summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2020-08-11Use 0 instead of 0x00 for memset() calls.jsing2-8/+8
2020-08-11Use SSL3_SEQUENCE_SIZE for last_write_sequence[] rather than hardcoding.jsing1-2/+2
2020-08-11In SSL_new() just 'goto err' on allocation failure.jsing1-11/+6
2020-08-10Avoid passing -1 to freezero.tb1-9/+10
2020-08-09Fix some wrapping/indent.jsing1-4/+3
2020-08-09Add P-521 to the list of curves supported by default in the client.jsing1-5/+18
2020-08-09Use CBB more correctly when writing SSL3/DTLS records.jsing2-66/+92
2020-08-09Make the explicit IV length handling in DTLS the same as SSL3/TLS.jsing1-8/+13
2020-08-04Cleanup aead_ctxinoguchi1-1/+3
2020-08-03Only parse a client's status_request in the CHtb1-1/+4
2020-08-03Ensure clients only send a status_request in the CHtb1-3/+7
2020-08-03Correctly handle server requests for an OCSP responsetb1-1/+12
2020-08-02Check the return value of tls1_enc() in the write path.jsing2-6/+6
2020-08-01Clean up/simplify more of the dtls1/ssl3 record writing code:jsing2-73/+34
2020-08-01Pull record version selection code up and pass it as an argument tojsing1-15/+15
2020-07-30Have ssl_init_wbio_buffer() push the buffering BIO rather than doing itjsing1-5/+2
2020-07-30Clean up and simplify some of the SSL3/DTLS1 record writing code.jsing2-76/+72
2020-07-30Add minimal info callback support for TLSv1.3tb3-3/+32
2020-07-25Handle SSL_MODE_AUTO_RETRY being changed during a TLSv1.3 session.jsing1-1/+4
2020-07-14Dedup the use legacy stack code.jsing1-56/+25
2020-07-14Revert the TLSv1.3 version switching fix/hack.jsing1-10/+1
2020-07-07Remove some unnecessary function pointers from SSL_METHOD_INTERNAL.jsing5-64/+17
2020-07-07Enable TLSv1.3 for the generic TLS_method().jsing2-5/+52
2020-07-03zap trailing whitespace on one linetb1-2/+2
2020-07-03Make the message type available to the extension functionstb2-158/+172
2020-07-03Improve argument order for the internal tlsext APItb8-39/+39
2020-06-25Switch the order of the two tests in tls13_client_hello_required_extensionstb1-9/+9
2020-06-24Make tls13_legacy_shutdown() match ssl3_shutdown() semantics.jsing1-21/+22
2020-06-24Enforce restrictions for ClientHello extensionstb1-1/+44
2020-06-19We inherited the constant time CBC padding removal from BoringSSL, buttb1-4/+4
2020-06-09The check_includes step is incorrect dependency management model forderaadt1-11/+1
2020-06-06Implement a rolling hash of the ClientHello message, Enforce RFC 8446beck6-7/+179
2020-06-05Use IANA allocated GOST ClientCertificateTypes.jsing3-9/+15
2020-06-05Stop sending GOST R 34.10-94 as a CertificateType.jsing1-3/+1
2020-06-05Handle GOST in ssl_cert_dup().jsing1-1/+5
2020-06-05Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.jsing2-2/+15
2020-06-04Align tls13_server_select_certificate() withtb1-3/+7
2020-06-04Improve client certificate selection for TLSv1.3tb1-16/+80
2020-06-04mention that TLS_method(3) also supports TLSv1.3;schwarze1-3/+3
2020-06-02Remove const modifier in return type of tls13_handshake_active_state()tb1-3/+3
2020-06-02distracting whitespacetb1-5/+5
2020-06-01Split the handling of post handshake handshake messages into itstb1-55/+44
2020-06-01Send an illegal_parameter alert if a client sends us invalid DH keytb1-3/+15
2020-06-01Add a mechanism to set an alert in those parts of the read half oftb1-3/+21
2020-05-31Replace ssl_max_server_version() with ssl_downgrade_max_version()jsing3-30/+6
2020-05-31Correct downgrade sentinels when a version pinned method is in use.jsing4-7/+40
2020-05-29Improve server certificate selection for TLSv1.3.jsing2-23/+94
2020-05-29Handle the case where we receive a valid 0 byte application data record.jsing1-1/+10
2020-05-29Wire up the servername callback in the TLSv1.3 server.jsing3-3/+45
2020-05-29Mop up servername_done, which is unused.jsing3-14/+3
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.