Fix infinite loop in CMS
[openssl.git] / ssl /
2015-06-11 Matt CaswellMore ssl_session_dup fixes
2015-06-10 Kurt RoeckxOnly allow a temporary rsa key exchange when they key...
2015-06-10 Kurt RoeckxProperly check certificate in case of export ciphers.
2015-06-10 Matt CaswellDTLS handshake message fragments musn't span packets
2015-06-10 Matt CaswellTighten extension handling
2015-06-10 Matt CaswellFix Kerberos issue in ssl_session_dup
2015-06-08 Emilia KasperUse CRYPTO_memcmp in s3_cbc.c
2015-06-04 Matt CaswellRemove misleading comment
2015-06-04 Matt CaswellClean premaster_secret for GOST
2015-06-04 Matt CaswellClean Kerberos pre-master secret
2015-06-02 Matt CaswellFix race condition in NewSessionTicket
2015-06-02 Matt CaswellClear state in DTLSv1_listen
2015-05-31 Matt CaswellCheck the message type requested is the type received...
2015-05-26 Emilia KasperFix ssltest to use 1024-bit DHE parameters
2015-05-26 Matt CaswellDon't check for a negative SRP extension size
2015-05-25 Matt CaswellDon't send an alert if we've just received one
2015-05-23 Richard LevitteFix the update target and remove duplicate file updates
2015-05-22 LubomLost alert in DTLS
2015-05-20 Kurt RoeckxCorrectly check for export size limit
2015-05-20 Emilia Kasperclient: reject handshakes with DH parameters < 768...
2015-05-13 Matt CaswellDon't allow a CCS when expecting a CertificateVerify
2015-05-11 Matt CaswellCheck sk_SSL_CIPHER_new_null return value
2015-05-05 Matt CaswellAdd more error state transitions (DTLS)
2015-05-05 Matt CaswellAdd more error state transitions (client)
2015-05-05 Matt CaswellAdd more error state transitions
2015-05-05 Matt CaswellAdd Error state
2015-04-30 Matt CaswellAdd sanity check to ssl_get_prev_session
2015-04-30 Matt CaswellSanity check the return from final_finish_mac
2015-04-30 Matt CaswellAdd sanity check in ssl3_cbc_digest_record
2015-04-30 Matt CaswellSanity check EVP_CTRL_AEAD_TLS_AAD
2015-04-29 Matt CaswellAdd length sanity check in SSLv2 n_do_ssl_write()
2015-04-21 Emilia KasperRepair EAP-FAST session resumption
2015-04-21 Emilia Kaspermake update
2015-04-17 Emilia KasperError out immediately on empty ciphers list.
2015-04-16 Viktor DukhovniCode style: space after 'if'
2015-04-14 Matt CaswellFix ssl_get_prev_session overrun
2015-04-14 Matt CaswellCheck for ClientHello message overruns
2015-04-08 Emilia KasperHarden SSLv2-supporting servers against Bleichenbacher...
2015-03-25 Matt CaswellFix RAND_(pseudo_)?_bytes returns
2015-03-24 Kurt RoeckxDon't send a for ServerKeyExchange for kDHr and kDHd
2015-03-19 Matt CaswellFix unsigned/signed warnings
2015-03-19 Emilia KasperFix reachable assert in SSLv2 servers.
2015-03-17 Matt CaswellAdd sanity check to PRF
2015-03-11 Matt CaswellCleanse buffers
2015-03-10 Emilia KasperHarmonize return values in dtls1_buffer_record
2015-03-08 Dr. Stephen Hensonfix warning
2015-03-07 Kurt RoeckxRemove export ciphers from the DEFAULT cipher list
2015-03-05 Kurt CancemiUse constants not numbers
2015-02-27 Matt CaswellFix d2i_SSL_SESSION for DTLS1_BAD_VER
2015-02-27 Matt CaswellFixed missing return value checks.
2015-02-27 Matt CaswellFix missing return value checks.
2015-02-27 Matt CaswellFix no-ec warning
2015-02-12 Eric DequinMissing OPENSSL_free on error path.
