summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
* Simplify PKCS7_get_issuer_and_serial()tb2026-04-241-9/+6
* mlkem: use <openssl/mlkem.h> instead of "mlkem.h"tb2026-04-201-2/+3
* tls_keypair: add missing <limits.h>tb2026-04-201-1/+3
* ec_pmeth: fix 20yo comment: *outlen -> *keylentb2026-04-201-2/+2
* libtls: consistently handle allocation failurestb2026-04-162-6/+6
* libtls: use TLS_ERROR_OUT_OF_MEMORY after malloc failuretb2026-04-161-2/+2
* libtls: use tls_error_setx() after BIO_new_mem_buf()tb2026-04-161-2/+2
* libtls: prefer x version of error settingtb2026-04-165-17/+17
* libtls: add missing length checks before BIO_new_mem_buf()tb2026-04-162-2/+17
* Prior to this we substring matched and allowed a leading .beck2026-04-132-5/+26
* Bump LibreSSL version for the releasetb2026-04-081-3/+3
* Rename labellen to label_lentb2026-04-072-24/+24
* Fix NULL deref for malformed OAEP parameters in CMS decryptiontb2026-04-072-11/+22
* Refactor and fix ocsp_find_signer_sk()tb2026-04-071-12/+17
* Add a few to-do items to the crl_cb()tb2026-04-071-1/+6
* Stop Delta CRL processing if a CRL number is misssingtb2026-04-071-4/+8
* x509v3.h: remove pointless #ifdef HEADER_CONF_Htb2026-04-061-3/+1
* cms_local.h: remove #ifdef X509V3_HEADER_Htb2026-04-061-4/+3
* Remove lib/libssl/test.jsing2026-04-0353-4409/+0
* Remove workaround for SSL 3.0/TLS 1.0 CBC vulnerability.jsing2026-04-035-80/+8
* Ensure that we cannot negotiate TLSv1.1 or lower.jsing2026-04-033-13/+21
* Remove ssl_server_legacy_first_packet()jsing2026-04-033-97/+2
* Mop up mac_packet.jsing2026-04-034-15/+8
* Restore the previous behaviour with maximum verification depth.jsing2026-04-011-7/+7
* Fix an off-by-one error in the X.509 verifier depth checking.jsing2026-03-311-6/+11
* libssl: announce support for RSASSA-PSS signature schemestb2026-03-301-1/+7
* ssl_sigalg_pkey_ok: allow RSASSA-PSS with pubkey OID RSASSA-PSStb2026-03-301-5/+6
* ssl_sigalgs: whitespace tweaktb2026-03-301-1/+2
* ML-KEM: ensure that key_768 is only dereferenced with 768-bit keystb2026-03-291-3/+7
* Include crypto_assembly.h instead of manually ensuring _CET_ENDBR exists.jsing2026-03-286-36/+12
* Provide a crypto_assembly.h internal header.jsing2026-03-281-0/+30
* libtls: const workarounds for X509_NAME in OCSP for OpenSSL 4tb2026-03-281-4/+5
* libtls: simple cases of const for X509_NAME *tb2026-03-282-6/+6
* sync with Mozilla root CA store, ok tb@sthen2026-03-181-174/+42
* libcrypto: prefix EC_KEY methods with ec_key_tb2026-03-185-100/+31
* Move ECDSA_SIG_st definition to its only consumer, ecdsa.ctb2026-03-162-7/+7
* Fix BIO_get_mem_data(3) return value documentationtb2026-03-101-3/+18
* use the "e" flag with fopen() for O_CLOEXEC; ok tbderaadt2026-03-101-3/+3
* use O_CLOEXEC; ok tbderaadt2026-03-103-6/+6
* Use __pledge_open(2) for files that libc urgently needs even in lowerderaadt2026-03-102-10/+29
* mlkem: use timingsafe_memcmp() in decapsulationkenjiro2026-03-061-2/+2
* a_bitstr.c: fix includestb2026-02-081-3/+5
* More ec_point_cmp() turd polishingtb2026-02-081-45/+46
* Make truncation in ASN1_BIT_STRING_set_bit() explicittb2026-02-081-9/+43
* replace buggy strncmp with strcmp found with clang-tidybcook2026-02-071-2/+2
* EVP_SealInit.3: fix RETURN VALUES sectiontb2026-01-301-2/+12
* EVP_OpenInit.3: fix RETURN VALUES sectiontb2026-01-301-6/+4
* EVP_SealInit(): clear random key on exittb2026-01-301-2/+4
* EVP_{Open,Seal}Init(): remove redundant EVP_CIPHER_CTX_reset() callstb2026-01-301-5/+1
* EVP_SealInit(): minor cleanup.tb2026-01-301-11/+25