hkdf: when HMAC key is all zeros, still set a valid key length
[openssl.git] / ssl / statem /
3 days ago Tim PerryUse empty renegotiate extension instead of SCSV for...
2024-04-09 Richard LevitteCopyright year updates
2024-04-08 Matt CaswellFix unconstrained session cache growth in TLSv1.3
2024-03-14 Frederik Wedel-HeinenAvoid a memcpy in dtls_get_reassembled_message()
2024-01-31 Matt CaswellWhen selecting a method ensure we use the correct clien...
2024-01-18 Frederik Wedel-HeinenMove increment of dtls epoch to change cipher state...
2024-01-03 Frederik Wedel-HeinenSimplify ssl protocol version comparisons.
2023-12-29 Dimitri PapadopoulosFix new typos found by codespell
2023-12-18 Frederik Wedel-HeinenRemove redundant logic for DTLS server version selection
2023-12-18 Frederik Wedel-HeinenHandle tls and dtls server version selection similarly
2023-11-30 Markus MinichmayrFix implementation of `PreferNoDHEKEX` option.
2023-11-27 Hugo LandauMake scsv read-only
2023-11-27 Hugo LandauMake bitmask table read only
2023-11-24 Markus MinichmayrAdd option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the...
2023-11-22 Bernd EdlingerFix a possible use-after-free in custom_exts_free
2023-11-21 Matt CaswellMove freeing of an old record layer to dtls1_clear_sent...
2023-11-21 Neil Hormanzero data in hm_fragment on alloc
2023-11-13 Alexey Fofanovset_client_ciphersuite(): Fix for potential UB if sessi...
2023-11-08 Bernd EdlingerFix a possible memory leak in custom_ext_add
2023-11-02 Hugo LandauTLS: Fix use of an uninitialized value
2023-10-23 Matt CaswellIgnore a bad signature in a CertificateVerify message...
2023-09-13 Dimitri PapadopoulosFix typos found by codespell
2023-09-11 Dimitri Papadopoulos"foo * bar" should be "foo *bar"
2023-09-11 Dimitri PapadopoulosRemove repeated words
2023-09-07 Matt CaswellCopyright year updates
2023-08-25 Tomas MrazAlways use uint8_t for TLS record type
2023-08-24 Matt CaswellChange the TLS handshake keys early if we're not doing...
2023-08-20 shub-alssl_get_min_max_version(): Remove unused variable single
2023-08-15 Matt CaswellTLS KeyUpdate messages are not allowed in QUIC
2023-08-15 Matt CaswellNewSessionTickets with an early_data extension must...
2023-08-04 Frederik Wedel-HeinenResolves some magic values that has a hello_retry_reque...
2023-07-16 Matt CaswellFix ssl3_do_write() to correctly handle retries
2023-06-23 Matt CaswellDon't ask for an invalid group in an HRR
2023-06-15 Dimitri PapadopoulosFix typos found by codespell
2023-06-02 Jairus Christensen[feat] SSL RTT in both client and server statem. SSL_ge...
2023-05-30 Dr. David von Oheimbssl/statem_srvr.c: clean up handling of EVP_PKEY_decryp...
2023-05-05 Matt CaswellBe more accurate about what we accept as a valid DTLS...
2023-05-02 Tomas MrazDo not send the empty renegotiation info SCSV in QUIC
2023-04-12 Matt CaswellMake the data field for get_record() const
2023-03-28 Todd ShortRFC7250 (RPK) support
2023-03-21 VeronikaNguyenAdded `CERTIFICATE_VERIFY_MAX_LENGTH` constant
2023-03-01 Matt CaswellFix early_data age calculation
2023-02-24 Michael Baentschfirst cut at sigalg loading
2023-02-22 Matt CaswellAdd the ability to mutate TLS handshake messages before...
2023-02-20 Philippe Antoinefuzz: fix coverity warnings
2023-02-08 Philippe Antoinefuzz: make post handshake reachable
2023-01-24 Matt CaswellAdd the ability to add a custom extension on an SSL...
