summaryrefslogtreecommitdiff
path: root/lib/libssl/s3_srvr.c
AgeCommit message (Expand)Author
2014-08-11Unchecked memory allocation and potential leak upon error inMiod Vallat
2014-08-10Since we no longer need to support SSLv2-style cipher lists, startJoel Sing
2014-07-28The RSA, DH, and ECDH temporary key callbacks expect the number of keybitsPhilip Guenther
2014-07-12The correct name for EDH is DHE, likewise EECDH should be ECDHE.Joel Sing
2014-07-12Remove remnants from PSK, KRB5 and SRP.Joel Sing
2014-07-12Place comments in a block above the if statement, rather than attemptingJoel Sing
2014-07-11As reported by David Ramos, most consumer of ssl_get_message() perform lateMiod Vallat
2014-07-11In ssl3_get_cert_verify(), allow for larger messages to accomodate keysMiod Vallat
2014-07-11In ssl3_get_client_key_exchange() parsing a GOST session key, invoke theMiod Vallat
2014-07-11Remove the PSK code. We don't need to drag around thisBob Beck
2014-07-10remove unused variable from ssl3_get_client_helloBrent Cook
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-07-10KNF comments, reflowing and moving out of the middle of argument lists inPhilip Guenther
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
2014-06-30fix the identical leak in three different files.Ted Unangst
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
2014-06-18In ssl3_send_newsession_ticket(), fix a memory leak in an error path.Miod Vallat
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-11Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored sinceJoel Sing
2014-06-11c-file-style hints, begone; ok beckTheo de Raadt
2014-06-07http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2016265dfbab162ec...Theo de Raadt
2014-06-07The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all haveJoel Sing
2014-06-05Be selective as to when ChangeCipherSpec messages will be accepted.Joel Sing
2014-06-04without overthinking it, replace a few memcmp calls with CRYPTO_memcmpTed Unangst
2014-05-31More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup.Joel Sing
2014-05-31TLS would not be entirely functional without extensions, so unifdefJoel Sing
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-29the comment says RAND_pseudo_bytes should be RAND_bytes. make it so.Ted Unangst
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.Ted Unangst
2014-05-28There is no point in checking if a pointer is non-NULL before calling free,Joel Sing
2014-05-25Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofJoel Sing
2014-05-24DeIMPLEMENT libssl. Expand the IMPLEMENT_* macros since it is far moreJoel Sing
2014-05-22Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now.Joel Sing
2014-05-18In ssl3_send_certificate_request(), when adding the extra payload ifMiod Vallat
2014-05-05Remove SRP and Kerberos support from libssl. These are complex protocolsTed Unangst
2014-04-24More KNF, things that couldn't be verified with md5(1), and some whitespaceRyan Thomas McBride
2014-04-23Make libssl and libcrypto compile with -WerrorBob Beck
2014-04-21more malloc/realloc/calloc cleanups; ok beck kettenisTheo de Raadt
2014-04-19More KNF and style consistency tweaksPhilip Guenther
2014-04-17whack a bunch of disabled code. ok beck lteoTed Unangst
2014-04-17always build in RSA and DSA. ok deraadt miodTed Unangst
2014-04-17Change library to use intrinsic memory allocation functions instead ofBob Beck
2014-04-16add back SRP. i was being too greedy.Ted Unangst
2014-04-16Thanks to the knobs in http://tools.ietf.org/html/rfc5746, we have a knobBob Beck
2014-04-16disentangle SRP code from TLSTed Unangst
2014-04-16strncpy(d, s, strlen(s)) is a special kind of stupid. even when it's right,Ted Unangst
2014-04-16KNFRyan Thomas McBride
2014-04-14make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miodTed Unangst
2014-04-14So the OpenSSL codebase does "get the time, add it as a random seed"Theo de Raadt
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing