summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_lib.c
AgeCommit message (Expand)Author
2016-12-04Convert ssl_cipher_list_to_bytes() to CBB, changing the function to returnJoel Sing
2016-11-02Expand LHASH_OF, IMPLEMENT_LHASH_DOALL_ARG_FN and LHASH_DOALL_ARG_FNJoel Sing
2016-11-02Expand IMPLEMENT_LHASH_COMP_FN/IMPLEMENT_LHASH_HASH_FN macros - the onlyJoel Sing
2016-10-19Remove support for fixed ECDH cipher suites - these is not widely supportedJoel Sing
2016-09-22Improve on code from the previous commit.Joel Sing
2016-09-20Avoid selecting weak digests for (EC)DH when using SNI.Brent Cook
2015-10-25Remove last vestige of SSL_OP_NO_SSLv3 support.Doug Hogan
2015-10-19free rbio before wbioBob Beck
2015-10-16Fix use of pointer value after BIO_free, and remove senseless NULL checks.Bob Beck
2015-10-03SSL_new(): fix ref counting and memory leak in error path.Doug Hogan
2015-09-12Unwrap a bunch of lines.Joel Sing
2015-09-12Remove most of the SSLv3 version checks and a few TLS v1.0.Doug Hogan
2015-09-11Nuke ssl_bad_method().Joel Sing
2015-09-11Nuke ssl_replace_hash().Joel Sing
2015-09-10Remove support for DTLS_BAD_VER. We do not support non-standard andJoel Sing
2015-09-09Check handshake_func against NULL rather than 0, since it is a functionJoel Sing
2015-08-27Remove SSLv3 support from LibreSSL.Doug Hogan
2015-07-19Allow *_free() functions in libssl to handle NULL input.Doug Hogan
2015-06-28Convert ssl_bytes_to_cipher_list to CBS.Doug Hogan
2015-04-15Clean up the ssl_bytes_to_cipher_list() API - rather than having theJoel Sing
2015-03-27BUF_MEM_free() has its own explicit NULL check.Joel Sing
2015-02-22Reluctantly add server-side support for TLS_FALLBACK_SCSV.Joel Sing
2015-02-22There is not much point constructing an SSL_CIPHER, then callingJoel Sing
2015-02-22Remove IMPLEMENT_STACK_OF noops.Joel Sing
2015-02-11Enable building with -DOPENSSL_NO_DEPRECATED.Doug Hogan
2015-02-09Return NULL when there are no shared ciphers.Doug Hogan
2015-02-07Clean up the {get,put}_cipher_by_char() implementations. Also useJoel Sing
2015-01-22Support CA verification in chroot'ed processes without direct fileReyk Floeter
2014-12-15Add error handling for EVP_DigestInit_ex().Doug Hogan
2014-12-14unifdef OPENSSL_NO_NEXTPROTONEG, which is one of the last standing #ifndefJoel Sing
2014-12-10Remove support for GOST R 34.10-94 signature authentication, along withJoel Sing
2014-12-10Add support for ALPN.Joel Sing
2014-11-16Sort and group includes.Joel Sing
2014-10-31Add support for automatic DH ephemeral keys.Joel Sing
2014-10-31Remove support for ephemeral/temporary RSA private keys.Joel Sing
2014-10-18Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().Joel Sing
2014-10-15Disable SSLv3 by default.Joel Sing
2014-10-03Add support for automatic ephemeral EC keys.Joel Sing
2014-09-07Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,Joel Sing
2014-08-24Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and aJoel Sing
2014-08-23Replace the remaining ssl3_get_cipher_by_char() calls with n2s() andJoel Sing
2014-08-11Check the return value of sk_SSL_CIPHER_new_null(), since it allocatesJoel Sing
2014-08-11Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed wayJoel Sing
2014-08-10Since we no longer need to support SSLv2-style cipher lists, startJoel Sing
2014-07-12The correct name for EDH is DHE, likewise EECDH should be ECDHE.Joel Sing
2014-07-12Provide ssl_version_string() function, which uses one of those modern CJoel Sing
2014-07-12if (x) FOO_free(x) -> FOO_free(x).Miod Vallat
2014-07-12Remove remnants from PSK, KRB5 and SRP.Joel Sing
2014-07-11Remove the PSK code. We don't need to drag around thisBob Beck
2014-07-10Remove more compression tendrils.Joel Sing