Reject compressed point format with TLS 1.3
[openssl.git] / ssl / record /
2017-02-16 Matt CaswellRemove an OPENSSL_assert() and replace with a soft...
2017-02-16 Matt CaswellDon't change the state of the ETM flags until CCS proce...
2017-02-08 Matt CaswellFix crash in tls13_enc
2017-02-08 Dr. Stephen HensonUse contants for Chacha/Poly, redo algorithm expressions.
2017-02-08 Dr. Stephen HensonAdd CCM mode support for TLS 1.3
2017-01-30 Matt CaswellMove TLSv1.3 Session Ticket processing into the state...
2017-01-30 Matt CaswellMove state machine knowledge out of the record layer
2017-01-30 Matt CaswellRemove use of the SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS...
2017-01-30 Matt CaswellChangeCipherSpec is not allowed in TLSv1.3
2017-01-24 Todd ShortCleanup EVP_CIPH/EP_CTRL duplicate defines
2017-01-23 Andy PolyakovReplace div-spoiler hack with simpler code
2017-01-10 Matt CaswellAlways use TLSv1.0 for record layer version in TLSv1.3
2017-01-10 Matt CaswellTemporarily ignore NewSessionTickets for TLS1.3
2017-01-10 Matt CaswellEnsure the record sequence number gets incremented
2017-01-10 Matt CaswellMark a HelloRequest record as read if we ignore it
2016-12-12 Matt CaswellFix a leak in SSL_clear()
2016-12-05 Matt CaswellChange various repeated wr[someindex]/pkt[someindex...
2016-12-05 Matt CaswellVarious style fixes from the TLSv1.3 record changes...
2016-12-05 Matt CaswellChange various repeated rr[someindex] references to...
2016-12-05 Matt CaswellEnsure compressdata is always initialised
2016-12-05 Matt CaswellAdd a TLS1.3 TODO for the msg callback
2016-12-05 Matt CaswellUpdate the record layer to use TLSv1.3 style record...
2016-12-05 Matt CaswellConvert TLS Record receipt to use PACKET
2016-12-05 Matt CaswellConvert TLS record construction to use WPACKET
2016-11-29 Matt CaswellFix some style issues in the TLSv1.3 nonce construction...
2016-11-29 Matt CaswellUse the TLSv1.3 nonce construction
2016-11-21 Kurt RoeckxMake SSL_read and SSL_write return the old behaviour...
2016-11-17 Matt CaswellFix missing SSL_IS_TLS13(s) usage
2016-11-13 Richard LevitteRemove heartbeat support
2016-11-07 Matt CaswellIgnore the record version in TLS1.3
2016-11-04 Matt CaswellFix some style issues from libssl size_tify review
2016-11-04 Matt CaswellRename all "read" variables with "readbytes"
2016-11-04 Matt CaswellFix a shadowed variable declaration warning picked...
2016-11-04 Matt CaswellEnsure SSL_DEBUG works following size_t changes
2016-11-04 Matt CaswellFix some bogus warnings about uninitialised variables
2016-11-04 Matt CaswellRemove a stray TODO that has already been fixed
2016-11-04 Matt CaswellProvide some constant time functions for dealing with...
2016-11-04 Matt CaswellFix misc size_t issues causing Windows warnings in...
2016-11-04 Matt CaswellConvert the mac functions to just return 1 for success...
2016-11-04 Matt CaswellFix some ssl3_record code witch converstion to/from...
2016-11-04 Matt CaswellFix some missed size_t updates
2016-11-04 Matt CaswellResolve some outstanding size_t related TODOs
2016-11-04 Matt CaswellConvert some misc record layer functions for size_t
2016-11-04 Matt CaswellConvert SSL3_RECORD_clear() and SSL3_RECORD_release...
2016-11-04 Matt CaswellConvert libssl writing for size_t
2016-11-04 Matt CaswellFurther libssl size_t-ify of reading
2016-11-04 Matt CaswellConvert record layer to use size_t
2016-11-02 Matt CaswellFail if an unrecognised record type is received
2016-11-02 Matt CaswellFix read_ahead
2016-10-28 Matt CaswellA zero return from BIO_read()/BIO_write() could be...
