summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* Bump minor after adding SSL_CTX_use_certificate_chain().reyk2014-09-282-2/+2
* Add a new API function SSL_CTX_use_certificate_chain() that allows toreyk2014-09-285-38/+106
* X509v3_add_ext(): do not free stuff we did not allocate in the error path.miod2014-09-281-2/+2
* X509_TRUST_add(): check X509_TRUST_get0() return value before dereferencing it,miod2014-09-281-15/+23
* Someone (TM) thought it was smart to save memory by using malloc(1) andmiod2014-09-281-5/+4
* Doh, rev 1.4 had left out one routine with both 32-bit and 64-bit code, wheremiod2014-09-271-0/+2
* There is not much point checking ecdhp is not NULL... twice.jsing2014-09-274-28/+10
* Check that the specified curve is one of the client preferences.jsing2014-09-2710-16/+140
* X509_STORE_new(): do not leak memory upon error.miod2014-09-261-14/+17
* X509_issuer_and_serial_hash(): do not leak memory if an error occurs duringmiod2014-09-261-1/+3
* X509at_add1_attr(): do not free stuff we did not allocate in the error path.miod2014-09-261-3/+3
* Now that we have a static version of the default EC formats, also use itjsing2014-09-262-94/+88
* Fix regression introduced in revision 1.15 by using strndup() instead ofmiod2014-09-231-6/+6
* Refactor and simplify the ECC extension handling. The existing codejsing2014-09-224-244/+196
* Also check the result from final_finish_mac() against finish_mac_length injsing2014-09-222-38/+34
* It is possible (although unlikely in practice) for peer_finish_md_len tojsing2014-09-222-26/+22
* Document SSL_OP_TLSEXT_PADDING.jsing2014-09-211-0/+6
* Move the TLS padding extension under an SSL_OP_TLSEXT_PADDING option, whichjsing2014-09-214-20/+36
* a_enum.c used to be a copy of a_int.c with s/INTEGER/ENUMERATED/g , butmiod2014-09-211-4/+9
* Fix a memory leak in the error path in ASN1_mbstring_ncopy().miod2014-09-211-19/+29
* Add CHACHA20 as a cipher symmetric encryption alias.jsing2014-09-192-2/+10
* remove obfuscating parens. man operator is your friend.tedu2014-09-194-30/+30
* Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,jsing2014-09-0716-182/+54
* Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is notjsing2014-08-2655-33619/+0
* constify strerror return valuebcook2014-08-241-2/+2
* Include <sys/time.h> to get struct timevalbcook2014-08-241-1/+2
* Include <sys/select.h> to get selectbcook2014-08-244-4/+9
* Let SSL_CIPHER_description() allocate the buffer for the description,jsing2014-08-241-4/+6
* Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and ajsing2014-08-2410-58/+38
* Remove non-standard GOST cipher suites (which are not compiled injsing2014-08-232-136/+2
* Replace the remaining ssl3_get_cipher_by_char() calls with n2s() andjsing2014-08-238-80/+60
* Three independent typos for `independent' or `independently'.miod2014-08-191-1/+1
* replace more ROTATE macros with plain-old C code.bcook2014-08-182-40/+19
* remove return value from HOST_c2l/l2c macrosbcook2014-08-188-106/+106
* fixed overrid(d)en typotobias2014-08-141-2/+2
* Merge a patch that i successfully pushed to OpenSSL,schwarze2014-08-122-2/+2
* Replace intrinsic ROTATE macros with an inline.bcook2014-08-121-41/+10
* Guard RSA / RC4-5 ASM when NO_ASM is not definedbcook2014-08-112-5/+6
* Check the return value of sk_SSL_CIPHER_new_null(), since it allocatesjsing2014-08-112-10/+14
* Unchecked memory allocation and potential leak upon error inmiod2014-08-112-10/+24
* Remove now-unused SSL2_STATE as well as ssl2-specific state machine values.miod2014-08-112-234/+2
* Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed wayjsing2014-08-116-26/+24
* Provide a ssl3_get_cipher_by_id() function that allows ciphers to be lookedjsing2014-08-116-30/+36
* Tweak cipher list comments and add missing cipher value comments.jsing2014-08-102-10/+52
* Remove disabled (weakened export and non-ephemeral DH) cipher suites fromjsing2014-08-102-940/+10
* Since we no longer need to support SSLv2-style cipher lists, startjsing2014-08-1032-182/+68
* Fix CVE-2014-3507, avoid allocating and then leaking a fresh fragmentguenther2014-08-082-4/+14
* Fix CVE-2014-3508, pretty printing and OID validation:guenther2014-08-082-12/+28
* Correct test reversed during merge of fix for CVE-2014-3509guenther2014-08-072-4/+4
* Fix CVE-2014-3506, DTLS handshake message size checks. Fromguenther2014-08-072-32/+44