summaryrefslogtreecommitdiffstats
path: root/lib
AgeCommit message (Expand)AuthorFilesLines
2020-03-12Use internal versions of SSL3_BUFFER, SSL3_RECORD and DTLS1_RECORD_DATA.jsing9-53/+83
2020-03-11Anthony Steinhauser reports that 32-bit arm cpus have the same speculationderaadt1-1/+3
2020-03-11Anthony Steinhauser reports that 32-bit arm cpus have the same speculationderaadt1-3/+5
2020-03-11typo; from bryan stensonjmc1-3/+3
2020-03-10Use ctx->hs->secrets rather than the S3I(s) version.jsing2-4/+4
2020-03-10Remove some unnecessary handshake enums/functions.jsing4-26/+4
2020-03-10Add a return value check to tls13_buffer_extend().jsing1-1/+4
2020-03-10Remove the enc function pointers.jsing6-22/+12
2020-03-06RFC 8446, section 4.1.3: If a TLSv1.2 client receives a ServerHello fortb1-1/+27
2020-03-06TLSv1.3 servers that intend to downgrade are required to set the lasttb1-4/+8
2020-03-04crank major versions of libLLVM libc++ libc++abigkoehler2-2/+2
2020-03-04Check high bit for base64 decodeinoguchi1-2/+10
2020-03-03Fix base64 processing of long linesinoguchi1-99/+66
2020-02-28oops some snapshot tests fell inderaadt1-5/+2
2020-02-28syncderaadt1-2/+5
2020-02-26Fix .Dt line and copyright year.ratchov1-3/+3
2020-02-26Add API to control audio device parameters exposed by sndiod.ratchov9-5/+1304
2020-02-23The decryption_failed alert must not be sent by compliant implementations.tb1-2/+2
2020-02-23According to RFC 8446, Section 4.4.4, recipients of incorrect Finishedtb2-4/+4
2020-02-21Remove the s2n macro now that it is finally unused.jsing1-4/+1
2020-02-21Convert the SSL/TLS record creation code to CBB.jsing1-18/+28
2020-02-21Convert the DTLS header creation code to CBB.jsing1-20/+27
2020-02-21Remove some commented code, remove some pointless comments and move somejsing1-17/+6
2020-02-21Convert dtls1_build_sequence_number() to CBB.jsing1-7/+15
2020-02-21Move l2n/l2n8 into s3_cbc.c, since this is the only code that uses it.jsing2-16/+16
2020-02-21Remove prefix_len, since it is always zero.jsing1-4/+3
2020-02-21Remove now unused variable.jsing1-3/+1
2020-02-19Refactor do_ssl3_write().jsing1-97/+98
2020-02-18drop unused include <openssl/curve25519.h>tb4-10/+4
2020-02-18Now that the kernel skips the two instructions immediately followingkettenis2-6/+6
2020-02-17Describe the restriction for length of openssl conf value stringinoguchi1-2/+4
2020-02-17Restrict the length of openssl conf value stringinoguchi3-5/+14
2020-02-16Avoid potential NULL dereference when parsing a server keyshare extension.jsing1-1/+4
2020-02-16Avoid leak for tmp.x25519inoguchi2-5/+11
2020-02-15Move the TLSv1.3 code that interfaces with the legacy APIs/stack into ajsing3-309/+330
2020-02-15Remove #include that is not needed.jsing1-3/+1
2020-02-11Some system calls can fail due to an open-ended variety of causesschwarze3-10/+10
2020-02-09A getlogin() function which used utmp(5) appeared in v7.jsg1-4/+12
2020-02-08correct Research Unix edition "appeared in" use in HISTORYjsg7-21/+21
2020-02-07It appears we have come full-circle, where source code starts to usederaadt1-4/+2
2020-02-07update to upstream libfido2 780ad3c25 (20120123)djm63-1061/+1798
2020-02-06Re-enable the TLSv1.3 client since the known issues have been addressed.jsing1-3/+1
2020-02-06Add a workaround to make SSL_set_session() work with TLSv1.3.jsing1-1/+9
2020-02-06Add support for handling hello retry requests in the TLSv1.3 client.jsing1-5/+100
2020-02-06Correctly handle key share extensions in a hello retry request.jsing2-4/+11
2020-02-06Instead of opting in to futexes on archs with atomics opt out on archsjsg2-18/+12
2020-02-05Refactor the server hello processing code in the TLSv1.3 client.jsing2-22/+46
2020-02-05Remove the hello retry request processing code that was previously added.jsing2-65/+16
2020-02-05Provide tls1_transcript_unfreeze() to avoid the need for manual flagsjsing2-3/+10
2020-02-05Pull the handshake message transcript code into its own function.jsing2-7/+14
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.