summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-07-10KNF comments, reflowing and moving out of the middle of argument lists inPhilip Guenther
2014-07-10remove unused ecc_pkey_size.Brent Cook
2014-07-09Remove leading underscore from _BYTE_ORDER and _{LITTLE,BIG}_ENDIAN, to beMiod Vallat
2014-07-09Clean up and simplify SSL_CIPHER_description by always using asprintf. IfJoel Sing
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
2014-07-09remove unused, private version strings except SSL_version_strBrent Cook
2014-07-08Mark the weakened 40-bit export ciphers as invalid - no one in their rightJoel Sing
2014-07-08Remove SSL_FIPS.Joel Sing
2014-07-08Nuke SSL_NOT_EXP since it does nothing.Joel Sing
2014-07-08pedantic avoidance of division by zero, likely not actuallyBob Beck
2014-07-02Memory leak in error path of the day, from clang via dhill@bitrig;Miod Vallat
2014-06-30fix the identical leak in three different files.Ted Unangst
2014-06-29More KNF.Joel Sing
2014-06-28Fix 2 memory leaks.Loganaden Velvindron
2014-06-22KNF, particularly wrapped lines of calls to PEM_read_bio_FOO() andPhilip Guenther
2014-06-21always compare memcmp against 0, for clarity.Ted Unangst
2014-06-21Pull the code that builds a DTLS sequence number out into its own functionJoel Sing
2014-06-21Specify the correct strength bits for 3DES cipher suites.Joel Sing
2014-06-21Pull out the sequence number selection and handle this up front. Also, theJoel Sing
2014-06-21More KNF and clean up.Joel Sing
2014-06-21Fix memory leak in error path.Loganaden Velvindron
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
2014-06-18In ssl3_send_newsession_ticket(), fix a memory leak in an error path.Miod Vallat
2014-06-18Make sure to always invoke EVP_CIPHER_CTX_cleanup() before returning in theMiod Vallat
2014-06-18Use asprintf() instead of a fixed 128-byte size in SSL_CIPHER_description()Miod Vallat
2014-06-18In SSL_COMP_add_compression_method(), make sure error cases actually returnMiod Vallat
2014-06-17ssl_session_cmp is not a sort function, can use CRYPTO_memcmp here too.Ted Unangst
2014-06-15Rename ssl3_record_sequence_update() to ssl3_record_sequence_increment(),Joel Sing
2014-06-13Correctly calculate the key block length when using export ciphers.Joel Sing
2014-06-13Swap compress/expand around so they are in the correct order - these endedJoel Sing
2014-06-13Add ChaCha20-Poly1305 based ciphersuites.Joel Sing
2014-06-13Switch the AES-GCM cipher suites to SSL_CIPHER_ALGORITHM2_AEAD.Joel Sing
2014-06-13Combine the MAC handling for both !EVP_CIPH_FLAG_AEAD_CIPHER andJoel Sing
2014-06-13Add support for handling SSL_CIPHER_ALGORITHM2_AEAD ciphers, which areJoel Sing
2014-06-13Add an SSL_AEAD_CTX to enable the use of EVP_AEAD with an SSL cipher.Joel Sing
2014-06-13Remove support for the `opaque PRF input' extension, which draft has expiredMiod Vallat
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-11Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored sinceJoel Sing
2014-06-11Disable TLS support...Joel Sing
2014-06-11More KNF.Joel Sing
2014-06-11Fix memory leak: free s if calloc fails.Loganaden Velvindron
2014-06-11c-file-style hints, begone; ok beckTheo de Raadt
2014-06-10In tls1_cert_verify_mac(), check the return value of EVP_MD_CTX_copy_ex()Joel Sing
2014-06-08Add an SSL_CIPHER_ALGORITHM2_AEAD flag that is used to mark a cipher asJoel Sing
2014-06-08Add a define for the SSLv3 sequence size and use it, rather than sprinklingJoel Sing
2014-06-08No, we will not be building with OPENSSL_NO_X509_VERIFY. Nuke it andJoel Sing
2014-06-08Clean up BIO_free() handling in bio_ssl.c - BIO_free() has its own NULLJoel Sing
2014-06-08Be explicit with types. No binary change.Joel Sing
2014-06-08Factor out the part of tls1_change_cipher_state() that is specific toJoel Sing