Make the anti-replay feature optional
[openssl.git] / ssl /
2018-07-02 Matt CaswellMake the anti-replay feature optional
2018-07-02 Matt CaswellFix a NULL ptr deref in error path in tls_process_cke_dhe()
2018-07-01 Benjamin KadukAddress coverity-reported NULL dereference in SSL_SESSI...
2018-06-29 PauliCheck return from BN_set_word.
2018-06-27 Matt CaswellReturn a fatal error if application data is encountered...
2018-06-27 Matt CaswellReturn SSL_ERROR_WANT_READ if SSL_shutdown() encounters...
2018-06-27 Matt CaswellAuto retry if we ditch records during shutdown
2018-06-26 Matt CaswellUse stateful tickets if we are doing anti-replay
2018-06-26 Matt CaswellRespect SSL_OP_NO_TICKET in TLSv1.3
2018-06-26 Matt CaswellRestructure the ticket construction code
2018-06-26 Matt CaswellUpdate SSL_SESSION_print for TLSv1.3
2018-06-25 Matt CaswellDon't change a session once its in the cache
2018-06-22 Nicola TuveriRemove __cplusplus preamble from internal headers
2018-06-21 Matt CaswellDon't use OPENSSL_strdup() for copying alpn_selected
2018-06-19 Matt CaswellFix enable-ssl3 enable-ssl3-method
2018-06-11 Matt CaswellRemodel the if sequence for handling alerts
2018-06-11 Matt CaswellDon't send a warning alert in TLSv1.3
2018-06-11 Matt CaswellFix TLSv1.3 alert handling
2018-06-07 Marcus HueweDo not free a session before calling the remove_session_cb
2018-06-07 Matt CaswellReformulate the if condition in tls_process_new_session...
2018-06-07 Matt CaswellDon't store the ticket nonce in the session
2018-06-07 Matt CaswellFix TLSv1.3 ticket nonces
2018-06-07 Matt CaswellFix EAP-FAST
2018-05-31 Matt CaswellEVP_MD_size() can return an error
2018-05-30 Dmitry BelyavskiySend GOST SignatureAlgorithms when TLS 1.2 in use
2018-05-30 Dmitry BelyavskiyBugfix: GOST2012 certificates for GOST ciphersuites...
2018-05-29 Matt CaswellUpdate copyright year
2018-05-25 Bernd EdlingerFix array bounds violation in ssl_session_dup
2018-05-23 Matt CaswellUse the client app traffic secret for PHA Finished...
2018-05-22 Kurt RoeckxEnable SSL_MODE_AUTO_RETRY by default
2018-05-22 Matt CaswellFix no-ec in combination with no-dh
2018-05-21 Tilman Keskinözssl/ssl_txt: fix NULL-check
2018-05-21 Matt CaswellDon't cache stateless tickets in TLSv1.3
2018-05-17 Matt CaswellChange the default number of NewSessionTickets we send...
2018-05-17 Matt CaswellAllow configuation of the number of TLSv1.3 session...
2018-05-17 Matt CaswellEnable the ability to set the number of TLSv1.3 session...
2018-05-15 Matt CaswellSuport TLSv1.3 draft 28
2018-05-14 Matt CaswellFix no-psk
2018-05-12 Kurt RoeckxSet sess to NULL after freeing it.
2018-05-12 Matt CaswellDon't memcpy the contents of an empty fragment
2018-05-11 Matt CaswellRework the decrypt ticket callback
2018-05-11 Matt CaswellFix ticket callbacks in TLSv1.3
2018-05-11 Matt CaswellFlush server side unauthenticated writes
2018-05-11 Matt CaswellMark DTLS records as read when we have finished with...
2018-05-11 Matt CaswellPrefer SHA-256 ciphersuites if using old style PSKs
2018-05-11 Kurt RoeckxUse void in all function definitions that do not take...
2018-05-08 Matt CaswellKeep the DTLS timer running after the end of the handsh...
