Make OCSP response verification more flexible.
[openssl.git] / ssl /
2015-03-19 Matt CaswellFix unsigned/signed warnings
2015-03-19 Emilia KasperFix reachable assert in SSLv2 servers.
2015-03-11 Matt CaswellCleanse buffers
2015-03-08 Dr. Stephen Hensonfix warning
2015-03-07 Kurt RoeckxRemove export ciphers from the DEFAULT cipher list
2015-02-06 Matt CaswellFix error handling in ssltest
2015-01-22 Matt CaswellRe-align some comments after running the reformat script. OpenSSL_1_0_0-post-reformat
2015-01-22 Matt CaswellRerun util/openssl-format-source -v -c . OpenSSL_1_0_0-post-auto-reformat
2015-01-22 Matt CaswellRun util/openssl-format-source -v -c .
2015-01-22 Matt CaswellYet more changes to comments OpenSSL_1_0_0-pre-auto-reformat
2015-01-22 Matt CaswellMore tweaks for comments due indent issues
2015-01-22 Matt CaswellTweaks for comments due to indent's inability to handle...
2015-01-22 Matt CaswellMove more comments that confuse indent
2015-01-22 Matt CaswellFix indent comment corruption issue
2015-01-22 Matt CaswellFix strange formatting by indent
2015-01-22 Matt Caswellindent has problems with comments that are on the right...
2015-01-22 Matt CaswellFix source where indent will not be able to cope
2015-01-22 Matt CaswellAdditional comment changes for reformat of 1.0.0
2015-01-22 Matt CaswellFurther comment amendments to preserve formatting prior...
2015-01-22 Tim Hudsonmark all block comments that need format preserving...
2015-01-08 Matt CaswellA memory leak can occur in dtls1_buffer_record if eithe...
2015-01-08 Dr. Stephen HensonUnauthenticated DH client certificate fix.
2015-01-08 Matt CaswellFollow on from CVE-2014-3571. This fixes the code that...
2015-01-08 Dr. Stephen HensonFix crash in dtls1_get_record whilst in the listen...
2015-01-07 Dr. Stephen Hensonfix error discrepancy
2015-01-06 Dr. Stephen HensonOnly allow ephemeral RSA keys in export ciphersuites.
2015-01-05 Dr. Stephen HensonECDH downgrade bug fix.
2014-12-17 Adam LangleyPremaster secret handling fixes
2014-12-16 Matt CaswellAdd OPENSSL_NO_ECDH guards
2014-12-16 Matt CaswellRemove extraneous white space, and add some braces
2014-12-16 Matt CaswellDTLS fixes for signed/unsigned issues
2014-12-15 Matt CaswellCheckout return value of dtls1_output_cert_chain
2014-12-15 Matt CaswellCheck return value of ssl3_output_cert_chain
2014-12-13 Matt CaswellFix memory leak in s2_srvr.c if BUF_MEM_grow fails
2014-12-13 Matt CaswellFixed memory leak if BUF_MEM_grow fails
2014-12-08 Matt CaswellFixed memory leak in the event of a failure of BUF_MEM_grow
2014-12-08 Matt CaswellFix memory leak in SSL_new if errors occur.
2014-12-04 Matt CaswellRemove incorrect code inadvertently introduced through...
2014-12-03 Matt CaswellRemove "#if 0" code
2014-12-03 Matt CaswellOnly use the fallback mtu after 2 unsuccessful retransm...
2014-12-03 Matt CaswellIf we really get a situation where the underlying mtu...
2014-12-03 Matt CaswellFix dtls_query_mtu so that it will always either comple...
2014-12-03 Matt CaswellRemove instances in libssl of the constant 28 (for...
2014-12-03 Matt CaswellThe first call to query the mtu in dtls1_do_write corre...
2014-12-03 Matt CaswellThe SSL_OP_NO_QUERY_MTU option is supposed to stop...
2014-12-03 Matt CaswellVerify that we have a sensible message len and fail...
2014-11-28 Richard Levitte[PR3597] Advance to the next state variant when reusing...
2014-11-27 Matt CaswellFixed warning in ssl2_enc
2014-11-27 Matt CaswellCheck EVP_Cipher return values for SSL2
2014-11-27 Matt CaswellAdd checks to the return value of EVP_Cipher to prevent...