2023-01-24 Matt CaswellExtend the new_record_layer function
2023-01-24 Matt CaswellCreate the SSL object for QUIC-TLS
2022-12-12 Tomas MrazMake error reason for disallowed legacy sigalg more...
2022-11-14 Matt CaswellRemove references to read_mac_secret and write_mac_secret
2022-11-14 Matt CaswellRemove remaining refs to enc_(write|read)_ctx/(read...
2022-11-08 Alexander SosedkinFix CertificateCompressionAlgorithm to be read as 2...
2022-11-07 Matt CaswellAssert that we do not exceed the DTLS MTU
2022-11-07 Todd ShortAdd zlib oneshot compression
2022-10-21 Tomas Mrazstack: Do not add error if pop/shift/value accesses...
2022-10-20 Todd ShortFix coverity 1516094 uninit
2022-10-20 Matt CaswellRemove some redundant code
2022-10-20 Matt CaswellRemove the old buffer management code
2022-10-20 Matt CaswellEnsure the record layer is responsible for calculating...
2022-10-20 Matt CaswellConvert dtls_write_records to use standard record layer...
2022-10-18 Todd ShortAdd `for_comp` flag when retrieving certs for compression
2022-10-18 Todd ShortUpdate COMP_METHOD
2022-10-18 Todd ShortAdd support for compressed certificates (RFC8879)
2022-10-18 slontisFix sctp compile errors
2022-10-12 Matt CaswellEnsure that the key share group is allowed for our...
2022-10-12 Matt CaswellUse the configured max_send_fragment value in the write...
2022-10-12 Matt CaswellRemove enc_write_state
2022-10-12 Matt CaswellConvert the TLSv1.3 crypto code to the new write record...
2022-10-07 Matt CaswellPartial revert and reimplement "Enable brainpool curves...
2022-10-05 Richard LevitteStop raising ERR_R_MALLOC_FAILURE in most places
2022-09-28 Todd ShortTest TLS extension ordering
2022-09-23 Matt CaswellMove logic for figuring out the record version out...
2022-09-22 Matt CaswellCorrectly handle a retransmitted ClientHello
2022-09-20 Matt CaswellUse an enum for the return value from a construction...
2022-09-20 Matt CaswellIf a ticket key callback returns 0 in TLSv1.3 don't...
2022-09-16 Dr. David von Oheimbstack.c: add missing direct error reporting and improve...
2022-09-13 Paulissl: modify libssl so that it uses OSSL_TIME
2022-09-09 Todd ShortCleanup EBCDIC string defintions
2022-08-18 PauliCoverity: misuses of time_t
2022-08-18 Matt CaswellRemove redefinition of SSL_AD_NO_ALERT
2022-08-18 Matt CaswellRemove some redundant code
2022-08-18 Matt CaswellMove some fields out of the SSL object and into the...
2022-08-18 Matt CaswellRemove some remaining SSL object references from DTLS...
2022-08-18 Matt CaswellRemove reliance on the SSL object from the DTLS read...
2022-08-18 Matt CaswellMove some DTLS read code into the read record layer
2022-08-18 Matt CaswellRemove some use of SSL object from record layer
2022-08-18 Matt CaswellRemove unneccesary KTLS code from non-KTLS specific...
2022-08-18 Matt CaswellConvert ssl3_get_record to tls_read_record
2022-08-01 Dmitry BelyavskiyCheck that IV length is not less than zero
2022-07-28 Tomas MrazSSL object refactoring using SSL_CONNECTION object
2022-07-13 slontisCheck for EVP_MD being NULL inside ssl.
2022-05-24 Dmitry BelyavskiyUse safe pattern for buffer size determining in case...
2022-05-04 JHH20Remove duplicated #include headers
2022-05-03 Matt CaswellUpdate copyright year
2022-04-14 Bernd EdlingerFix an assertion in the DTLS server code
2022-03-30 Tomas Mraztls_process_server_hello: Disallow repeated HRR
2022-03-25 Todd Shortticket_lifetime_hint may exceed 1 week in TLSv1.3
2022-03-14 Tomas MrazReplace handling of negative verification result with...
2022-02-17 Tomas MrazAdd back check for the DH public key size
next