2018-05-08 Matt CaswellOnly auto-retry for DTLS if configured to do so
2018-05-08 Matt CaswellDon't fail on an out-of-order CCS in DTLS
2018-05-02 Matt CaswellFix comment in ssl_locl.h
2018-05-02 Matt CaswellFix SSL_get_shared_ciphers()
2018-05-01 Benjamin KadukFix regression with session cache use by clients
2018-05-01 Matt CaswellUpdate copyright year
2018-04-26 Dr. Matthias St... Fix mixed indentation (and other whitespace issues)
2018-04-26 Rich SalzFix last(?) batch of malloc-NULL places
2018-04-26 Matt CaswellFix typo in the definition of tls13_ciphers
2018-04-25 Matt CaswellFix the MAX_CURVELIST definition
2018-04-24 Matt CaswellIn a reneg use the same client_version we used last...
2018-04-24 Matt CaswellAllow TLSv1.3 EC certs to use compressed points
2018-04-24 Matt CaswellRemove some logically dead code
2018-04-24 Matt CaswellImprove backwards compat with 1.0.2 for ECDHParameters
2018-04-20 Matt CaswellFix SSL_pending() for DTLS
2018-04-20 Matt CaswellMake sure SSL_in_init() returns 0 at SSL_CB_HANDSHAKE_DONE
2018-04-18 Peter WuAdd support for logging early exporter secret
2018-04-18 Peter WuAdd support for logging TLS 1.3 exporter secret
2018-04-17 Matt CaswellCheck the return from EVP_PKEY_get0_DH()
2018-04-17 Matt CaswellFix assertion failure in SSL_set_bio()
2018-04-17 Matt CaswellMake sure info callback knows about all handshake start...
2018-04-17 Matt CaswellCall the info callback on all handshake done events
2018-04-17 Matt CaswellIgnore the status_request extension in a resumption...
2018-04-17 Bernd EdlingerAdd a config option to disable automatic config loading
2018-04-17 Richard LevitteUpdate copyright year
2018-04-05 Matt CaswellMove the loading of the ssl_conf module to libcrypto
2018-04-04 Matt CaswellFix configuration of TLSv1.3 ciphersuites
2018-04-04 cedralVisual Studio 2017 debug build warning error on 32...
2018-04-03 Rich SalzSet error code on alloc failures
2018-04-02 Kurt RoeckxUse the private RNG for data that is not public
2018-03-30 Matt CaswellRevert commit 4a56d9a2
2018-03-30 Matt CaswellGOST MAC algorithms don't support EVP_PKEY_new_raw_priv...
2018-03-30 Matt CaswellUpdate trace code to know about GOST ciphersuites
2018-03-28 Rich SalzRewrite the X509->alert mapping code
2018-03-28 Matt CaswellTolerate a Certificate using a non-supported group...
2018-03-27 Rich SalzAllow NULL for some _free routines.
2018-03-27 Philippe Antoinestatem/statem_clnt.c: omit redundant check in tls_const...
2018-03-27 Matt CaswellRemove some code for a contributor that we cannot find
2018-03-27 Matt CaswellAssert that alpn_selected is NULL before we assign it
2018-03-25 Philippe AntoineAdds multiple checks to avoid buffer over reads
2018-03-21 FdaSilvaYYUnify s_client/s_server srtp profiles option handling
2018-03-21 Philippe AntoineFixes integer underflow with SSL_trace support
2018-03-21 Matt CaswellDon't wait for dry at the end of a handshake
2018-03-21 Matt CaswellCheck for alerts while waiting for a dry event
2018-03-21 Peter WuFix stack-use-after-scope
2018-03-21 Benjamin KadukDo not cache sessions with zero sid_ctx_length when...
2018-03-20 Matt CaswellUpdate copyright year
2018-03-19 Todd ShortPlace ticket keys into secure memory
2018-03-19 Matt CaswellFix no-psk
2018-03-19 Tomas MrazApply system_default configuration on SSL_CTX_new().
2018-03-19 Kurt RoeckxDon't use a ssl specific DRBG anymore
2018-03-19 Bernd EdlingerFix a crash in SSLfatal due to invalid enc_write_ctx
2018-03-19 Matt CaswellAdd an anti-replay mechanism
next