| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2014-09-26 | X509at_add1_attr(): do not free stuff we did not allocate in the error path. |   miod | 1 | -3/+3 |
| 2014-09-26 | Now that we have a static version of the default EC formats, also use it |   jsing | 2 | -94/+88 |
| 2014-09-23 | Fix regression introduced in revision 1.15 by using strndup() instead of | miod | 1 | -6/+6 |
| 2014-09-22 | Refactor and simplify the ECC extension handling. The existing code | jsing | 4 | -244/+196 |
| 2014-09-22 | Also check the result from final_finish_mac() against finish_mac_length in | jsing | 2 | -36/+32 |
| 2014-09-22 | It is possible (although unlikely in practice) for peer_finish_md_len to | jsing | 2 | -26/+22 |
| 2014-09-21 | Document SSL_OP_TLSEXT_PADDING. | jsing | 1 | -0/+6 |
| 2014-09-21 | Move the TLS padding extension under an SSL_OP_TLSEXT_PADDING option, which | jsing | 4 | -20/+36 |
| 2014-09-21 | a_enum.c used to be a copy of a_int.c with s/INTEGER/ENUMERATED/g , but | miod | 1 | -4/+9 |
| 2014-09-21 | Fix a memory leak in the error path in ASN1_mbstring_ncopy(). | miod | 1 | -19/+29 |
| 2014-09-19 | Add CHACHA20 as a cipher symmetric encryption alias. | jsing | 2 | -2/+10 |
| 2014-09-19 | remove obfuscating parens. man operator is your friend. |   tedu | 4 | -30/+30 |
| 2014-09-07 | Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them, | jsing | 16 | -182/+54 |
| 2014-08-26 | Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is not | jsing | 55 | -33619/+0 |
| 2014-08-24 | constify strerror return value |   bcook | 1 | -2/+2 |
| 2014-08-24 | Include <sys/time.h> to get struct timeval | bcook | 1 | -1/+2 |
| 2014-08-24 | Include <sys/select.h> to get select | bcook | 4 | -4/+9 |
| 2014-08-24 | Let SSL_CIPHER_description() allocate the buffer for the description, | jsing | 1 | -4/+6 |
| 2014-08-24 | Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and a | jsing | 10 | -58/+38 |
| 2014-08-23 | Remove non-standard GOST cipher suites (which are not compiled in | jsing | 2 | -136/+2 |
| 2014-08-23 | Replace the remaining ssl3_get_cipher_by_char() calls with n2s() and | jsing | 8 | -80/+60 |
| 2014-08-19 | Three independent typos for `independent' or `independently'. | miod | 1 | -1/+1 |
| 2014-08-18 | replace more ROTATE macros with plain-old C code. | bcook | 2 | -40/+19 |
| 2014-08-18 | remove return value from HOST_c2l/l2c macros | bcook | 8 | -106/+106 |
| 2014-08-14 | fixed overrid(d)en typo |   tobias | 1 | -2/+2 |
| 2014-08-12 | Merge a patch that i successfully pushed to OpenSSL, |   schwarze | 2 | -2/+2 |
| 2014-08-12 | Replace intrinsic ROTATE macros with an inline. | bcook | 1 | -41/+10 |
| 2014-08-11 | Guard RSA / RC4-5 ASM when NO_ASM is not defined | bcook | 2 | -5/+6 |
| 2014-08-11 | Check the return value of sk_SSL_CIPHER_new_null(), since it allocates | jsing | 2 | -10/+14 |
| 2014-08-11 | Unchecked memory allocation and potential leak upon error in | miod | 2 | -10/+24 |
| 2014-08-11 | Remove now-unused SSL2_STATE as well as ssl2-specific state machine values. | miod | 2 | -234/+2 |
| 2014-08-11 | Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed way | jsing | 6 | -26/+24 |
| 2014-08-11 | Provide a ssl3_get_cipher_by_id() function that allows ciphers to be looked | jsing | 6 | -30/+36 |
| 2014-08-10 | Tweak cipher list comments and add missing cipher value comments. | jsing | 2 | -10/+52 |
| 2014-08-10 | Remove disabled (weakened export and non-ephemeral DH) cipher suites from | jsing | 2 | -940/+10 |
| 2014-08-10 | Since we no longer need to support SSLv2-style cipher lists, start | jsing | 32 | -182/+68 |
| 2014-08-08 | Fix CVE-2014-3507, avoid allocating and then leaking a fresh fragment |   guenther | 2 | -4/+14 |
| 2014-08-08 | Fix CVE-2014-3508, pretty printing and OID validation: | guenther | 2 | -12/+28 |
| 2014-08-07 | Correct test reversed during merge of fix for CVE-2014-3509 | guenther | 2 | -4/+4 |
| 2014-08-07 | Fix CVE-2014-3506, DTLS handshake message size checks. From | guenther | 2 | -32/+44 |
| 2014-08-07 | Oops, revert changes commited by mistake. The previous commit was supposed | miod | 13 | -53/+59 |
| 2014-08-07 | When you expect a function to return a particular value, don't put a comment | miod | 15 | -71/+59 |
| 2014-08-07 | Fix CVE-2014-3511; TLS downgrade, verbatim diff |   deraadt | 2 | -10/+54 |
| 2014-08-07 | merge CVE-2014-3510; Fix DTLS anonymous EC(DH) denial of service | deraadt | 2 | -2/+18 |
| 2014-08-06 | merge fix for CVE-2014-3509 -- basically a missing s->hit check; ok guenther | deraadt | 2 | -18/+26 |
| 2014-08-06 | Prevent a possible use after free by mimicing the s3_srvr.c fixes contributed by | miod | 2 | -8/+2 |
| 2014-08-06 | Allow B64_EOF to follow a base64 padding character. This restores previous | jsing | 1 | -2/+3 |
| 2014-08-06 | Correct error checks in EVP_read_pw_string_min(): UI_add_input_string() | guenther | 1 | -3/+3 |
| 2014-08-04 | In chacha_init(), allow for a NULL iv. Reported by znz on github. | miod | 1 | -2/+3 |
| 2014-07-29 | Fix a usage string; the proper spelling of 'alot' is 'a lot'. |   blambert | 1 | -2/+2 |
