summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* Completely rewrite the session handling ASN.1 code using CBB and CBS. Thisjsing2016-11-041-616/+329
* Convert ssl3_get_server_kex_dhe() to CBS.jsing2016-11-041-42/+19
* In ssl3_read_bytes(), do not process more than three consecutive TLSjsing2016-11-031-4/+24
* Split ssl3_get_key_exchange() into separate functions for DHE/ECDHE.jsing2016-11-031-205/+256
* Clean up the TLS handshake digest handling - this refactors some of thejsing2016-11-032-30/+43
* Expand LHASH_OF, IMPLEMENT_LHASH_DOALL_ARG_FN and LHASH_DOALL_ARG_FNjsing2016-11-022-7/+13
* Expand another LHASH_OF macro.jsing2016-11-021-2/+2
* Expand DECLARE_LHASH_OF and LHASH_OF macros.jsing2016-11-021-3/+5
* Expand DECLARE_PEM_rw macro.jsing2016-11-021-2/+7
* Expand IMPLEMENT_LHASH_COMP_FN/IMPLEMENT_LHASH_HASH_FN macros - the onlyjsing2016-11-021-5/+17
* Wrap some >80 char lines.jsing2016-11-021-9/+9
* Remove support for fixed ECDH cipher suites - these is not widely supportedjsing2016-10-197-466/+42
* Check for and handle failure of HMAC_{Update,Final} or EVP_DecryptUpdate()guenther2016-10-021-5/+11
* Detect zero-length encrypted session data early, instead of when malloc(0)guenther2016-10-021-2/+2
* Improve on code from the previous commit.jsing2016-09-221-7/+5
* Avoid unbounded memory growth, which can be triggered by a clientjsing2016-09-221-9/+20
* Check for packet with truncated DTLS cookie.guenther2016-09-221-12/+17
* Improve ticket validity checking when tlsext_ticket_key_cb() callbackguenther2016-09-221-4/+25
* Avoid selecting weak digests for (EC)DH when using SNI.bcook2016-09-201-3/+12
* Update ld search path for libssl/libcrypto, fixes cross-build after source mo...bcook2016-09-191-3/+3
* Generate pkg-config files at build time like everything else. Thisnatano2016-09-141-2/+3
* Sort and group functions.jsing2016-09-041-12/+11
* Expand IMPLEMENT_PEM macros.jsing2016-09-041-2/+29
* only regen pkg-config files when required; ok jaspernatano2016-09-041-3/+5
* Make tree build againbeck2016-09-033-6/+51
* crank minor for API addiiton of x509_email, etc. functionsbeck2016-09-031-1/+1
* Remove the libssl/ssl directorybeck2016-09-032-54/+0
* Remove the libssl/src directorybeck2016-09-031190-386114/+0
* Be more strict when parsing TLS extensions.jsing2016-08-272-34/+74
* Do not *printf %s NULLderaadt2016-08-051-2/+3
* bump for LibreSSL 2.5.xbcook2016-07-311-3/+3
* don't mix code and decls, ok tedu@bcook2016-07-181-2/+3
* use memset to initialize the unionbcook2016-07-171-2/+4
* remove unused OPENSSL_NO_OBJECT casebcook2016-07-171-14/+1
* Initialize buffers before use, noted by Kinichiro Inoguchi.bcook2016-07-171-7/+7
* Clean up OCSP_check_validity() a bit more.beck2016-07-161-11/+10
* Limit the support of the "backward compatible" ssl2 handshake to only bebeck2016-07-162-2/+18
* zero the read buffer after copying data to user so it doesn't linger.tedu2016-07-102-2/+4
* call BN_init on temporaries to avoid use-before-set warningsbcook2016-07-073-3/+14
* remove unneeded duplicate call - spotted by jsing@beck2016-07-051-3/+1
* On systems where we do not have BN_ULLONG defined (most 64-bit systems),bcook2016-07-053-10/+42
* Add several fixes from OpenSSL to make OCSP work with intermediatebeck2016-07-051-10/+24
* bump to 2.4.2bcook2016-06-301-3/+3
* Remove flags for disabling constant-time operations.bcook2016-06-308-177/+87
* Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP usesbeck2016-06-251-2/+2
* Fix the ocsp code to actually check for errors when comparing time valuesbeck2016-06-251-7/+31
* Disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior.bcook2016-06-213-88/+46
* Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.libressl-v2.4.1tedu2016-06-061-2/+2
* Correct a problem that prevents the DSA signing algorithm from runningbeck2016-06-061-4/+6
* LibreSSL 2.4.1bcook2016-06-061-3/+3