summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2014-06-13Combine the MAC handling for both !EVP_CIPH_FLAG_AEAD_CIPHER andJoel Sing
2014-06-13Use SSL3_SEQUENCE_SIZE and if we're going to preincrement we may as wellJoel Sing
2014-06-13Add support for handling SSL_CIPHER_ALGORITHM2_AEAD ciphers, which areJoel Sing
2014-06-13Add an SSL_AEAD_CTX to enable the use of EVP_AEAD with an SSL cipher.Joel Sing
2014-06-13delete a lie; replace with a truthTheo de Raadt
2014-06-13Add new getentropy() system call. Code and pressure from matthew.Theo de Raadt
2014-06-13Remove support for the `opaque PRF input' extension, which draft has expiredMiod Vallat
2014-06-13crank majorTheo de Raadt
2014-06-13Add timingsafe_memcmp().Matthew Dempsky
2014-06-13Add support for MAP_INHERIT_ZERO.Matthew Dempsky
2014-06-12replace atoi() calls with strtol(). Follow the idiomatic pattern in ourTheo de Raadt
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-12Disable the "switch to insertion sort" optimization to avoid quadraticTodd C. Miller
2012-10-13import OpenSSL-1.0.1cDamien Miller
2010-10-01import OpenSSL-1.0.0aDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2006-06-27import of openssl-0.9.7jDamien Miller
2014-06-11Really remove the obsolete manpages left by earlier commitChristopher Zimmermann
2014-06-11Remove manpages about deprecated RFC2292 ancillary data convenience functions.Christopher Zimmermann
2014-06-11Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored sinceJoel Sing
2014-06-11Tsk. Tsk. Someone forgot to compile test the other half.Joel Sing
2014-06-11Disable TLS support...Joel Sing
2014-06-11Provide support for non-funopen systems.Theo de Raadt
2014-06-11More KNF.Joel Sing
2014-06-11Fix memory leak: free s if calloc fails.Loganaden Velvindron
2014-06-11c-file-style hints, begone; ok beckTheo de Raadt
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2014-06-10Check return value of EVP_MD_CTX_copy_ex() in ssl3_handshake_mac()Loganaden Velvindron
2014-06-10Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receivesTheo de Raadt
2014-06-10KNF.Joel Sing
2014-06-10KNF.Joel Sing
2014-06-10Remove pointless casts and use c instead of &c[0], since it is the sameJoel Sing
2014-06-10In tls1_cert_verify_mac(), check the return value of EVP_MD_CTX_copy_ex()Joel Sing
2014-06-10Use C99 initialisers for EVP_MD structs, for clarity, grepability and toJoel Sing
2014-06-10More KNF.Joel Sing
2014-06-10Avoid potential NULL pointer function calls in n_ssl3_mac() by checkingJoel Sing
2014-06-10Multiple fixes for ssl3_digest_cached_records() - if EVP_MD_CTX_create()Joel Sing
2014-06-10Ensure ssl3_final_finish_mac() returns failure if either the MD5 or SHA1Joel Sing
2014-06-10mop up ifndef KERNEL goo; ok miodTheo de Raadt
2014-06-09use memset instead of bzeroTheo de Raadt
2014-06-09do not include dso.h where it is not needed; ok miodTheo de Raadt
2014-06-09Nuke the machinery to sync libkern with libc, it's not been used in theMiod Vallat
2014-06-09More KNF.Joel Sing
2014-06-08Add an SSL_CIPHER_ALGORITHM2_AEAD flag that is used to mark a cipher asJoel Sing
2014-06-08Add a define for the SSLv3 sequence size and use it, rather than sprinklingJoel Sing
2014-06-08No, we will not be building with OPENSSL_NO_X509_VERIFY. Nuke it andJoel Sing
2014-06-08Clean up BIO_free() handling in bio_ssl.c - BIO_free() has its own NULLJoel Sing
2014-06-08Be explicit with types. No binary change.Joel Sing
2014-06-08Stop using DSO_global_lookup to reach getaddrinfo() and friendsTheo de Raadt
2014-06-08Factor out the part of tls1_change_cipher_state() that is specific toJoel Sing