2015-02-06 Matt CaswellFix error handling in ssltest
2015-01-27 Matt CaswellMake DTLS always act as if read_ahead is set. The actua...
2015-01-22 Matt CaswellRe-align some comments after running the reformat script. OpenSSL_1_0_1-post-reformat
2015-01-22 Matt CaswellRerun util/openssl-format-source -v -c . OpenSSL_1_0_1-post-auto-reformat
2015-01-22 Matt CaswellRun util/openssl-format-source -v -c .
2015-01-22 Matt CaswellMore tweaks for comments due indent issues OpenSSL_1_0_1-pre-auto-reformat
2015-01-22 Matt CaswellTweaks for comments due to indent's inability to handle...
2015-01-22 Matt CaswellMove more comments that confuse indent
2015-01-22 Matt CaswellFix indent comment corruption issue
2015-01-22 Matt CaswellFix strange formatting by indent
2015-01-22 Matt Caswellindent has problems with comments that are on the right...
2015-01-22 Matt CaswellFix source where indent will not be able to cope
2015-01-22 Matt CaswellAdditional comment changes for reformat of 1.0.1
2015-01-22 Matt CaswellFurther comment changes for reformat
2015-01-22 Tim Hudsonmark all block comments that need format preserving...
2015-01-08 Matt CaswellA memory leak can occur in dtls1_buffer_record if eithe...
2015-01-08 Dr. Stephen HensonUnauthenticated DH client certificate fix.
2015-01-08 Matt CaswellFollow on from CVE-2014-3571. This fixes the code that...
2015-01-08 Dr. Stephen HensonFix crash in dtls1_get_record whilst in the listen...
2015-01-07 Dr. Stephen Hensonfix error discrepancy
2015-01-06 Emilia KasperOnly inherit the session ID context in SSL_set_SSL_CTX...
2015-01-06 Dr. Stephen HensonOnly allow ephemeral RSA keys in export ciphersuites.
2015-01-05 Dr. Stephen HensonECDH downgrade bug fix.
2015-01-05 Adam LangleyEnsure that the session ID context of an SSL* is updated
2015-01-02 Dr. Stephen HensonClear existing extension state.
2014-12-17 Richard LevitteClear warnings/errors within TLS_DEBUG code sections
2014-12-17 Richard LevitteClear warnings/errors within KSSL_DEBUG code sections
2014-12-17 Richard LevitteClear warnings/errors within CIPHER_DEBUG code sections
2014-12-17 Richard LevitteClear warnings/errors within CIPHER_DEBUG code sections
2014-12-17 Adam LangleyPremaster secret handling fixes
2014-12-16 Matt CaswellAdd OPENSSL_NO_ECDH guards
2014-12-16 Matt CaswellRemove extraneous white space, and add some braces
2014-12-16 Matt CaswellDTLS fixes for signed/unsigned issues
2014-12-15 Matt CaswellCheckout return value of dtls1_output_cert_chain
2014-12-15 Matt CaswellCheck return value of ssl3_output_cert_chain
2014-12-13 Matt CaswellFix memory leak in s2_srvr.c if BUF_MEM_grow fails
2014-12-13 Matt CaswellFixed memory leak if BUF_MEM_grow fails
2014-12-08 Matt CaswellFixed memory leak in the event of a failure of BUF_MEM_grow
2014-12-08 Matt CaswellFix memory leak in SSL_new if errors occur.
2014-12-05 Emilia KasperReject elliptic curve lists of odd lengths.
2014-12-04 Matt CaswellRemove incorrect code inadvertently introduced through...
2014-12-03 Matt CaswellRemove "#if 0" code
2014-12-03 Matt CaswellOnly use the fallback mtu after 2 unsuccessful retransm...
2014-12-03 Matt CaswellIf we really get a situation where the underlying mtu...
2014-12-03 Matt CaswellFix dtls_query_mtu so that it will always either comple...
2014-12-03 Matt CaswellRemove instances in libssl of the constant 28 (for...
2014-12-03 Matt CaswellThe first call to query the mtu in dtls1_do_write corre...
next