| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Group HelloVerifyRequest decoding and add missing check for trailing data. | jsing | 2021-02-20 | 1 | -4/+5 |
| * | Add various public DTLS related defines. | jsing | 2021-02-20 | 2 | -2/+14 |
| * | Clean up/simplify dtls1_get_cipher(). | jsing | 2021-02-20 | 1 | -7/+8 |
| * | Pull in fix for EVP_CipherUpdate() overflow from OpenSSL. | tb | 2021-02-18 | 1 | -1/+23 |
| * | Some people still argue that rand(3) and random(3) have suitable deterministic | deraadt | 2021-02-12 | 2 | -4/+10 |
| * | Sync cert.pem with Mozilla NSS root CAs, except "GeoTrust Global CA", ok tb@ | sthen | 2021-02-12 | 1 | -659/+417 |
| * | KNF | tb | 2021-02-11 | 1 | -4/+7 |
| * | Remove bogus DTLS checks to disable ECC and OCSP. | jsing | 2021-02-08 | 2 | -10/+3 |
| * | Enforce read ahead with DTLS. | jsing | 2021-02-08 | 1 | -5/+5 |
| * | Use dtls1_retrieve_buffered_record() to load buffered application data. | jsing | 2021-02-08 | 1 | -11/+3 |
| * | Absorb ssl3_get_algorithm2() into ssl_get_handshake_evp_md(). | jsing | 2021-02-07 | 4 | -22/+19 |
| * | Correct handshake MAC/PRF for various TLSv1.2 cipher suites. | jsing | 2021-02-07 | 1 | -8/+8 |
| * | Factor out the legacy stack version checks. | jsing | 2021-02-07 | 4 | -28/+24 |
| * | Fail early in legacy exporter if master secret is not available | tb | 2021-02-03 | 1 | -1/+6 |
| * | Add OID for draft-ietf-opsawg-finding-geofeeds | job | 2021-02-03 | 2 | -0/+2 |
| * | Add a bunch of RPKI OIDs | job | 2021-02-02 | 2 | -1/+26 |
| * | Use "EC/RSA key setup failure" to align error with others | tb | 2021-02-01 | 1 | -3/+3 |
| * | missing word in comment | tb | 2021-01-30 | 1 | -3/+3 |
| * | Remove direct assignment of aead_ctx. | jsing | 2021-01-28 | 1 | -13/+7 |
| * | Move AEAD handling into the new TLSv1.2 record layer. | jsing | 2021-01-28 | 4 | -134/+102 |
| * | Link SSL_get_finished.3 to build. | tb | 2021-01-27 | 1 | -1/+2 |
| * | Write SSL_get_finished() documentation from scratch. | tb | 2021-01-27 | 1 | -0/+77 |
| * | Merge SSL_set_hostflags documentation from OpenSSL 1.1.1i and | tb | 2021-01-27 | 1 | -3/+20 |
| * | Rewrap a comment line to fit into 80 columns. | tb | 2021-01-26 | 1 | -3/+3 |
| * | zap a tab | tb | 2021-01-26 | 1 | -2/+2 |
| * | Prepare to provide SSL_set_hostflags() | tb | 2021-01-26 | 2 | -2/+9 |
| * | Move sequence numbers into the new TLSv1.2 record layer. | jsing | 2021-01-26 | 7 | -84/+38 |
| * | Move private key setup to a helper function with proper error | eric | 2021-01-26 | 1 | -10/+47 |
| * | when using fake keys, skip the private key check | eric | 2021-01-21 | 1 | -1/+2 |
| * | return -1 on error for consistency | eric | 2021-01-21 | 1 | -2/+2 |
| * | minor bump after symbol addition | eric | 2021-01-21 | 1 | -1/+1 |
| * | Allow setting a keypair on a tls context without specifying the private | eric | 2021-01-21 | 4 | -26/+77 |
| * | Mop up unused dtls1_build_sequence_number() function. | jsing | 2021-01-21 | 2 | -25/+2 |
| * | Drop unneeded cast in seal_record_protected_cipher | tb | 2021-01-20 | 1 | -2/+2 |
| * | Add code to handle change of cipher state in the new TLSv1.2 record layer. | jsing | 2021-01-19 | 5 | -17/+137 |
| * | Provide functions to determine if TLSv1.2 record protection is engaged. | jsing | 2021-01-19 | 5 | -18/+37 |
| * | Provide record layer overhead for DTLS. | jsing | 2021-01-19 | 3 | -17/+38 |
| * | Factor out code for explicit IV length, block size and MAC length. | jsing | 2021-01-19 | 1 | -21/+77 |
| * | Prevent an overflow in inet_net_pton(3) when the passed in buffer is | florian | 2021-01-19 | 1 | -11/+18 |
| * | Clean up dtls1_reset_seq_numbers() | jsing | 2021-01-13 | 1 | -10/+7 |
| * | Clean up read sequence handling in DTLS. | jsing | 2021-01-13 | 1 | -19/+21 |
| * | Clean up sequence number handing in the new TLSv1.2 record layer. | jsing | 2021-01-13 | 3 | -69/+89 |
| * | Split the record protection from the TLSv1.2 record layer. | jsing | 2021-01-12 | 1 | -75/+101 |
| * | Update SSL_get_shared_ciphers() documentation for ssl_lib.c r1.240 | tb | 2021-01-09 | 1 | -17/+47 |
| * | Add support for SSL_get_shared_ciphers() in TLSv1.3 | tb | 2021-01-09 | 1 | -1/+5 |
| * | Align SSL_get_shared_ciphers() with OpenSSL | tb | 2021-01-09 | 1 | -10/+18 |
| * | Set chain on xsc on chain build failure. | jsing | 2021-01-09 | 1 | -1/+3 |
| * | Bail out early after finding an single chain if we are have been called from | beck | 2021-01-09 | 1 | -1/+9 |
| * | search the intermediates only after searching the root certs, clarify | beck | 2021-01-08 | 1 | -11/+15 |
| * | Rename two local variables ssl to s for consistency | tb | 2021-01-07 | 2 | -11/+11 |
