Age | Commit message (Expand) | Author |
2014-07-10 | decompress libssl. ok beck jsing | Ted Unangst |
2014-07-09 | tedu the SSL export cipher handling - since we do not have enabled export | Joel Sing |
2014-07-08 | pedantic avoidance of division by zero, likely not actually | Bob Beck |
2014-06-21 | Pull the code that builds a DTLS sequence number out into its own function | Joel Sing |
2014-06-21 | Pull out the sequence number selection and handle this up front. Also, the | Joel Sing |
2014-06-21 | More KNF and clean up. | Joel Sing |
2014-06-15 | Rename ssl3_record_sequence_update() to ssl3_record_sequence_increment(), | Joel Sing |
2014-06-13 | Correctly calculate the key block length when using export ciphers. | Joel Sing |
2014-06-13 | Swap compress/expand around so they are in the correct order - these ended | Joel Sing |
2014-06-13 | Combine the MAC handling for both !EVP_CIPH_FLAG_AEAD_CIPHER and | Joel Sing |
2014-06-13 | Add support for handling SSL_CIPHER_ALGORITHM2_AEAD ciphers, which are | Joel Sing |
2014-06-13 | Remove support for the `opaque PRF input' extension, which draft has expired | Miod Vallat |
2014-06-12 | tags as requested by miod and tedu | Theo de Raadt |
2014-06-11 | Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored since | Joel Sing |
2014-06-10 | In tls1_cert_verify_mac(), check the return value of EVP_MD_CTX_copy_ex() | Joel Sing |
2014-06-08 | Add a define for the SSLv3 sequence size and use it, rather than sprinkling | Joel Sing |
2014-06-08 | Be explicit with types. No binary change. | Joel Sing |
2014-06-08 | Factor out the part of tls1_change_cipher_state() that is specific to | Joel Sing |
2014-06-08 | Factor out the sequence number reset code to aid in upcoming changes. | Joel Sing |
2014-06-07 | Add missing NULL check after calling EVP_PKEY_new_mac_key(). | Joel Sing |
2014-06-07 | Use !is_read to imply SSL3_CC_WRITE. | Joel Sing |
2014-06-07 | Move the export label initialisation into the export handling code, since | Joel Sing |
2014-06-07 | Remove pointless casts - no binary change. | Joel Sing |
2014-06-07 | Rename variables to make it clear that these are only used in the export | Joel Sing |
2014-06-07 | Further clean up of context handling in tls1_change_cipher_state(). | Joel Sing |
2014-06-02 | Rename more variables for readability and consistency. | Joel Sing |
2014-06-01 | Overhaul the key block handling in tls1_change_cipher_state() - use | Joel Sing |
2014-06-01 | In tls1_setup_key_block(), use the correct IV length for GCM mode, which | Joel Sing |
2014-06-01 | Clean up the tls1_change_cipher_state() key length handling and use a | Joel Sing |
2014-05-30 | remove some #if 0 code. we don't need any more reminders that we're using | Ted Unangst |
2014-05-30 | Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS and | Joel Sing |
2014-05-29 | Fix another two cases where the return value of ssl_replace_hash() is | Joel Sing |
2014-05-28 | More KNF. | Joel Sing |
2014-05-28 | Refactor tls1_change_cipher_state() and split the compression handling out | Joel Sing |
2014-05-28 | There is no point in checking if a pointer is non-NULL before calling free, | Joel Sing |
2014-05-25 | Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much of | Joel Sing |
2014-05-25 | The ssl_ciper_get_evp() function is currently overloaded to also return the | Joel Sing |
2014-05-24 | Invoke OPENSSL_cleanse() with the size of the variable you are cleaning. | Miod Vallat |
2014-05-20 | KSSL is dead... nuke KSSL_DEBUG from orbit. | Joel Sing |
2014-04-28 | use the correct algorithm mask. reported by satish lvr via | Ted Unangst |
2014-04-21 | more malloc/realloc/calloc cleanups; ok beck kettenis | Theo de Raadt |
2014-04-20 | Chop off more SSLv2 tentacles and start fixing and noting y2038 issues. | Philip Guenther |
2014-04-19 | More KNF. | Joel Sing |
2014-04-18 | now that knf carpet bombing is finished, switch to hand to hand combat. | Ted Unangst |
2014-04-17 | Change library to use intrinsic memory allocation functions instead of | Bob Beck |
2014-04-15 | remove FIPS mode support. people who require FIPS can buy something that | Ted Unangst |
2014-04-14 | First pass at applying KNF to the OpenSSL code, which almost makes it | Joel Sing |
2014-04-13 | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | Miod Vallat |
2014-02-27 | SECURITY fixes backported from openssl-1.0.1f. ok mikeb@ | Jeremie Courreges-Anglas |
2013-02-14 | cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt | Markus Friedl |