2014-11-27 Matt CaswellRemove redundant checks in ssl_cert_dup. This was causi...
2014-11-26 Matt CaswellFixed memory leak due to incorrect freeing of DTLS...
2014-11-25 Matt CaswellCorrected comments in ssl.h about SSLv23_method and...
2014-10-21 Bodo MoellerFix and improve SSL_MODE_SEND_FALLBACK_SCSV documentation.
2014-10-21 Bodo MoellerWhen processing ClientHello.cipher_suites, don't ignore...
2014-10-21 Kurt RoeckxKeep old method in case of an unsupported protocol
2014-10-15 Geoff ThorpeFix no-ssl3 configuration option
2014-10-15 Dr. Stephen HensonFix for session tickets memory leak.
2014-10-15 Richard LevitteSpaces were added in some strings for better readabilit...
2014-10-15 Richard LevitteAdjust VMS build to Unix build. Most of all, make...
2014-10-15 Richard LevitteMake sure that disabling the MAYLOSEDATA3 warning is...
2014-10-15 Bodo MoellerOops -- fix typo in coment added with TLS_FALLBACK_SCSV...
2014-10-15 Bodo MoellerSupport TLS_FALLBACK_SCSV.
2014-09-24 Emilia KasperRT3067: simplify patch
2014-09-24 Adam LangleyThis change alters the processing of invalid, RSA pre...
2014-09-24 Emilia KasperRT3066: rewrite RSA padding checks to be slightly more...
2014-09-21 Tim HudsonFixed error introduced in commit f2be92b94dad3c6cbdf79d...
2014-09-05 Adam Langleypsk_client_callback, 128-byte id bug.
2014-08-28 Emilia KasperConstant-time utilities
2014-08-22 Adam LangleyRT3060: Limit the number of empty records.
2014-08-15 Matt CaswellFixed out-of-bounds read errors in ssl3_get_key_exchange.
2014-08-06 Gabor TyukaszFix race condition in ssl_parse_serverhello_tlsext
2014-08-06 Emilia KäsperFix DTLS anonymous EC(DH) denial of service
2014-08-06 David BenjaminFix protocol downgrade bug in case of fragmented packets
2014-08-06 Adam LangleyRemove some duplicate DTLS code.
2014-08-06 Matt CaswellApplying same fix as in dtls1_process_out_of_seq_messag...
2014-08-06 Adam LangleyFix return code for truncated DTLS fragment.
2014-08-06 Adam LangleyFix memory leak from zero-length DTLS fragments.
2014-08-06 Matt CaswellFix DTLS handshake message size checks.
2014-08-06 Matt CaswellAdded comment for the frag->reassembly == NULL case...
2014-08-06 Adam LangleyAvoid double free when processing DTLS packets.
2014-07-15 Dr. Stephen HensonFix DTLS certificate requesting code.
2014-07-15 Dr. Stephen HensonAdd ECC extensions with DTLS.
2014-07-14 Dr. Stephen HensonUse more common name for GOST key exchange.
2014-07-13 Peter MosmansAdd names of GOST algorithms.
2014-07-05 Dr. Stephen HensonDon't limit message sizes in ssl3_get_cert_verify.
2014-07-02 Thijs AlkemadeMake disabling last cipher work.
2014-06-29 Dr. Stephen HensonFix memory leak.
2014-06-27 Dr. Stephen HensonDon't disable state strings with no-ssl2
2014-06-27 Ken BallouRemove redundant check.
2014-06-27 Tomas MrazDon't advertise ECC ciphersuits in SSLv2 compatible...
2014-06-22 Miod VallatFix off-by-one errors in ssl_cipher_get_evp()
2014-06-22 Matt CaswellRevert "Fix off-by-one errors in ssl_cipher_get_evp()"
2014-06-14 Dr. Stephen HensonAccept CCS after sending finished.
2014-06-13 Matt CaswellFixed incorrect return code handling in ssl3_final_fini...
2014-06-13 Matt CaswellRevert "Fixed incorrect return code handling in ssl3_fi...
2014-06-12 Kurt CancemiFix off-by-one errors in ssl_cipher_get_evp()
2014-06-12 Ben LaurieAllow the maximum value.
2014-06-10 Matt CaswellFixed incorrect return code handling in ssl3_final_fini...
2014-06-10 Dr. Stephen HensonFix null pointer errors.
next