Check that SCT timestamps are not in the future
[openssl.git] / ssl / ssl_lib.c
2016-11-15 Rob PercivalCheck that SCT timestamps are not in the future
2016-11-10 Matt CaswellRename the Elliptic Curves extension to supported_groups
2016-11-04 Matt CaswellRename all "read" variables with "readbytes"
2016-11-04 Matt CaswellFix misc size_t issues causing Windows warnings in...
2016-11-04 Matt CaswellConvert SSL BIO to use SSL_write_ex().
2016-11-04 Matt CaswellFix some missed size_t updates
2016-11-04 Matt CaswellConvert some libssl local functions to size_t
2016-11-04 Matt CaswellUpdate numerous misc libssl fields to be size_t
2016-11-04 Matt CaswellConvert master_secret_size code to size_t
2016-11-04 Matt CaswellConvert some misc record layer functions for size_t
2016-11-04 Matt CaswellConvert libssl writing for size_t
2016-11-04 Matt CaswellFurther libssl size_t-ify of reading
2016-11-02 Matt CaswellConvert a big "if" into a "switch"
2016-11-02 Matt CaswellAdd the SSL_METHOD for TLSv1.3 and all other base chang...
2016-11-01 Todd ShortAdd SSL_CTX_set1_cert_store()
2016-09-21 Rich SalzRevert "Constify code about X509_VERIFY_PARAM"
2016-09-18 FdaSilvaYYConstify code about X509_VERIFY_PARAM
2016-08-24 Rob PercivalFix comment about return value of ct_extract_tls_extens...
2016-08-18 Emilia KasperIndent ssl/
2016-08-15 Rob PercivalImproves CTLOG_STORE setters
2016-08-04 David WoodhouseFix SSL_export_keying_material() for DTLS1_BAD_VER
2016-07-29 Matt CaswellSimplify and rename SSL_set_rbio() and SSL_set_wbio()
2016-07-29 Matt CaswellDon't double free the write bio
2016-07-20 Matt CaswellNever expose ssl->bbio in the public API.
2016-07-20 FdaSilvaYYFix a few if(, for(, while( inside code.
2016-07-12 Viktor DukhovniPerform DANE-EE(3) name checks by default
2016-06-21 FdaSilvaYYSpelling... and more spelling
2016-06-11 Kurt RoeckxDon't compare a just free()d pointer
2016-06-08 Rich SalzAdd some accessor API's
2016-06-08 Todd ShortAlways use session_ctx when removing a session
2016-05-31 Dr. Stephen Hensonreturn error in ct_move_scts()
2016-05-20 Matt CaswellSimplify SSL BIO buffering logic
2016-05-19 Viktor DukhovniWhen strict SCT fails record verification failure
2016-05-17 Rich SalzCopyright consolidation 01/10
2016-05-16 TJ Saunderssession tickets: Use sizeof() for the various fields
2016-05-16 Alessandro GhediniAdd SSL_client_version() getter function
2016-05-16 jfigusPropagate tlsext_status_type from SSL_CTX to SSL
2016-05-16 FdaSilvaYYUnify <TYPE>_up_ref methods signature and behaviour.
2016-05-09 FdaSilvaYYfix tab-space mixed indentation
2016-05-05 Matt CaswellHandle no async jobs in libssl
2016-04-28 FdaSilvaYYAdd checks on CRYPTO_new_ex_data return value
2016-04-28 FdaSilvaYYvarious spelling fixes
2016-04-28 Matt CaswellDon't leak memory on error path in dane_ctx_enable()
2016-04-27 Matt Caswellsplit_send_fragment should always be less than or equal...
2016-04-22 Viktor DukhovniEnabled DANE only when at least one TLSA RR was added
2016-04-11 Kazuki YamaguchiAdd SSL_CTX_get_ciphers()
2016-04-08 Rich SalzAdd SSL_DANE typedef for consistency.
2016-04-07 Andy PolyakovClean-up *_DEBUG options.
