rand_unix.c: Ensure requests to KERN_ARND don't exceed 256 bytes.
[openssl.git] / ssl /
2020-04-21 Benjamin KadukFix NULL dereference in SSL_check_chain() for TLS 1.3
2020-03-25 Tomas MrazPartially revert "Detect EOF while reading in libssl"
2020-03-17 Matt CaswellUpdate copyright year
2020-03-13 Benjamin KadukCode to thread-safety in ChangeCipherState
2020-03-13 Benjamin KadukDon't write to the session when computing TLS 1.3 keys
2020-03-13 Benjamin KadukFix whitespace nit in ssl_generate_master_secret()
2020-02-20 Matt CaswellDetect EOF while reading in libssl
2020-02-19 Simon CornishHandle max_fragment_length overflow for DTLS
2020-02-16 Kurt RoeckxCheck that ed25519 and ed448 are allowed by the securit...
2020-01-30 Matt CaswellDon't acknowledge a servername following warning alert...
2020-01-30 Matt CaswellFix SSL_get_servername() and SNI behaviour
2020-01-25 Kurt RoeckxCheck that the default signature type is allowed
2020-01-21 Bernd EdlingerFix TLS not using aes_cbc_hmac_sha ciphers
2020-01-02 dcruetteUpdate tls13_enc.c
2019-12-14 Dmitry BelyavskiyParse large GOST ClientKeyExchange messages
2019-12-11 Veres LajosFix some typos
2019-11-22 Benjamin KadukFix a race condition in SNI handling
2019-11-12 Richard LevitteSSL: Document SSL_add_{file,dir}_cert_subjects_to_stack()
2019-11-11 Ido Ben-NatanFix misspelled resumption_label for CHARSET_EBCDIC
2019-11-10 Dmitry BelyavskiyWorkaround for Windows-based GOST implementations
2019-10-10 Artiom Vaskovssl/statem/statem_lib.c: make servercontext/clientconte...
2019-10-07 Matt CaswellSend bad_record_mac instead of decryption_failed
2019-10-03 NaveenShivanna86'init_buf' memory can be freed when DTLS is used over...
2019-10-03 Daniil ZotkinDo not print extensions in Certificate message for...
2019-09-27 Dr. Matthias St... Fix header file include guard names
2019-09-27 Dr. Matthias St... Reorganize local header files
2019-09-10 Matt CaswellUpdate copyright year
2019-09-06 Matt CaswellDon't send a status_request extension in a CertificateR...
2019-09-04 raja-ashokFix SSL_set_ciphersuites to set even if no call to...
2019-09-04 David WoodhouseFix bogus check for EVP_PKEY mandatory digest in check_...
2019-08-14 Matt CaswellFix SSL_check_chain()
2019-08-14 opensslonzos-githubAdd missing EBCDIC strings
2019-08-05 Matt CaswellFix SSL_MODE_RELEASE_BUFFERS functionality
2019-08-01 raja-ashokUse allow_early_data_cb from SSL instead of SSL_CTX
2019-07-25 David BenjaminDon't generate an unnecessary Diffie-Hellman key in...
2019-07-17 Matt CaswellFix the return value for SSL_get0_chain_certs()
2019-07-16 Todd ShortFix SSL_CTX_set_session_id_context() docs
2019-07-16 PauliRemove DRBG from SSL structure.
2019-06-26 Benjamin KadukMove 'shared_sigalgs' from cert_st to ssl_st
2019-06-26 Benjamin KadukRevert "Delay setting the sig algs until after the...
2019-06-18 Matt CaswellFollowing the previous 2 commits also move ecpointforma...
2019-06-18 Matt CaswellFix a race condition in ciphers handling
2019-06-18 Matt CaswellFix a race condition in supported groups handling
2019-06-03 Matt CaswellDefer sending a KeyUpdate until after pending writes...
2019-05-30 agnosticdevissue-8998: Ensure that the alert is generated and...
2019-05-28 Richard LevitteUpdate copyright year
2019-05-20 Arne SchwabeChange SSL parameter SSL_session_reused const
2019-04-19 dyrockCheck if num is 0 before trying to malloc memory. Other...
2019-04-10 Jakub WilkFix typos
2019-03-28 Paul Monsonconn_is_closed should return 1 if get_last_sys_error...
