summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2015-02-06Add additional checks to ssl3_send_client_key_exchange() that ensuresjsing2-36/+50
2015-02-06Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.doug9-1/+2688
2015-02-06Bring back the horrible API that is get_cipher_by_char/put_cipher_by_char.jsing28-30/+176
2015-02-06Rename SSL_CTX_use_certificate_chain() to SSL_CTX_use_certificate_chain_mem().reyk7-19/+20
2015-02-05Declare the x509_(mem|file|dir)_lookup symbols as static because theyreyk3-6/+6
2015-01-28Fix a number of issues relating to algorithms in signatures, Mostlybeck7-9/+58
2015-01-26Place the remainder of e_os2.h under #ifndef LIBRESSL_INTERNAL until we canjsing1-1/+5
2015-01-26Add AEAD as a "MAC alias" so that it is possible to identify/select ciphersjsing4-4/+14
2015-01-23Ensure that a ServerKeyExchange message is received if the selected cipherjsing2-10/+36
2015-01-22Use field names in struct initialisers.jsing3-33/+33
2015-01-22Support CA verification in chroot'ed processes without direct filereyk6-6/+20
2015-01-22Add X509_STORE_load_mem() to load certificates from a memory bufferreyk3-2/+167
2015-01-22Assume that the size of a pointer will not change at runtime.bcook1-28/+15
2015-01-21Fix DTLS memory leak (CVE-2015-0206).doug2-18/+46
2015-01-16Delete the MANLINT variable and the related SUFFIXES rules becauseschwarze1-2/+2
2015-01-12Fix a memory leak in bss_dgram.doug1-3/+13
2015-01-08Avoid a double-free in an error path.doug1-1/+2
2015-01-03Fix incorrect OPENSSL_assert() usage.doug1-24/+53
2014-12-29don't leak timing info about padding errors by generating a fake keytedu2-10/+20
2014-12-16Now that we have Camellia support in libcrypto, bring in the SHA256 flavour ofmiod4-4/+328
2014-12-15Add error handling for EVP_DigestInit_ex().doug15-56/+98
2014-12-14unconditionally align SSL payloadsbcook6-78/+36
2014-12-14Convert all of the straight forward client handshake handling code to usejsing6-212/+134
2014-12-14Provide functions for starting, finishing and writing SSL handshakejsing6-8/+120
2014-12-14Remove trailing whitespace.jsing59-559/+559
2014-12-14unifdef OPENSSL_NO_NEXTPROTONEG, which is one of the last standing #ifndefjsing12-130/+12
2014-12-14unifdef NETSCAPE_HANG_BUG from the DTLS code. The code is not currentlyjsing2-46/+2
2014-12-10ssl3_init_finished_mac() calls BIO_new() which can fail since it in turnjsing17-42/+115
2014-12-10Remove support for GOST R 34.10-94 signature authentication, along withjsing18-154/+30
2014-12-10libssl major++jsing2-2/+2
2014-12-10Add support for ALPN.jsing10-16/+594
2014-12-10add stdint.h to ssl.h.bcook2-2/+6
2014-12-08Use platform-defined method of printing a pointer.bcook1-2/+2
2014-12-07Make GOST compile with a strict C compiler - in this case incrementing ajsing3-10/+12
2014-12-07Correctly output the result in STREEBOG512_Final() when running on a big-endianmiod1-5/+28
2014-12-07Make sure to load absolute symbol address with `dla' instead of `la' whenmiod2-5/+17
2014-12-07Remove OPENSSL_FIPSCANISTER mentions.miod4-17/+1
2014-12-07Remove get_optional_pkey_id() - it is a hack that existed due to GOSTjsing2-92/+16
2014-12-06fix manual names that clash with other manualsschwarze2-2/+2
2014-12-06Avoid modifying input on failure in X509_(TRUST|PURPOSE)_add.doug2-17/+21
2014-12-06Remove now bogus comment that got missed in the GOST commit.jsing2-10/+4
2014-12-06Fix some horrible style(9) violations...jsing2-122/+122
2014-12-06Remove client handling of RSA in ServerKeyExchange messages, along withjsing8-198/+52
2014-12-06Use appropriate internal types for EC curves and formats, rather thanjsing6-222/+248
2014-12-06Ensure that the client specified EC curve list length is a multiple of two.jsing2-4/+6
2014-12-06Fix two cases where it is possible to read one or two bytes past the end ofjsing2-6/+30
2014-12-04add missing .Fn macros in the SYNOPSIS; found with mandoc.db(5)schwarze2-10/+10
2014-12-03Move Windows OS-specific functions to make porting easier.bcook2-24/+89
2014-12-03We're not supporting 16-bit Windows, remove cast.bcook1-3/+2
2014-12-03handle the (impossible) situation of a size_t - 1 buffer fromderaadt1-2/+2