2016-04-07 Viktor DukhovniSuppress CT callback as appropriate
2016-04-06 Matt CaswellFix no-ocsp
2016-04-04 Rich SalzRevert "various spelling fixes"
2016-04-04 FdaSilvaYYvarious spelling fixes
2016-03-29 Matt CaswellMake BIO opaque
2016-03-20 Rich SalzRemove #error from include files.
2016-03-17 Viktor DukhovniReport TLS 1.0 as backwards-compatible TLSv1
2016-03-10 Rob Percivalcheck reviewer --reviewer=emilia
2016-03-09 Kurt RoeckxDeprecate the use of version-specific methods
2016-03-09 Kurt RoeckxAdd support for minimum and maximum protocol version...
2016-03-09 Kurt RoeckxMake function to convert version to string
2016-03-09 Kurt RoeckxConstify security callbacks
2016-03-09 Rob PercivalDo not display a CT log error message if CT validation...
2016-03-09 Richard LevitteCounter mixed signedness with a cast
2016-03-08 Alessandro GhediniConvert CRYPTO_LOCK_SSL_* to new multi-threading API
2016-03-08 Todd ShortGH787: Fix ALPN
2016-03-07 Matt CaswellFix erroneous fall thgrough in switch statement
2016-03-07 Matt CaswellAdd an SSL_has_pending() function
2016-03-07 Matt CaswellAdd an ability to set the SSL read buffer size
2016-03-07 Matt CaswellImplement read pipeline support in libssl
2016-03-07 Matt CaswellImplement write pipeline support in libssl
2016-03-07 Rob PercivalUse s->session->peer instead of calling SSL_get_peer_ce...
2016-03-07 Rob PercivalLowercase name of SSL_validate_ct as it is an internal...
2016-03-07 Rob PercivalCT code now calls X509_free() after calling SSL_get_pee...
2016-03-04 Rob PercivalAdds CT validation to SSL connections
2016-03-02 Christian HeimesProvide getters for default_passwd_cb and userdata
2016-02-29 Matt CaswellRefactor the async wait fd logic
2016-02-25 Rich SalzGH715: ENGINE_finish can take NULL
2016-02-25 Rich SalzGH235: Set error status on malloc failure
2016-02-24 Dr. Stephen HensonRemove unused parameter in ssl_set_masks().
2016-02-18 Rich SalzRemove outdated DEBUG flags.
2016-02-18 Zhao JunwangGH706: Use NULL for pointer compare.
2016-02-17 Dr. Stephen Hensonremove redundant code
2016-02-11 Dr. Stephen HensonRemove static ECDH support.
2016-02-11 Rich SalzMove to REF_DEBUG, for consistency.
2016-02-10 Matt CaswellThe new init functions can now fail so shouldn't be...
2016-02-10 Rich SalzRename INIT funtions, deprecate old ones.
2016-02-09 Matt CaswellAuto init/de-init libssl
2016-02-08 Viktor DukhovniSuppress DANE TLSA reflection when verification fails
2016-02-08 Dr. Stephen HensonDeprecate undocumented SSL_cache_hit().
2016-02-08 Matt CaswellHandle SSL_shutdown while in init more appropriately #2
2016-02-06 Dr. Stephen HensonAdd SSL_get0_verified_chain() to return verified chain...
2016-02-03 Dmitry-MeGH614: Use memcpy()/strdup() when possible
2016-02-03 Emilia KasperRT3234: disable compression
2016-01-29 Matt CaswellImplement Async SSL_shutdown
2016-01-26 Matt CaswellAdd SSL_up_ref() and SSL_CTX_up_ref()
2016-01-22 Alessandro GhediniFix build failure with CIPHER_DEBUG
2016-01-20 Matt CaswellHandle SSL_shutdown while in init more appropriately
2016-01-16 Viktor DukhovniBetter invalid SNI name error handling
2016-01-14 Rich SalzMake SSL_set_debug deprecated in 1.1
2016-01-14 Rich SalzRT4232: Extra space in help message.
2016-01-12 Richard LevitteAdapt all EVP_CIPHER_CTX users for it becoming opaque
next