Only use the fallback mtu after 2 unsuccessful retransmissions if it is less
[openssl.git] / ssl / t1_lib.c
2014-11-20 Dr. Stephen HensonFix SuiteB chain checking logic.
2014-11-20 Emilia KasperEnsure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok...
2014-11-20 Emilia KasperReset s->tlsext_ticket_expected in ssl_scan_serverhello...
2014-11-19 Dr. Stephen HensonOnly handle RI extension for SSLv3
2014-11-19 Dr. Stephen HensonProcess signature algorithms before deciding on certifi...
2014-11-18 Matt CaswellAdded references to RFC 7027
2014-11-18 Dr. Stephen HensonPrevent use of binary curves when OPENSSL_NO_EC2M is...
2014-11-18 Matt CaswellUpdated comment references to draft-ietf-tls-ecc-12...
2014-10-24 Dr. Stephen HensonProcess signature algorithms in ClientHello late.
2014-10-15 Dr. Stephen HensonFix for session tickets memory leak.
2014-10-15 Matt CaswellFix for SRTP Memory Leak
2014-10-10 Dr. Stephen HensonDisable encrypt them mac for SSL 3.0 and stream ciphers...
2014-09-30 Dr. Stephen HensonParse custom extensions after internal extensions.
2014-08-28 Dr. Stephen HensonNew extension callback features.
2014-08-28 Dr. Stephen HensonRemove serverinfo checks.
2014-08-28 Dr. Stephen HensonAdd custom extension sanity checks.
2014-08-28 Dr. Stephen HensonCustom extension revision.
2014-08-18 Justin BlanchardRT1815: More const'ness improvements
2014-08-15 Rich SalzMerge branch 'master' of git.openssl.org:openssl
2014-08-15 Dr. Stephen HensonRevision of custom extension code.
2014-08-06 Dr. Stephen HensonFix SRP ciphersuite DoS vulnerability.
2014-08-06 Gabor TyukaszFix race condition in ssl_parse_serverhello_tlsext
2014-07-01 Ben LaurieFix possible buffer overrun.
2014-06-29 Ben LaurieMore constification.
2014-06-29 Rich SalzMerge branch 'master' of git.openssl.org:openssl
2014-06-29 Dr. Stephen HensonFix memory leak.
2014-06-02 David BenjaminCheck there is enough room for extension.
2014-06-01 Dr. Stephen HensonOption to disable padding extension.
2014-05-26 Juli MallettFix cast of boolean where cast of LHS intended.
2014-05-20 Dr. Stephen HensonFix bug in signature algorithm copy.
2014-04-07 Dr. Stephen HensonAdd heartbeat extension bounds check.
2014-04-05 Dr. Stephen HensonSet TLS padding extension value.
2014-03-28 Dr. Stephen HensonSecurity framework.
2014-03-28 Dr. Stephen HensonAllow return of supported ciphers.
2014-03-28 Dr. Stephen HensonAuto DH support.
2014-03-27 Dr. Stephen HensonFix memory leak with client auth.
2014-02-20 Dr. Stephen HensonMove CT viewer extension code to crypto/x509v3
2014-02-19 Ben LaurieMake i2r_sctlist static.
2014-02-19 Ben LaurieMerge branch 'sct-viewer-master' of https://github...
2014-02-19 Rob StradlingMove the SCT List extension parser into libssl.
2014-02-05 Scott DeboyDon't break out of the custom extension callback loop...
2014-02-05 Ben LaurieFix whitespace, new-style comments.
2014-02-05 Scott DeboyRe-add alert variables removed during rebase
2014-02-05 Scott DeboyUpdate custom TLS extension and supplemental data ...
2014-01-16 Kaspar BrandOmit initial status request callback check.
2014-01-09 Daniel Kahn Gillmoruse SSL_kECDHE throughout instead of SSL_kEECDH
2013-12-29 Dr. Stephen HensonUpdate curve list size.
2013-12-13 Dr. Stephen HensonUpdate to pad extension.
2013-11-14 Piotr SikoraFix compilation with no-nextprotoneg.
2013-11-06 Dr. Stephen HensonExperimental workaround TLS filler (WTF) extension.
