tls_process_server_hello: Disallow repeated HRR
[openssl.git] / ssl / statem / statem_clnt.c
2022-03-30 Tomas Mraztls_process_server_hello: Disallow repeated HRR
2022-03-14 Tomas MrazReplace handling of negative verification result with...
2022-01-19 Paulissl: better support TSAN operations
2022-01-09 yangyangtiantianlo... Delete unused param about get_construct_message_f
2022-01-07 Peiwei HuFix: some patches related to error exiting
2022-01-07 xkernelfix the return check of EVP_PKEY_CTX_ctrl() in 5 spots
2022-01-06 xkernelproperly free the resource from CRYPTO_malloc
2021-12-21 Dr. David von Oheimbadd OSSL_STACK_OF_X509_free() for commonly used pattern
2021-12-14 Matt CaswellFix invalid handling of verify errors in libssl
2021-10-28 x2018fix some code with obvious wrong coding style
2021-07-21 Dr. David von Oheimbtls_process_{client,server}_certificate(): allow verify...
2021-07-06 Matt CaswellAvoid "excessive message size" for session tickets
2021-06-10 Todd ShortOptimize session cache flushing
2021-06-02 Paulitls: remove TODOs
2021-06-01 Tomas MrazRename all getters to use get/get0 in name
2021-06-01 Paulissl: ass size_t to RAND_bytes_ex()
2021-05-29 Paulissl: add zero strenght arguments to BN and RAND RNG...
2021-05-26 Rich SalzUse "" for include internal/xxx
2021-05-15 Benjamin KadukPromote SSL_get_negotiated_group() for non-TLSv1.3
2021-05-01 Dmitry BelyavskiyUse OCSP-specific error code for clarity
2021-04-12 Shane LontisReplace OSSL_PARAM_BLD_free_params() with OSSL_PARAM_fr...
2021-04-09 Nan XiaoFix typo in statem_clnt.c
2021-03-25 Matt CaswellEnsure buffer/length pairs are always in sync
2021-03-18 Paulissl: fix coverity 1451515: out of bounds memory access
2021-03-18 Shane LontisAdd ossl_gost symbols
2021-03-11 Paulissl: support params arguments to init functions
2021-02-15 Matt CaswellImplement EVP_PKEY_param_check_quick() and use it in...
2021-02-12 Matt CaswellDeprecate the libssl level SRP APIs
2021-02-10 Benjamin KadukRemove unused 'peer_type' from SSL_SESSION
2021-02-08 Shane LontisSimplify the EVP_PKEY_XXX_fromdata_XX methods.
2021-02-05 Matt CaswellRemove OPENSSL_NO_EC guards from libssl
2021-02-05 Matt CaswellRemove OPENSSL_NO_DH guards from libssl
2021-01-28 Richard LevitteUpdate copyright year
2021-01-26 Dr. David von OheimbTLS client: allow cert verify callback return -1 for...
2021-01-12 Richard LevitteClean away extraneous library specific FETCH_FAILED...
2020-12-20 Richard LevitteDrop OPENSSL_NO_RSA everywhere
2020-11-18 Richard LevitteDeprecate RSA harder
2020-11-18 Matt CaswellAvoid the use of a DH object in tls_construct_cke_dhe()
2020-11-18 Matt CaswellConvert TLS ServerKeyExchange processing to use an...
2020-11-11 Richard LevitteSSL: refactor all SSLfatal() calls
2020-11-11 Richard LevitteConvert all {NAME}err() in ssl/ to their corresponding...
2020-10-20 Matt CaswellRename EVP_PKEY_set1_tls_encodedpoint to EVP_PKEY_set1_...
2020-10-16 Matt CaswellPass an EVP_PKEY for SSL_SECOP_TMP_DH in the security...
2020-10-16 Matt CaswellConcentrate deprecated libssl API usage in one file
2020-10-01 Matt CaswellRun the withlibctx.pl script
2020-09-13 Matt CaswellFix safestack issues in x509.h
2020-09-13 Matt CaswellFix safestack issues in ssl.h
2020-09-01 Felix Monningeralso zero pad DHE public key in ClientKeyExchange messa...
2020-08-29 Matt CaswellImprove some error messages if a digest is not available
2020-08-09 Shane LontisAdd EVP signature with libctx methods.
