summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Expand)AuthorAgeFilesLines
* wycheproof: skip BLS test vectors to prepare for updatetb2026-04-211-1/+3
* pkcs7test: factor main into a helper so we can add some unit tests easilytb2026-04-211-3/+13
* mlkem: use <openssl/mlkem.h> instead of "mlkem.h"tb2026-04-201-2/+3
* tls_keypair: add missing <limits.h>tb2026-04-201-1/+3
* ec_pmeth: fix 20yo comment: *outlen -> *keylentb2026-04-201-2/+2
* libtls: consistently handle allocation failurestb2026-04-162-6/+6
* libtls: use TLS_ERROR_OUT_OF_MEMORY after malloc failuretb2026-04-161-2/+2
* libtls: use tls_error_setx() after BIO_new_mem_buf()tb2026-04-161-2/+2
* libtls: prefer x version of error settingtb2026-04-165-17/+17
* libtls: add missing length checks before BIO_new_mem_buf()tb2026-04-162-2/+17
* keypairtest: zero out tls_error before running teststb2026-04-151-2/+2
* Prior to this we substring matched and allowed a leading .beck2026-04-133-7/+75
* Bump LibreSSL version for the releasetb2026-04-081-3/+3
* Rename labellen to label_lentb2026-04-072-24/+24
* Fix NULL deref for malformed OAEP parameters in CMS decryptiontb2026-04-072-11/+22
* Refactor and fix ocsp_find_signer_sk()tb2026-04-071-12/+17
* Add a few to-do items to the crl_cb()tb2026-04-071-1/+6
* Stop Delta CRL processing if a CRL number is misssingtb2026-04-071-4/+8
* x509v3.h: remove pointless #ifdef HEADER_CONF_Htb2026-04-061-3/+1
* cms_local.h: remove #ifdef X509V3_HEADER_Htb2026-04-061-4/+3
* Remove lib/libssl/test.jsing2026-04-0353-4409/+0
* Remove workaround for SSL 3.0/TLS 1.0 CBC vulnerability.jsing2026-04-035-80/+8
* Ensure that we cannot negotiate TLSv1.1 or lower.jsing2026-04-033-13/+21
* Fix min vs max in failure output.jsing2026-04-031-3/+3
* Use DTLS_client_method() instead of DTLSv1_client_method().jsing2026-04-031-3/+3
* Remove ssl_server_legacy_first_packet()jsing2026-04-033-97/+2
* Mop up mac_packet.jsing2026-04-034-15/+8
* Adjust depth check to match change in verifier.jsing2026-04-011-2/+2
* Restore the previous behaviour with maximum verification depth.jsing2026-04-011-7/+7
* Fix an off-by-one error in the X.509 verifier depth checking.jsing2026-03-311-6/+11
* Add additional X.509 verifier test cases.jsing2026-03-312-2/+28
* Run new test certificate bundles through Go's verifier.jsing2026-03-311-0/+2
* Add additional certificate test bundles.jsing2026-03-314-0/+1450
* Generate two additional certificate test scenarios which have deep chains.jsing2026-03-311-0/+16
* libssl regress: adjust golden numbers for RSASSA-PSStb2026-03-302-39/+44
* libssl: announce support for RSASSA-PSS signature schemestb2026-03-301-1/+7
* ssl_sigalg_pkey_ok: allow RSASSA-PSS with pubkey OID RSASSA-PSStb2026-03-301-5/+6
* ssl_sigalgs: whitespace tweaktb2026-03-301-1/+2
* ML-KEM: ensure that key_768 is only dereferenced with 768-bit keystb2026-03-291-3/+7
* Add missing include path required to reach newly added crypto_assembly.hanton2026-03-291-2/+3
* Include crypto_assembly.h instead of manually ensuring _CET_ENDBR exists.jsing2026-03-286-36/+12
* Provide a crypto_assembly.h internal header.jsing2026-03-281-0/+30
* libtls: const workarounds for X509_NAME in OCSP for OpenSSL 4tb2026-03-281-4/+5
* libtls: simple cases of const for X509_NAME *tb2026-03-282-6/+6
* openssl speed: whitespace tweaktb2026-03-191-3/+3
* openssl speed: add benchmarking support for ML-KEMkenjiro2026-03-181-2/+179
* sync with Mozilla root CA store, ok tb@sthen2026-03-181-174/+42
* libcrypto: prefix EC_KEY methods with ec_key_tb2026-03-185-100/+31
* Move ECDSA_SIG_st definition to its only consumer, ecdsa.ctb2026-03-162-7/+7
* openssl.1: remove mention of OPENSSL_EC_BIN_PT_COMPtb2026-03-141-16/+2