| Commit message (Expand) | Author | Age | Files | Lines |
* | Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is not | jsing | 2014-08-26 | 55 | -33619/+0 |
* | constify strerror return value | bcook | 2014-08-24 | 1 | -2/+2 |
* | Include <sys/time.h> to get struct timeval | bcook | 2014-08-24 | 1 | -1/+2 |
* | Include <sys/select.h> to get select | bcook | 2014-08-24 | 4 | -4/+9 |
* | Let SSL_CIPHER_description() allocate the buffer for the description, | jsing | 2014-08-24 | 1 | -4/+6 |
* | Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and a | jsing | 2014-08-24 | 10 | -58/+38 |
* | Remove non-standard GOST cipher suites (which are not compiled in | jsing | 2014-08-23 | 2 | -136/+2 |
* | Replace the remaining ssl3_get_cipher_by_char() calls with n2s() and | jsing | 2014-08-23 | 8 | -80/+60 |
* | Three independent typos for `independent' or `independently'. | miod | 2014-08-19 | 1 | -1/+1 |
* | replace more ROTATE macros with plain-old C code. | bcook | 2014-08-18 | 2 | -40/+19 |
* | remove return value from HOST_c2l/l2c macros | bcook | 2014-08-18 | 8 | -106/+106 |
* | fixed overrid(d)en typo | tobias | 2014-08-14 | 1 | -2/+2 |
* | Merge a patch that i successfully pushed to OpenSSL, | schwarze | 2014-08-12 | 2 | -2/+2 |
* | Replace intrinsic ROTATE macros with an inline. | bcook | 2014-08-12 | 1 | -41/+10 |
* | Guard RSA / RC4-5 ASM when NO_ASM is not defined | bcook | 2014-08-11 | 2 | -5/+6 |
* | Check the return value of sk_SSL_CIPHER_new_null(), since it allocates | jsing | 2014-08-11 | 2 | -10/+14 |
* | Unchecked memory allocation and potential leak upon error in | miod | 2014-08-11 | 2 | -10/+24 |
* | Remove now-unused SSL2_STATE as well as ssl2-specific state machine values. | miod | 2014-08-11 | 2 | -234/+2 |
* | Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed way | jsing | 2014-08-11 | 6 | -26/+24 |
* | Provide a ssl3_get_cipher_by_id() function that allows ciphers to be looked | jsing | 2014-08-11 | 6 | -30/+36 |
* | Tweak cipher list comments and add missing cipher value comments. | jsing | 2014-08-10 | 2 | -10/+52 |
* | Remove disabled (weakened export and non-ephemeral DH) cipher suites from | jsing | 2014-08-10 | 2 | -940/+10 |
* | Since we no longer need to support SSLv2-style cipher lists, start | jsing | 2014-08-10 | 32 | -182/+68 |
* | Fix CVE-2014-3507, avoid allocating and then leaking a fresh fragment | guenther | 2014-08-08 | 2 | -4/+14 |
* | Fix CVE-2014-3508, pretty printing and OID validation: | guenther | 2014-08-08 | 2 | -12/+28 |
* | Correct test reversed during merge of fix for CVE-2014-3509 | guenther | 2014-08-07 | 2 | -4/+4 |
* | Fix CVE-2014-3506, DTLS handshake message size checks. From | guenther | 2014-08-07 | 2 | -32/+44 |
* | Oops, revert changes commited by mistake. The previous commit was supposed | miod | 2014-08-07 | 13 | -53/+59 |
* | When you expect a function to return a particular value, don't put a comment | miod | 2014-08-07 | 15 | -71/+59 |
* | Fix CVE-2014-3511; TLS downgrade, verbatim diff | deraadt | 2014-08-07 | 2 | -10/+54 |
* | merge CVE-2014-3510; Fix DTLS anonymous EC(DH) denial of service | deraadt | 2014-08-07 | 2 | -2/+18 |
* | merge fix for CVE-2014-3509 -- basically a missing s->hit check; ok guenther | deraadt | 2014-08-06 | 2 | -18/+26 |
* | Prevent a possible use after free by mimicing the s3_srvr.c fixes contributed by | miod | 2014-08-06 | 2 | -8/+2 |
* | Allow B64_EOF to follow a base64 padding character. This restores previous | jsing | 2014-08-06 | 1 | -2/+3 |
* | Correct error checks in EVP_read_pw_string_min(): UI_add_input_string() | guenther | 2014-08-06 | 1 | -3/+3 |
* | In chacha_init(), allow for a NULL iv. Reported by znz on github. | miod | 2014-08-04 | 1 | -2/+3 |
* | Fix a usage string; the proper spelling of 'alot' is 'a lot'. | blambert | 2014-07-29 | 1 | -2/+2 |
* | Remove SRP code. It contains a bug (this should not surprise anyone), but | tedu | 2014-07-28 | 6 | -1816/+1 |
* | The RSA, DH, and ECDH temporary key callbacks expect the number of keybits | guenther | 2014-07-28 | 6 | -18/+42 |
* | Add missing year to copyright. | jsing | 2014-07-25 | 2 | -4/+4 |
* | BIO_free() returns immediately when the sole input is NULL. | doug | 2014-07-25 | 19 | -71/+45 |
* | level_add_node(): if a memory allocation failure causes us to attempt to clean | miod | 2014-07-23 | 1 | -4/+7 |
* | Make sure PEM_def_callback() correctly handles negative buffer sizes; all uses | miod | 2014-07-23 | 1 | -10/+17 |
* | Check the return value of the UI functions (including UI_new() which return | miod | 2014-07-23 | 1 | -6/+11 |
* | Now that DES_random_key() can be trusted, use it to generate DES keys in the | miod | 2014-07-22 | 2 | -12/+10 |
* | In DES_random_key(), force the generated key to the odd parity before checking | miod | 2014-07-22 | 1 | -8/+8 |
* | Handle failure of NETSCAPE_SPKI_b64_encode() and don't leak memory | guenther | 2014-07-22 | 1 | -6/+10 |
* | Kill a bunch more BUF_strdup's - these are converted to have a check for | beck | 2014-07-22 | 6 | -15/+20 |
* | Mark the format string argument to BIO_*printf as not being allowed to be NULL | guenther | 2014-07-20 | 1 | -5/+7 |
* | Fix strtonum range to unbreak -pass fd:0 | lteo | 2014-07-19 | 1 | -2/+2 |