apps/apps.c: include sys/socket.h to declare recv()
[openssl.git] / ssl /
2016-09-21 Dr. Stephen HensonFix small OOB reads.
2016-09-15 Matt CaswellRevert "Abort on unrecognised warning alerts"
2016-09-15 Dr. Stephen HensonFix memory leak on realloc error.
2016-09-15 Dr. Stephen HensonFix memory leak on error.
2016-09-13 Matt CaswellAbort on unrecognised warning alerts
2016-08-30 Matt CaswellEnsure the CertStatus message adds a DTLS message heade...
2016-08-26 David WoodhouseAdd basic test for Cisco DTLS1_BAD_VER and record repla...
2016-08-26 David WoodhouseFix ubsan 'left shift of negative value -1' error in...
2016-08-26 David WoodhouseFix SSL_export_keying_material() for DTLS1_BAD_VER
2016-08-26 Matt CaswellFix the no-tls1 option
2016-08-26 Todd ShortAlways use session_ctx when removing a session
2016-08-24 Rich SalzSWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUM
2016-08-24 Matt CaswellFix no-ec
2016-08-23 Dr. Stephen HensonSanity check ticket length.
2016-08-22 Richard LevitteVMS: Use strict refdef extern model when building libra...
2016-08-22 Matt CaswellPrevent DTLS Finished message injection
2016-08-22 Matt CaswellFix DTLS buffered message DoS attack
2016-08-22 Matt CaswellSilence some "maybe used uninitialised" warnings
2016-08-19 Rich SalzFix NULL-return checks in 1.0.2
2016-08-19 Matt CaswellUpdate function error code
2016-08-19 Matt CaswellFix DTLS replay protection
2016-08-19 Matt CaswellAdd DTLS replay protection test
2016-08-19 Matt CaswellFix DTLS unprocessed records bug
2016-08-19 Matt CaswellAdd a DTLS unprocesed records test
2016-07-28 Rich SalzAdd missing casts.
2016-07-22 Dr. Stephen HensonSend alert for bad DH CKE
2016-07-19 Dr. Stephen HensonSanity check in ssl_get_algorithm2().
2016-07-19 Dr. Stephen HensonSend alert on CKE error.
2016-07-01 Matt CaswellAvoid an overflow in constructing the ServerKeyExchange...
2016-06-27 Matt CaswellChange usage of RAND_pseudo_bytes to RAND_bytes
2016-06-01 Matt CaswellAvoid some undefined pointer arithmetic
2016-05-26 Matt CaswellThe ssl3_digest_cached_records() function does not...
2016-05-19 Viktor DukhovniEnsure verify error is set when X509_verify_cert()...
2016-05-19 Matt CaswellFix a double free in tls1_setup_key_block
2016-05-17 Matt CaswellFix SSL compression symbol exporting
2016-05-09 David BenjaminDon't send signature algorithms when client_version...
2016-05-02 TJ SaundersRemove confusing comment.
2016-05-02 TJ SaundersIssue #719:
2016-04-26 Matt CaswellEnsure we check i2d_X509 return val
2016-04-07 David BenjaminFix memory leak on invalid CertificateRequest.
2016-04-04 Todd ShortFix ALPN
2016-03-18 Matt CaswellAdd a check for a failed malloc
2016-03-18 Matt CaswellEnsure that memory allocated for the ticket is freed
2016-03-14 Kurt RoeckxAdd no-ssl2-method
2016-03-09 Viktor Dukhovniexpose SSLv2 method prototypes
2016-03-08 Viktor DukhovniRetain SSLv2 methods as functions that return NULL
2016-03-07 Kurt RoeckxRemove LOW from the default
2016-03-01 Matt Caswellmake update
2016-03-01 Viktor DukhovniDisable EXPORT and LOW SSLv3+ ciphers by default
2016-03-01 Matt CaswellAdd a test for SSLv2 configuration
2016-03-01 Viktor DukhovniDisable SSLv2 default build, default negotiation and...
2016-02-08 Matt CaswellHandle SSL_shutdown while in init more appropriately #2
2016-01-28 Matt CaswellAlways generate DH keys for ephemeral DH cipher suites
2016-01-28 Viktor DukhovniBetter SSLv2 cipher-suite enforcement
2016-01-20 Matt CaswellHandle SSL_shutdown while in init more appropriately
2016-01-19 Alessandro GhediniValidate ClientHello session_id field length and send...
2016-01-17 Viktor DukhovniEmpty SNI names are not valid
2016-01-12 arijitnayakWrong definition of the macro SSL_set1_sigalgs in ssl.h
2016-01-10 Kurt RoeckxChange minimum DH size from 768 to 1024
2015-12-27 Matt CaswellEnsure we don't call the OCSP callback if resuming...
2015-12-27 Matt CaswellFix error when server does not send CertificateStatus...
2015-12-19 Matt CaswellFix more URLs mangled by reformat
2015-12-18 Richard LevitteRemove the "eay" c-file-style indicators
2015-12-10 Matt CaswellEnsure |rwstate| is set correctly on BIO_flush
2015-12-10 Matt CaswellFix DTLS handshake fragment retries
2015-12-10 Matt CaswellAdd a return value check
2015-12-02 Richard Levitte_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE instead
2015-12-01 Matt CaswellRemove cookie validation return value trick
2015-11-24 Pascal Cuoqssl3_free(): Return if it wasn't created
2015-11-24 Kurt RoeckxSet reference count earlier
2015-11-21 Viktor DukhovniGood hygiene with size_t output argument.
2015-11-20 Matt CaswellEnsure all EVP calls have their returns checked where...
2015-11-10 Matt CaswellStop DTLS servers asking for unsafe legacy renegotiation
2015-11-10 Matt CaswellOnly call ssl3_init_finished_mac once for DTLS
2015-11-09 Matt CaswellRemove redundant check from tls1_get_curvelist
2015-11-09 Matt CaswellFix missing malloc return value checks
2015-11-08 Dr. Stephen HensonReject TLS 1.2 ciphersuites if not allowed.
2015-11-04 Matt CaswellEnsure the dtls1_get_*_methods work with DTLS_ANY_VERSION
2015-10-23 Alessandro GhediniRemove useless code
2015-10-23 Alessandro GhediniFix references to various RFCs
2015-10-23 Alessandro GhediniFix memory leaks and other mistakes on errors
2015-10-05 Matt CaswellChange functions to pass in a limit rather than calcula...
2015-10-05 Alessandro GhediniValidate ClientHello extension field length
2015-09-28 Emilia KasperRT2772: accept empty SessionTicket
2015-09-20 Dr. Stephen HensonHandle SSL_ERROR_WANT_X509_LOOKUP
2015-09-16 Kurt RoeckxFix return values when adding serverinfo fails.
2015-09-16 Ivo RaisrMake no-psk compile without warnings.
2015-09-15 Rich SalzRT4044: Remove .cvsignore files.
2015-09-04 Dr. Stephen HensonMatch SUITEB strings at start of cipher list.
2015-09-01 Hiroyuki YAMAMORIFix DTLS1.2 compression
2015-09-01 Hiroyuki YAMAMORIFix DTLS1.2 buffers
2015-09-01 Matt CaswellFix session resumption
2015-09-01 Matt CaswellFix building with OPENSSL_NO_TLSEXT.
2015-08-28 Alessandro GhediniGH354: Memory leak fixes
2015-08-26 Matt CaswellFix DTLS session ticket renewal
2015-08-11 Matt CaswellFix "make test" seg fault with SCTP enabled
2015-08-11 Matt CaswellFix missing return value checks in SCTP
2015-08-11 Guy Leaver (guleaver)Fix seg fault with 0 p val in SKE
2015-07-30 Matt CaswellFix write failure handling in DTLS1.2
2015-07-27 Matt CaswellFix SSL_set_session_ticket_ext when used with SSLv23_method
next