summaryrefslogtreecommitdiff
path: root/lib/libssl/s3_pkt.c
AgeCommit message (Expand)Author
2016-11-17Use defines instead of magic numbers and comments.Joel Sing
2016-11-03In ssl3_read_bytes(), do not process more than three consecutive TLSJoel Sing
2016-07-10zero the read buffer after copying data to user so it doesn't linger.Ted Unangst
2015-09-12Remove most of the SSLv3 version checks and a few TLS v1.0.Doug Hogan
2015-07-24Convert ssl3_get_record to CBS.Doug Hogan
2015-07-18Remove SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER workaround.Doug Hogan
2014-12-14unconditionally align SSL payloadsBrent Cook
2014-12-14Remove trailing whitespace.Joel Sing
2014-11-16Sort and group includes.Joel Sing
2014-10-18Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().Joel Sing
2014-07-12Remove remnants from PSK, KRB5 and SRP.Joel Sing
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
2014-06-13Add an SSL_AEAD_CTX to enable the use of EVP_AEAD with an SSL cipher.Joel Sing
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-11Disable TLS support...Joel Sing
2014-06-11More KNF.Joel Sing
2014-06-05Ensure that we do not process a ChangeCipherSpec with an empty masterJoel Sing
2014-06-05Be selective as to when ChangeCipherSpec messages will be accepted.Joel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-27Remove redundant test introduced in s3_pkt.c on 20001225, which got cargo-cultedMiod Vallat
2014-05-25Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofJoel Sing
2014-04-29Constrain bytes read/written to positive values.Bob Beck
2014-04-26Replace all use of ERR_add_error_data with ERR_asprintf_error_data.Bob Beck
2014-04-24rearrange a bit of code/commentsTed Unangst
2014-04-24A fantastic way to make a large unsigned number is to assignBob Beck
2014-04-24on today's episode of things you didn't want to learn:Ted Unangst
2014-04-19release buffers fix was lost in merge. put it back.Ted Unangst
2014-04-19More KNF and style consistency tweaksPhilip Guenther
2014-04-18Finish zapping SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION usage; only keepPhilip Guenther
2014-04-17whack a bunch of disabled code. ok beck lteoTed Unangst
2014-04-17Mostly gut e_os.h:Theo de Raadt
2014-04-15Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversionsBob Beck
2014-04-14make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miodTed Unangst
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
2014-04-13Do not include "e_os.h" anymore. Simply pull in the necessary headers.Martin Pieuchot
2014-04-13Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.Miod Vallat
2014-04-10Piotr Sikora pointed me at a more refined diff for the buffer releaseTed Unangst
2014-04-10don't release the read buffer if we're not done reading from it.Ted Unangst
2014-02-27SECURITY fixes backported from openssl-1.0.1f. ok mikeb@Jeremie Courreges-Anglas
2013-02-14cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txtMarkus Friedl
2012-10-13resolve conflictsDamien Miller
2011-11-03openssl-1.0.0e: resolve conflictsDamien Miller
2010-10-01resolve conflicts, fix local changesDamien Miller
2010-04-14Security fix for CVE-2010-0740Jasper Lievisse Adriaanse
2009-11-10pull Ben Lauries blind prefix injection fix for CVE-2009-3555 fromMarkus Friedl
2009-01-09resolve conflictsDamien Miller
2009-01-05update to openssl-0.9.8i; tested by several, especially krw@Damien Miller
2008-09-06resolve conflictsDamien Miller