2020-07-24 Shane LontisAdd X509 related libctx changes.
2020-07-16 Paulideprecate engines in SSL
2020-07-16 Todd ShortAdd SSL_get[01]_peer_certificate()
2020-06-05 Matt CaswellDon't downgrade keys in libssl
2020-05-19 Dmitry BelyavskiyNew Russian TLS 1.2 implementation
2020-04-24 Rich SalzIn OpenSSL builds, declare STACK for datatypes ...
2020-04-23 Matt CaswellUpdate copyright year
2020-04-08 Richard LevitteTLS: Temporarly downgrade newly generated EVP_PKEYs...
2020-04-01 Matt CaswellUse EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex...
2020-04-01 Matt CaswellDon't double free a DH object
2020-03-24 Matt CaswellUse a fetched version of SHA256 in tls_process_new_sess...
2020-03-23 Matt CaswellUse the libctx and properties when constructing an...
2020-02-20 PauliDeprecate the low level Diffie-Hellman functions.
2020-02-06 Matt CaswellUse the OPENSSL_CTX and property query string in EVP_PK...
2020-02-06 Matt CaswellExplicitly fetch ciphers and digests in libssl
2020-01-24 Matt CaswellMake sure we use RAND_bytes_ex and RAND_priv_bytes_ex...
2020-01-19 Matt Caswelllibssl: Eliminate as much use of EVP_PKEY_size() as...
2019-10-09 Rich SalzExplicitly test against NULL; do not use !p or similar
2019-09-28 Dr. Matthias St... Reorganize local header files
2019-06-03 Matt CaswellDefer sending a KeyUpdate until after pending writes...
2019-04-29 Todd ShortCollapse ssl3_state_st (s3) into ssl_st
2019-03-06 Richard LevitteAdapt SSL_DEBUG to the new generic trace API
2019-03-05 Matt CaswellDon't write the tick_identity to the session
2019-02-01 Michael TuexenFix end-point shared secret for DTLS/SCTP
2019-01-08 Matt CaswellDon't artificially limit the size of the ClientHello
2018-12-15 Kurt RoeckxUse (D)TLS_MAX_VERSION_INTERNAL internally
2018-12-06 Richard LevitteFollowing the license change, modify the boilerplates...
2018-12-05 Matt CaswellFix some SSL_export_keying_material() issues
2018-11-27 Paul YangFix access zero memory if SSL_DEBUG is enabled
2018-10-30 Matt CaswellDon't call the client_cert_cb immediately in TLSv1.3
2018-09-07 Matt CaswellProcess KeyUpdate and NewSessionTicket messages after...
2018-08-07 Andy Polyakovssl/*: switch to switch to Thread-Sanitizer-friendly...
2018-08-06 Matt CaswellEnsure we send an alert on error when processing a...
2018-07-13 Matt CaswellUse ssl_version_supported() when choosing server version
2018-07-03 Matt CaswellRemove TLSv1.3 tickets from the client cache as we...
2018-07-03 Matt CaswellRestore behaviour from commit 36ff232cf that was incorr...
2018-06-07 Matt CaswellReformulate the if condition in tls_process_new_session...
2018-06-07 Matt CaswellDon't store the ticket nonce in the session
2018-06-07 Matt CaswellFix TLSv1.3 ticket nonces
2018-05-17 Matt CaswellChange the default number of NewSessionTickets we send...
2018-05-08 Matt CaswellDon't fail on an out-of-order CCS in DTLS
2018-03-28 Rich SalzRewrite the X509->alert mapping code
2018-03-28 Matt CaswellTolerate a Certificate using a non-supported group...
2018-03-27 Philippe Antoinestatem/statem_clnt.c: omit redundant check in tls_const...
2018-03-19 Kurt RoeckxDon't use a ssl specific DRBG anymore
2018-02-12 Matt CaswellThe function ssl_get_min_max_version() can fail
2018-02-01 Todd ShortFix some minor code nits
2018-02-01 Todd ShortAdd TLSv1.3 post-handshake authentication (PHA)
2018-02-01 Matt CaswellFix some instances of the wrong alert type being sent
2018-01-25 Benjamin KadukAdd support for the TLS 1.3 signature_algorithms_cert...
next