summaryrefslogtreecommitdiff
path: root/lib/libssl/s3_clnt.c
AgeCommit message (Expand)Author
2014-09-19remove obfuscating parens. man operator is your friend.Ted Unangst
2014-09-07Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,Joel Sing
2014-08-23Replace the remaining ssl3_get_cipher_by_char() calls with n2s() andJoel Sing
2014-08-11Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed wayJoel Sing
2014-08-10Since we no longer need to support SSLv2-style cipher lists, startJoel Sing
2014-08-07merge CVE-2014-3510; Fix DTLS anonymous EC(DH) denial of serviceTheo de Raadt
2014-07-17Missing bounds check in ssl3_get_certificate_request(), was not spotted inMiod Vallat
2014-07-12The correct name for EDH is DHE, likewise EECDH should be ECDHE.Joel Sing
2014-07-12remove double brackets. fixes build with clang.Jonathan Gray
2014-07-12Remove extra parenthesis.Joel Sing
2014-07-12need_cert is now always true, so remove the variable and associatedJoel Sing
2014-07-12Remove remnants from PSK, KRB5 and SRP.Joel Sing
2014-07-11As reported by David Ramos, most consumer of ssl_get_message() perform lateMiod Vallat
2014-07-11If the application uses tls_session_secret_cb for session resumption, setMiod Vallat
2014-07-11Accept CCS again after `finished' has been sent by the client; at this pointMiod Vallat
2014-07-11Remove the PSK code. We don't need to drag around thisBob Beck
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
2014-06-21always compare memcmp against 0, for clarity.Ted Unangst
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-11Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored sinceJoel Sing
2014-06-07http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2016265dfbab162ec...Theo de Raadt
2014-06-07The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all haveJoel Sing
2014-06-05Ensure that sess_cert is not NULL before trying to use it.Joel Sing
2014-06-05ssl_sess_cert_new() can return NULL. Fix two cases where the return valueJoel Sing
2014-06-05Be selective as to when ChangeCipherSpec messages will be accepted.Joel Sing
2014-06-05More KNF.Joel Sing
2014-06-04without overthinking it, replace a few memcmp calls with CRYPTO_memcmpTed Unangst
2014-05-31More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup.Joel Sing
2014-05-31TLS would not be entirely functional without extensions, so unifdefJoel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-29no space before labelTed Unangst
2014-05-29line up else betterTed Unangst
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.Ted Unangst
2014-05-28EVP_MD_CTX_create() calls malloc and can return NULL. However, only one ofJoel Sing
2014-05-28There is no point in checking if a pointer is non-NULL before calling free,Joel Sing
2014-05-25Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofJoel Sing
2014-05-24DeIMPLEMENT libssl. Expand the IMPLEMENT_* macros since it is far moreJoel Sing
2014-05-22Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now.Joel Sing
2014-05-20KSSL is dead... nuke KSSL_DEBUG from orbit.Joel Sing
2014-05-05Remove SRP and Kerberos support from libssl. These are complex protocolsTed Unangst
2014-04-24Fix indentation.Ryan Thomas McBride
2014-04-24Make it compile again.Joel Sing
2014-04-24More KNF, things that couldn't be verified with md5(1), and some whitespaceRyan Thomas McBride
2014-04-24KNFRyan Thomas McBride
2014-04-24remove redundant asign. from David HillTed Unangst
2014-04-23Unifdef -UPKCS1_CHECK and remove SSL_OP_PKCS1_CHECK_[12], this is leftoverMiod Vallat
2014-04-21more malloc/realloc/calloc cleanups; ok beck kettenisTheo de Raadt