summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2014-06-18Use asprintf() instead of a fixed 128-byte size in SSL_CIPHER_description()Miod Vallat
2014-06-18In SSL_COMP_add_compression_method(), make sure error cases actually returnMiod Vallat
2014-06-17ssl_session_cmp is not a sort function, can use CRYPTO_memcmp here too.Ted Unangst
2014-06-15free iv, then cleanse. from Cyril JouveTed Unangst
2014-06-15Simplify EVP_MD_CTX_create() by just using calloc(). Also, use 0 ratherJoel Sing
2014-06-15Simplify EVP_CIPHER_CTX_new() - stop pretending that EVP_CIPHER_CTX_init()Joel Sing
2014-06-15Add missing OPENSSL_cleanse() in aead_aes_gcm_cleanup().Joel Sing
2014-06-15The OPENSSL_cleanse() in aes_gcm_cleanup() only cleans the gcm field of theJoel Sing
2014-06-15Rename ssl3_record_sequence_update() to ssl3_record_sequence_increment(),Joel Sing
2014-06-14Add more bounded attributes to the buffer and md5/sha headers in libsslAnil Madhavapeddy
2014-06-13typoMiod Vallat
2014-06-13Correctly calculate the key block length when using export ciphers.Joel Sing
2014-06-13Swap compress/expand around so they are in the correct order - these endedJoel Sing
2014-06-13Add ChaCha20-Poly1305 based ciphersuites.Joel Sing
2014-06-13Switch the AES-GCM cipher suites to SSL_CIPHER_ALGORITHM2_AEAD.Joel Sing
2014-06-13Combine the MAC handling for both !EVP_CIPH_FLAG_AEAD_CIPHER andJoel Sing
2014-06-13Add support for handling SSL_CIPHER_ALGORITHM2_AEAD ciphers, which areJoel Sing
2014-06-13Add an SSL_AEAD_CTX to enable the use of EVP_AEAD with an SSL cipher.Joel Sing
2014-06-13Remove support for the `opaque PRF input' extension, which draft has expiredMiod Vallat
2014-06-12replace atoi() calls with strtol(). Follow the idiomatic pattern in ourTheo de Raadt
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-11Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored sinceJoel Sing
2014-06-11Tsk. Tsk. Someone forgot to compile test the other half.Joel Sing
2014-06-11Disable TLS support...Joel Sing
2014-06-11Provide support for non-funopen systems.Theo de Raadt
2014-06-11More KNF.Joel Sing
2014-06-11Fix memory leak: free s if calloc fails.Loganaden Velvindron
2014-06-11c-file-style hints, begone; ok beckTheo de Raadt
2014-06-10Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receivesTheo de Raadt
2014-06-10KNF.Joel Sing
2014-06-10KNF.Joel Sing
2014-06-10In tls1_cert_verify_mac(), check the return value of EVP_MD_CTX_copy_ex()Joel Sing
2014-06-10Use C99 initialisers for EVP_MD structs, for clarity, grepability and toJoel Sing
2014-06-09use memset instead of bzeroTheo de Raadt
2014-06-09do not include dso.h where it is not needed; ok miodTheo de Raadt
2014-06-08Add an SSL_CIPHER_ALGORITHM2_AEAD flag that is used to mark a cipher asJoel Sing
2014-06-08Add a define for the SSLv3 sequence size and use it, rather than sprinklingJoel Sing
2014-06-08No, we will not be building with OPENSSL_NO_X509_VERIFY. Nuke it andJoel Sing
2014-06-08Clean up BIO_free() handling in bio_ssl.c - BIO_free() has its own NULLJoel Sing
2014-06-08Be explicit with types. No binary change.Joel Sing
2014-06-08Stop using DSO_global_lookup to reach getaddrinfo() and friendsTheo de Raadt
2014-06-08Factor out the part of tls1_change_cipher_state() that is specific toJoel Sing
2014-06-08Factor out the sequence number reset code to aid in upcoming changes.Joel Sing
2014-06-07http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2016265dfbab162ec...Theo de Raadt
2014-06-07Add missing NULL check after calling EVP_PKEY_new_mac_key().Joel Sing
2014-06-07Use !is_read to imply SSL3_CC_WRITE.Joel Sing
2014-06-07Move the export label initialisation into the export handling code, sinceJoel Sing
2014-06-07Remove pointless casts - no binary change.Joel Sing
2014-06-07Rename variables to make it clear that these are only used in the exportJoel Sing
2014-06-07Further clean up of context handling in tls1_change_cipher_state().Joel Sing