2019-03-05 Matt CaswellDon't write the tick_identity to the session
2019-02-26 Matt CaswellUpdate copyright year
2019-02-22 Matt CaswellDon't restrict the number of KeyUpdate messages we...
2019-02-19 Matt CaswellDon't interleave handshake and other record types in...
2019-02-14 Matt CaswellDon't signal SSL_CB_HANDSHAKE_START for TLSv1.3 post...
2019-02-14 Sam RobertsIgnore cipher suites when setting cipher list
2019-02-05 Sam RobertsMake some simple getters take const SSL/SSL_CTX
2019-02-01 Michael TuexenFix end-point shared secret for DTLS/SCTP
2019-01-24 Matt CaswellRevert "Keep the DTLS timer running after the end of...
2019-01-15 Matt CaswellDon't get the mac type in TLSv1.3
2019-01-15 Matt CaswellAdd missing entries in ssl_mac_pkey_id
2019-01-08 Matt CaswellDon't artificially limit the size of the ClientHello
2019-01-07 Viktor DukhovniMore configurable crypto and ssl library initialization
2019-01-07 Matt CaswellDon't complain if we receive the cryptopro extension...
2019-01-06 Dmitry BelyavskiyRestore compatibility with GOST2001 implementations.
2019-01-04 Matt CaswellFix a RUN_ONCE bug
2019-01-03 Dmitry BelyavskiyEliminate unused buffers from ssl3_change_cipher_state
2019-01-03 Dmitry BelyavskiyRemove unused variables from tls1_change_cipher_state
2018-12-30 Bernd EdlingerFix a minor nit in the hkdflabel size
2018-12-05 Matt CaswellFix some SSL_export_keying_material() issues
2018-12-05 Matt CaswellRevert "Reduce stack usage in tls13_hkdf_expand"
2018-11-27 Paul YangFix access zero memory if SSL_DEBUG is enabled
2018-11-24 David WoodhouseHonour mandatory digest on private key in has_usable_cert()
2018-11-21 Paul YangFix wrong return value in ssl3_ctx_ctrl
2018-11-20 Matt CaswellUpdate copyright year
2018-11-14 Matt CaswellFix no-ec and no-tls1_2
2018-11-12 Viktor DukhovniAdded missing signature algorithm reflection functions
2018-11-12 Matt CaswellSeparate ca_names handling for client and server
2018-11-12 Matt CaswellDon't negotiate TLSv1.3 if our EC cert isn't TLSv1...
2018-11-10 Tomas MrazUnbreak SECLEVEL 3 regression causing it to not accept...
2018-11-08 Matt CaswellGive a better error if an attempt is made to set a...
2018-11-08 Matt CaswellIgnore disabled ciphers when deciding if we are using ECC
2018-11-05 PauliFix return formatting.
2018-11-05 PauliCleanse the key log buffer.
2018-11-04 Benjamin KadukRestore sensible "sess_accept" counter tracking
2018-10-30 Matt CaswellDon't call the client_cert_cb immediately in TLSv1.3
2018-10-29 Richard Levittessl/statem: Don't compare size_t with less than zero
2018-10-26 Matt CaswellProperly handle duplicated messages from the next epoch
2018-10-19 Matt CaswellBuffer a ClientHello with a cookie received via DTLSv1_...
2018-10-19 Matt CaswellUse the read and write buffers in DTLSv1_listen()
2018-10-19 Matt CaswellFix a DTLS memory leak
2018-10-18 armfazhFix tls_cbc_digest_record is slow using SHA-384 and...
2018-10-17 Mansour AhmadiAdd a missing check on s->s3->tmp.pkey
2018-10-15 Matt CaswellFix no-psk
2018-10-12 Andy Polyakovssl/s3_enc.c: fix logical errors in ssl3_final_finish_mac.
2018-09-24 Bernd EdlingerReduce stack usage in tls13_hkdf_expand
2018-09-21 Matt CaswellFix the max psk len for TLSv1.3
2018-09-21 Matt CaswellDelay setting the sig algs until after the cert_cb...
2018-09-19 Benjamin KadukReset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()
2018-09-18 Dr. Matthias St... ssl/ssl_ciph.c: make set_ciphersuites static
next