2013-11-01 Piotr SikoraFix SSL_OP_SINGLE_ECDH_USE
2013-10-20 Dr. Stephen HensonPrevent use of RSA+MD5 in TLS 1.2 by default.
2013-10-15 Dr. Stephen HensonAdd brainpool curves to NID table too.
2013-10-15 Dr. Stephen HensonRFC7027 (Brainpool for TLS) support.
2013-09-13 Rob StradlingTidy up comments.
2013-09-13 Rob StradlingUse TLS version supplied by client when fingerprinting...
2013-09-08 Dr. Stephen HensonExperimental encrypt-then-mac support.
2013-09-06 Ben LaurieMake it build.
2013-09-06 Scott DeboyAdd callbacks supporting generation and retrieval of...
2013-09-05 Rob StradlingDon't prefer ECDHE-ECDSA ciphers when the client appear...
2013-08-17 Dr. Stephen HensonMake no-ec compilation work.
2013-07-31 Trevor PerrinVarious custom extension fixes.
2013-07-22 Adam LangleySupport ALPN.
2013-06-28 TrevorCosmetic touchups.
2013-06-18 TrevorCleanup of custom extension stuff.
2013-06-12 TrevorAdd support for arbitrary TLS extensions.
2013-04-04 Dr. Stephen HensonMake TLS 1.2 ciphers work again.
2013-03-28 Dr. Stephen HensonEnable TLS 1.2 ciphers in DTLS 1.2.
2013-03-26 Dr. Stephen HensonEnable various DTLS extensions.
2013-03-18 Dr. Stephen HensonUse enc_flags when deciding protocol variations.
2013-03-18 Dr. Stephen HensonDTLS revision.
2013-02-06 Ben LaurieAdd and use a constant-time memcmp.
2013-01-24 Dr. Stephen HensonFix warning: lenmax isn't used any more.
2013-01-19 Ben LaurieMerge branch 'master' of openssl.net:openssl
2013-01-19 Ben LaurieMerge branch 'master' of openssl.net:openssl
2013-01-19 Ben LaurieRemove extraneous brackets (clang doesn't like them).
2013-01-19 Ben LaurieCan't check a size_t for < 0.
2012-12-18 Dr. Stephen HensonUse client version when deciding which cipher suites...
2012-12-10 Dr. Stephen Hensonrevert SUITEB128ONLY patch, anything wanting to use...
2012-12-09 Dr. Stephen Hensonallow ECDSA+SHA384 signature algorithm in SUITEB128ONLY...
2012-11-26 Dr. Stephen HensonUse default point formats extension for server side...
2012-11-22 Dr. Stephen Hensonreject zero length point format list or supported curve...
2012-11-19 Dr. Stephen Hensonfix typo and warning
2012-11-08 Dr. Stephen Hensonnew feature: if ctx==NULL in SSL_CTX_ctrl perform synta...
2012-09-11 Dr. Stephen HensonMinor enhancement to PR#2836 fix. Instead of modifying...
2012-09-11 Ben LaurieCall OCSP Stapling callback after ciphersuite has been...
2012-09-07 Dr. Stephen Hensonstore and print out message digest peer signed with...
2012-08-29 Dr. Stephen HensonAdd compilation flag to disable certain protocol checks...
2012-08-15 Dr. Stephen HensonAdd three Suite B modes to TLS code, supporting RFC6460.
2012-07-27 Dr. Stephen HensonMake tls1_check_chain return a set of flags indicating...
2012-07-24 Dr. Stephen HensonAbort handshake if signature algorithm used not support...
2012-07-24 Dr. Stephen Hensoncheck EC tmp key matches preferences
2012-07-24 Dr. Stephen Hensontypo
2012-07-19 Dr. Stephen Hensonstop warning
2012-07-18 Dr. Stephen HensonNew function ssl_set_client_disabled to set masks for...
2012-07-03 Dr. Stephen Hensonno need to check s->server as default_nid is never...
2012-07-03 Dr. Stephen HensonSeparate client and server permitted signature algorith...
2012-06-29 Dr. Stephen HensonAdd certificate callback. If set this is called wheneve...
2012-06-28 Dr. Stephen HensonFunction tls1_check_ec_server_key is now redundant...
2012-06-28 Dr. Stephen HensonAdd new "valid_flags" field to CERT_PKEY structure...
next