summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2014-11-16Sort and group includes.Joel Sing
2014-11-08Clean up more SSLv2 remnants.Joel Sing
2014-11-03only call SRTP (whatever that is) functions when the connection type isTed Unangst
2014-11-02Remove remnants from RC2 and SEED - there are no longer any cipher suitesJoel Sing
2014-10-31Remove an outdated comment re EDH vs DHE - DHE is now used consistently andJoel Sing
2014-10-31Update comments for TLS ExtensionType values - many of the referencedJoel Sing
2014-10-31Crank libssl major due to recent additions, removals and changes.Joel Sing
2014-10-31Remove now unused remnants from public structs.Joel Sing
2014-10-31Add support for automatic DH ephemeral keys.Joel Sing
2014-10-31Remove support for ephemeral/temporary RSA private keys.Joel Sing
2014-10-22Avoid a NULL pointer dereference that can be triggered byJoel Sing
2014-10-20SSL: Fix memory leak in d2i_SSL_SESSION.Brent Cook
2014-10-18Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().Joel Sing
2014-10-18Typical malloc() with size multiplication to reallocarray().Doug Hogan
2014-10-16Get rid of the last remaining BUF_strdup and BUF_strlcpy and friends, useBob Beck
2014-10-15Disable SSLv3 by default.Joel Sing
2014-10-15Only require an EC public key in tls1_set_ec_id(), if we need to provideJoel Sing
2014-10-15Add cipher aliases for DHE (the correct name for EDH) and ECDHE (theJoel Sing
2014-10-12Convert libssl manpages from pod to mdoc(7).Anthony J. Bentley
2014-10-05Use more specific curves/formats naming for local variables inJoel Sing
2014-10-05Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather thanJoel Sing
2014-10-05Make tls1_get_formatlist() behave the same as tls1_get_curvelist() andJoel Sing
2014-10-03Bump minor version for ECDH auto.Joel Sing
2014-10-03Add support for automatic ephemeral EC keys.Joel Sing
2014-10-03Use string literals in printf style calls so gcc's -Wformat works.Doug Hogan
2014-09-30Clean up EC cipher handling in ssl3_choose_cipher().Joel Sing
2014-09-28Bump minor after adding SSL_CTX_use_certificate_chain().Reyk Floeter
2014-09-28Add a new API function SSL_CTX_use_certificate_chain() that allows toReyk Floeter
2014-09-27There is not much point checking ecdhp is not NULL... twice.Joel Sing
2014-09-27Check that the specified curve is one of the client preferences.Joel Sing
2014-09-26Now that we have a static version of the default EC formats, also use itJoel Sing
2014-09-22Refactor and simplify the ECC extension handling. The existing codeJoel Sing
2014-09-22Also check the result from final_finish_mac() against finish_mac_length inJoel Sing
2014-09-22It is possible (although unlikely in practice) for peer_finish_md_len toJoel Sing
2014-09-21Move the TLS padding extension under an SSL_OP_TLSEXT_PADDING option, whichJoel Sing
2014-09-19Add CHACHA20 as a cipher symmetric encryption alias.Joel Sing
2014-09-19remove obfuscating parens. man operator is your friend.Ted Unangst
2014-09-07Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,Joel Sing
2014-08-24Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and aJoel Sing
2014-08-23Remove non-standard GOST cipher suites (which are not compiled inJoel Sing
2014-08-23Replace the remaining ssl3_get_cipher_by_char() calls with n2s() andJoel Sing
2014-08-11Check the return value of sk_SSL_CIPHER_new_null(), since it allocatesJoel Sing
2014-08-11Unchecked memory allocation and potential leak upon error inMiod Vallat
2014-08-11Remove now-unused SSL2_STATE as well as ssl2-specific state machine values.Miod Vallat
2014-08-11Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed wayJoel Sing
2014-08-11Provide a ssl3_get_cipher_by_id() function that allows ciphers to be lookedJoel Sing
2014-08-10Tweak cipher list comments and add missing cipher value comments.Joel Sing
2014-08-10Remove disabled (weakened export and non-ephemeral DH) cipher suites fromJoel Sing
2014-08-10Since we no longer need to support SSLv2-style cipher lists, startJoel Sing
2014-08-08Fix CVE-2014-3507, avoid allocating and then leaking a fresh fragmentPhilip Guenther