summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Expand)AuthorAgeFilesLines
* x509_vfy: another function pointer argument causing shadowing issuestb2026-06-221-3/+3
* bio_meth: rename function pointer arguments to avoid stdio.h shadowingtb2026-06-221-9/+9
* conf_api: remove a bunch of redundant parenthesestb2026-06-221-13/+14
* openssl-ruby-tests: prefer 40 over 34tb2026-06-181-4/+4
* openssl-ruby-tests: work with ruby34 and ruby40tb2026-06-181-4/+4
* Correct secondary key share handling for HelloRetryRequests.jsing2026-06-141-2/+12
* Improve TLSv1.3 server handling of no shared groups.jsing2026-06-141-6/+17
* Send illegal parameter alerts for various HelloRetryRequest violations.jsing2026-06-141-6/+10
* Improve renegotation regress.jsing2026-06-142-20/+109
* Mop up SSL_CTX_set_options(3).jsing2026-06-141-89/+5
* Remove SSL_OP_LEGACY_SERVER_CONNECT from default options.jsing2026-06-142-9/+4
* c2sp: also run this with openssl/4.0 if availabletb2026-06-121-2/+2
* x509_verify: fix incorrect purpose check in the non-legacy pathtb2026-06-101-2/+3
* Avoid freeing a caller-owned buffer in PKCS7_verify()tb2026-06-091-7/+7
* Add some missing bounds checks to ASN1_mbstring_copy()tb2026-06-091-3/+20
* Avoid out-of-bounds read in CMS password-based decryptiontb2026-06-091-1/+5
* Avoid NULL dereference in password-based CMS decryptiontb2026-06-091-1/+5
* ecdh: add error codes for point at infinity/not on curvetb2026-06-091-3/+7
* Fix strange error check in EC_POINT_get_affine_coordinatestb2026-06-091-2/+2
* ssl_kex: exercise an invalid point as welltb2026-06-091-1/+34
* ssl_kex: ensure decode_error alert is raisedtb2026-06-091-1/+13
* Add a point at infinity check to ecdh_compute_key()tb2026-06-081-1/+4
* tlsext: add XXX to consider refusing anything but uncompressed point formattb2026-06-081-1/+3
* The ssl_kex regress now passes.tb2026-06-081-3/+1
* ssl_kex: ensure the public key uses uncompressed encodingtb2026-06-081-2/+22
* Adjust ssl_kex test for signature change in ssl_kex_peer_public_ecdhe_ecp()tb2026-06-081-5/+10
* Add a decode_error argument to ssl_kex_peer_public_ecdhe_ecp()tb2026-06-083-8/+11
* regress/libssl/unit: add a currently failing test for ECDHE kextb2026-06-082-1/+166
* tls_conn_version: add missing .Pp in HISTORYtb2026-06-071-2/+3
* ec_convert: point_conversion_t -> point_conversion_form_t in a commenttb2026-06-071-3/+3
* ssl_kex: include ssl_local.htb2026-06-071-1/+2
* add X25519MLKEM768 to the start of the default ECDHE curves list, allowingsthen2026-06-062-6/+6
* Correctly handle failure to buffer DTLS messages.jsing2026-06-061-3/+5
* Move DTLS change cipher spec handling to its own function.jsing2026-06-064-14/+22
* Move DTLS handshake message handling to its own function.jsing2026-06-063-14/+30
* Remove ssl3_handshake_msg_hdr_len()jsing2026-06-062-11/+3
* libssl: don't break TLSv1.2 with X25519MLKEM768tb2026-06-062-3/+30
* Add regress tests for DTLS handshake messages.jsing2026-06-062-1/+375
* Drop gcc3 -Wunininitialized workaroundtb2026-06-041-2/+2
* libssl: const correct ssl_*version* APItb2026-06-042-18/+21
* rfc3779: uwrap a linetb2026-06-041-3/+2
* rfc3779: whitespace fixestb2026-06-041-4/+3
* Clean up signature algorithm handling.jsing2026-05-315-261/+66
* Disallow wildcard matching of a TLD specified as a FQDN.jsing2026-05-301-1/+4
* Add a regress test that matches a wildcard for a TLD specified as a FQDN.jsing2026-05-301-1/+9
* Improve test failure message.jsing2026-05-301-3/+4
* Disable builtins in strlcpytest.c. Otherwise, clang w/ optimizationsanton2026-05-301-1/+3
* bettertls/verify: resuls -> resultstb2026-05-291-2/+2
* Fix test_valid_uri() by passing the correct entry to strlen().jsing2026-05-261-2/+2
* remove prototype for removed dtls1_get_cipher()jsg2026-05-251-2/+1
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2026-09-05 10:03:44 +0000