2016-10-17 David WoodhouseFix encrypt-then-mac implementation for DTLS
2016-09-29 Matt CaswellFix an Uninit read in DTLS
2016-09-22 Matt CaswellFix a hang with SSL_peek()
2016-09-21 Matt CaswellDon't allow too many consecutive warning alerts
2016-09-15 Matt CaswellRevert "Abort on unrecognised warning alerts"
2016-09-13 Matt CaswellAbort on unrecognised warning alerts
2016-08-24 Matt CaswellRemove some dead code from rec_layer_s3.c
2016-08-22 Matt CaswellPrevent DTLS Finished message injection
2016-08-19 Matt CaswellFix DTLS replay protection
2016-08-19 Matt CaswellFix DTLS unprocessed records bug
2016-08-18 Emilia KasperIndent ssl/
2016-08-16 Matt CaswellEnsure we unpad in constant time for read pipelining
2016-08-16 David WoodhouseFix satsub64be() to unconditionally use 64-bit integers
2016-08-15 Matt CaswellAddress feedback on SSLv2 ClientHello processing
2016-08-15 Matt CaswellSend an alert if we get a non-initial record with the...
2016-08-15 Matt CaswellAddress feedback on SSLv2 ClientHello processing
2016-08-08 Adam LangleyFix test of first of 255 CBC padding bytes.
2016-08-04 David WoodhouseFix ubsan 'left shift of negative value -1' error in...
2016-08-04 David WoodhouseMake DTLS1_BAD_VER work with DTLS_client_method()
2016-07-30 Matt CaswellFix crash as a result of MULTIBLOCK
2016-07-29 Matt CaswellMake the checks for an SSLv2 style record stricter
2016-07-20 FdaSilvaYYFix a few if(, for(, while( inside code.
2016-07-15 Dr. Stephen Hensoncheck return values for EVP_Digest*() APIs
2016-06-29 FdaSilvaYYWhitespace cleanup in ssl folder
2016-06-27 Matt CaswellEnsure read records are marked as read
2016-06-18 FdaSilvaYYUseless header include of openssl/rand.h
2016-06-08 Todd ShortAlways use session_ctx when removing a session
2016-06-07 Matt CaswellReject out of context empty records
2016-06-07 Matt CaswellFix pipelining bug
2016-05-26 Matt CaswellFix some suspect warnings on Windows
2016-05-17 Rich SalzCopyright consolidation 01/10
2016-05-17 Matt CaswellAdd a comment to explain the use of |num_recs|
2016-05-17 Matt CaswellUse the current record offset in ssl3_get_record
2016-05-17 Matt CaswellThere is only one read buffer
2016-05-02 Andy Polyakovssl/record/rec_layer_s3.c: fix typo from previous commit.
2016-05-02 Andy PolyakovRemove obsolete defined(__INTEL__) condition.
2016-04-28 FdaSilvaYYvarious spelling fixes
2016-04-04 Rich SalzRevert "various spelling fixes"
2016-04-04 FdaSilvaYYvarious spelling fixes
2016-03-31 Rich SalzUse return "" not set a var and return.
2016-03-08 Matt CaswellFix building without multiblock support
2016-03-07 Matt CaswellRename the numpipes argument to ssl3_enc/tls1_enc
2016-03-07 Matt CaswellRename a function
2016-03-07 Matt CaswellRemove the wrec record layer field
2016-03-07 Matt CaswellUpdate a comment
2016-03-07 Matt CaswellAdd an SSL_has_pending() function
2016-03-07 Matt CaswellAdd an ability to set the SSL read buffer size
2016-03-07 Matt CaswellLazily initialise the compression buffer
2016-03-07 Matt CaswellImplement read pipeline support in libssl
2016-03-07 Matt CaswellImplement write pipeline support in libssl
next