summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* libssl: ensure server selected ALPN was advertisedtb6 days1-6/+20
* tlsext_alpn_client_process(): rename list and prototb6 days1-8/+8
* grammar; a -> anjsg10 days5-15/+15
* Change RFC references from 8446 to 9846 and adjust section numberstb13 days18-97/+95
* SSL_get_finished: remove comment about TLSv1.0 and TLSv1.1tb13 days1-4/+2
* Simplify handling of remaining record content on switch to legacy stack.jsing13 days1-35/+13
* Allocate TLS 1.3 receive buffers lazilykenjiro14 days1-14/+7
* libssl: use correct alert for key_share without supported_groupstb2026-08-181-2/+2
* SSL_CTX_new(): fix spelling of NULLtb2026-08-141-3/+3
* Make file-local functions statickenjiro2026-07-314-11/+11
* Remove stale SECURE RENEGOTIATION referencekenjiro2026-07-171-5/+3
* Make dtls1_do_write_ccs() self contained.jsing2026-07-161-4/+5
* Clean up sequence number and message header handling.jsing2026-07-162-26/+13
* Check that the server selected ciphersuite is valid for use with TLSv1.2.jsing2026-07-151-1/+10
* Remove check for use of TLSv1.2 ciphersuites with TLSv1.1 and earlier.jsing2026-07-151-9/+1
* SSL_alert_desc_string: update manpage after change to return "!!" alwaystb2026-06-221-39/+36
* Correct secondary key share handling for HelloRetryRequests.jsing2026-06-141-2/+12
* Improve TLSv1.3 server handling of no shared groups.jsing2026-06-141-6/+17
* Send illegal parameter alerts for various HelloRetryRequest violations.jsing2026-06-141-6/+10
* Mop up SSL_CTX_set_options(3).jsing2026-06-141-89/+5
* Remove SSL_OP_LEGACY_SERVER_CONNECT from default options.jsing2026-06-142-9/+4
* tlsext: add XXX to consider refusing anything but uncompressed point formattb2026-06-081-1/+3
* ssl_kex: ensure the public key uses uncompressed encodingtb2026-06-081-2/+22
* Add a decode_error argument to ssl_kex_peer_public_ecdhe_ecp()tb2026-06-083-8/+11
* ssl_kex: include ssl_local.htb2026-06-071-1/+2
* Correctly handle failure to buffer DTLS messages.jsing2026-06-061-3/+5
* Move DTLS change cipher spec handling to its own function.jsing2026-06-064-14/+22
* Move DTLS handshake message handling to its own function.jsing2026-06-063-14/+30
* Remove ssl3_handshake_msg_hdr_len()jsing2026-06-062-11/+3
* libssl: don't break TLSv1.2 with X25519MLKEM768tb2026-06-062-3/+30
* Drop gcc3 -Wunininitialized workaroundtb2026-06-041-2/+2
* libssl: const correct ssl_*version* APItb2026-06-042-18/+21
* Clean up signature algorithm handling.jsing2026-05-315-261/+66
* remove prototype for removed dtls1_get_cipher()jsg2026-05-251-2/+1
* Remove unused prototype.jsing2026-05-251-2/+1
* Introduce and use dtls12_handshake_msg.jsing2026-05-166-77/+363
* libssl: record extension lengths in ClientHello hashingtb2026-05-091-1/+4
* ssl_lib: trade two extra empty lines for a missing onetb2026-05-091-4/+2
* Get rid of struct dtls1_retransmit_state.jsing2026-05-062-26/+10
* Avoid use of uninitialised decode_error variable.jsing2026-05-061-10/+14
* Refactor dtls1_do_write_handshake_message().jsing2026-04-301-43/+44
* Split dtls1_do_write() into handshake message and CCS handling.jsing2026-04-291-33/+59
* Avoid unnecessary lookups in dtls1_retransmit_message().jsing2026-04-291-37/+6
* Remove unused frag_off argument from dtls1_retransmit_message().jsing2026-04-291-4/+3
* Make dtls1_retransmit_message() static.jsing2026-04-292-78/+76
* Inline dtls1_fix_message_header().jsing2026-04-291-16/+5
* Convert DTLS code to ssl_msg_callback().jsing2026-04-291-14/+7
* Remove lib/libssl/test.jsing2026-04-0353-4409/+0
* Remove workaround for SSL 3.0/TLS 1.0 CBC vulnerability.jsing2026-04-035-80/+8
* Ensure that we cannot negotiate TLSv1.1 or lower.jsing2026-04-033-13/+21
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2026-09-03 20:23:15 +0000