie-Hellman | bcook | 2015-02-25 | 1 | -2/+2 |
* | Convert several of the server side handshake functions to the new handshake | jsing | 2015-02-07 | 1 | -57/+25 |
* | Unifdef NETSCAPE_HANG_BUG. | jsing | 2015-02-06 | 1 | -22/+1 |
* | Bring back the horrible API that is get_cipher_by_char/put_cipher_by_char. | jsing | 2015-02-06 | 1 | -1/+3 |
* | don't leak timing info about padding errors by generating a fake key | tedu | 2014-12-29 | 1 | -5/+10 |
* | Add error handling for EVP_DigestInit_ex(). | doug | 2014-12-15 | 1 | -3/+4 |
* | unifdef OPENSSL_NO_NEXTPROTONEG, which is one of the last standing #ifndef | jsing | 2014-12-14 | 1 | -17/+1 |
* | ssl3_init_finished_mac() calls BIO_new() which can fail since it in turn | jsing | 2014-12-10 | 1 | -3/+10 |
* | Remove support for GOST R 34.10-94 signature authentication, along with | jsing | 2014-12-10 | 1 | -4/+2 |
* | Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov. | miod | 2014-11-18 | 1 | -22/+56 |
* | Sort and group includes. | jsing | 2014-11-16 | 1 | -5/+7 |
* | Add support for automatic DH ephemeral keys. | jsing | 2014-10-31 | 1 | -4/+17 |
* | Remove support for ephemeral/temporary RSA private keys. | jsing | 2014-10-31 | 1 | -80/+14 |
* | Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). | jsing | 2014-10-18 | 1 | -9/+4 |
* | Add support for automatic ephemeral EC keys. | jsing | 2014-10-03 | 1 | -3/+11 |
* | There is not much point checking ecdhp is not NULL... twice. | jsing | 2014-09-27 | 1 | -8/+3 |
* | remove obfuscating parens. man operator is your friend. | tedu | 2014-09-19 | 1 | -9/+9 |
* | Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them, | jsing | 2014-09-07 | 1 | -5/+3 |
* | Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and a | jsing | 2014-08-24 | 1 | -4/+3 |
* | Unchecked memory allocation and potential leak upon error in | miod | 2014-08-11 | 1 | -5/+12 |
* | Since we no longer need to support SSLv2-style cipher lists, start | jsing | 2014-08-10 | 1 | -3/+1 |
* | The RSA, DH, and ECDH temporary key callbacks expect the number of keybits | guenther | 2014-07-28 | 1 | -4/+7 |