| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | document ASN1_tag2str(3); from OpenSSL commit 9e183d22 | schwarze | 2017-03-25 | 1 | -4/+14 |
| * | Update RFC reference for TLSEXT_TYPE_padding. | jsing | 2017-03-25 | 1 | -5/+2 |
| * | Check tls1_PRF() return value in tls1_generate_master_secret(). | jsing | 2017-03-25 | 1 | -4/+4 |
| * | More cleanup for tls1_PRF()/tls1_P_hash() - change the argument order of | jsing | 2017-03-25 | 1 | -46/+50 |
| * | add a helper function to print all pools #ifdef MALLOC_STATS | otto | 2017-03-24 | 1 | -1/+16 |
| * | document new recallocarray diagnostic; zap a few diagnostics that should | otto | 2017-03-24 | 1 | -8/+9 |
| * | move recallocarray to malloc.c and | otto | 2017-03-24 | 2 | -19/+207 |
| * | Fewer magic numbers. | jsing | 2017-03-18 | 1 | -3/+3 |
| * | t1_enc.c | jsing | 2017-03-18 | 1 | -3/+2 |
| * | Currently tls1_PRF() requires that a temporary buffer be provided, that | jsing | 2017-03-18 | 1 | -50/+32 |
| * | remove unneccessary macro; | jmc | 2017-03-17 | 1 | -2/+2 |
| * | Strengthen description of recallocarray(3) behaviour, hoping that readers | deraadt | 2017-03-17 | 1 | -5/+10 |
| * | Convert BUF_MEM_grow() and BUF_MEM_grow_clean() to recallocarray(), | jsing | 2017-03-16 | 1 | -13/+3 |
| * | Use calloc() instead of malloc() followed by manually zeroing fields. | jsing | 2017-03-16 | 1 | -6/+3 |
| * | Remove the handshake digests and related code, replacing remaining uses | jsing | 2017-03-10 | 7 | -166/+45 |
| * | Switch CBB to use recallocarray() - this ensures that we do not leak | jsing | 2017-03-10 | 1 | -2/+2 |
| * | First pass at cleaning up the tls1_P_hash() function - remove a pointless | jsing | 2017-03-10 | 1 | -20/+19 |
| * | Make tls1_PRF() non-static so it can be regress tested. | jsing | 2017-03-10 | 1 | -2/+7 |
| * | Correctly handle TLS PRF with MD5+SHA1 - the secret has to be partitioned | jsing | 2017-03-07 | 1 | -5/+26 |
| * | Some tweaks from jmc@ and describe better what recallocarray does; | otto | 2017-03-07 | 1 | -7/+16 |
| * | Introducing recallocarray(3), a blend of calloc(3) and reallocarray(3) | otto | 2017-03-06 | 3 | -7/+147 |
| * | size is unsigned so using ==0 not <=0 when checking for buffer exhaustion | millert | 2017-03-06 | 1 | -4/+4 |
| * | Pull in a change from the bind 8 resolver that fixes a potential | millert | 2017-03-06 | 1 | -10/+16 |
| * | Clean up and simplify the tls1_PRF() implementation now that we have a | jsing | 2017-03-06 | 1 | -48/+19 |
| * | Correctly convert an SSLv2 challenge into an SSLv3/TLS client random by | jsing | 2017-03-05 | 1 | -9/+27 |
| * | Provide a rolling handshake hash that commences as soon as the cipher | jsing | 2017-03-05 | 8 | -54/+193 |
| * | Convert various handshake message generation functions to CBB. | jsing | 2017-03-05 | 4 | -56/+113 |
| * | Drop the second argument of dtls1_set_message_header() and make it a void | jsing | 2017-03-04 | 3 | -13/+10 |
| * | Call ssl3_handshake_write() instead of ssl3_do_write() - this was missed | jsing | 2017-03-04 | 1 | -2/+2 |
| * | Ensure MD and key initialized before processing HMAC | inoguchi | 2017-03-03 | 1 | -4/+18 |
| * | fix error in Dt; from robert klein | jmc | 2017-03-02 | 1 | -3/+3 |
| * | Convert ssl3_{get,send}_server_key_exchange() to EVP_md5_sha1(). | jsing | 2017-03-01 | 3 | -44/+29 |
| * | Include EVP_md5_sha1() via OpenSSL_add_all_digests(). | jsing | 2017-03-01 | 1 | -1/+2 |
| * | Bump minors due to symbol addition. | jsing | 2017-02-28 | 3 | -3/+3 |
| * | Document EVP_md5_sha1(). | jsing | 2017-02-28 | 1 | -2/+11 |
| * | Add an EVP interface that provides concatenated MD5+SHA1 hashes, which are | jsing | 2017-02-28 | 4 | -2/+88 |
| * | Fix typo in issuingDistributionPoint description. | jsing | 2017-02-28 | 1 | -1/+1 |
| * | Stop pretending that MD5 and SHA1 might not exist - rather than locating | jsing | 2017-02-28 | 4 | -20/+8 |
| * | Add support for RES_USE_DNSSEC | jca | 2017-02-27 | 1 | -5/+2 |
| * | Add the following root CAs, from SECOM Trust Systems / Security Communication | sthen | 2017-02-24 | 1 | -1/+126 |
| * | Remove STREEBOG 512 as a TLS MAC since there are currently no cipher suites | jsing | 2017-02-21 | 2 | -26/+6 |
| * | don;t end Nd with a full stop; | jmc | 2017-02-21 | 1 | -3/+3 |
| * | Mark ERR_add_error_data and ERR_add_error_vdata as not for internal use, | beck | 2017-02-20 | 5 | -14/+81 |
| * | spelling fix; | jmc | 2017-02-20 | 1 | -2/+2 |
| * | document tls_config_error(3) RETURN VALUES, improve what is said | schwarze | 2017-02-20 | 2 | -6/+59 |
| * | Add EDNS0 support. | jca | 2017-02-18 | 1 | -4/+3 |
| * | Avoid dereferencing a pointer when reporting an error about the same | jsing | 2017-02-15 | 1 | -2/+2 |
| * | Add a NULL test to wrterror() to avoid a NULL deref when called from a | jsg | 2017-02-15 | 1 | -2/+2 |
| * | bump to 2.5.2 | bcook | 2017-02-14 | 1 | -3/+3 |
| * | malloc does not *need* to return page-aligned objects for size >= | otto | 2017-02-12 | 1 | -5/+2 |
