Implement a EVP_PKEY KDF to KDF provider bridge
[openssl.git] / ssl /
2020-08-09 Shane LontisAdd EVP signature with libctx methods.
2020-08-07 Paulirand_drbg: remove RAND_DRBG.
2020-08-06 Matt CaswellUpdate copyright year
2020-08-03 David WoodhouseDisallow setting more than one IP address with SSL_add1...
2020-08-03 David WoodhouseMake SSL_set1_host() and SSL_add1_host() take IP addresses
2020-07-30 Pauliunify spelling of serialize
2020-07-24 Shane LontisAdd X509 related libctx changes.
2020-07-21 Viktor DukhovniAvoid errors with a priori inapplicable protocol bounds
2020-07-16 Richard LevitteUpdate copyright year
2020-07-16 Matt CaswellRevert "kdf: make function naming consistent."
2020-07-16 Matt CaswellRevert "The EVP_MAC functions have been renamed for...
2020-07-16 Paulideprecate engines in SSL
2020-07-16 Todd ShortAdd SSL_get[01]_peer_certificate()
2020-07-11 Benjamin KadukProviderized libssl fallout: cleanup init
2020-07-08 Matt CaswellFix an incorrect error flow in add_provider_groups
2020-07-07 Martin ElshuberAdd support to zeroize plaintext in S3 record layer
2020-07-06 Matt CaswellEnsure TLS padding is added during encryption on the...
2020-07-06 Matt CaswellConvert SSLv3 handling to use provider side CBC/MAC...
2020-07-06 Matt CaswellMake libssl start using the TLS provider CBC support
2020-07-06 Matt CaswellAdd provider support for TLS CBC padding and MAC removal
2020-07-06 Matt CaswellRemove SSL dependencies from tls_pad.c
2020-07-06 Matt CaswellSplit the padding/mac removal functions out into a...
2020-07-06 Matt CaswellMove MAC removal responsibility to the various protocol...
2020-07-05 Richard LevitteSSL: fix misuse of ERR_LIB_SYS
2020-07-05 Dr. David von OheimbFix many MarkDown issues in {NOTES*,README*,HACKING...
2020-07-05 Dr. David von OheimbRename NOTES*, README*, VERSION, HACKING, LICENSE to...
2020-07-02 Miłosz KaniewskiFree pre_proc_exts in SSL_free()
2020-06-27 Kurt RoeckxReduce the security bits for MD5 and SHA1 based signatu...
2020-06-23 Matt CaswellDon't attempt to duplicate the BIO state in SSL_dup
2020-06-23 Matt CaswellEnsure that SSL_dup copies the min/max protocol version
2020-06-19 Matt CaswellFix the DTLS1_COOKIE_LENGTH value
2020-06-19 Matt CaswellCreate defines for TLS Group Ids
2020-06-19 Matt CaswellDon't send supported groups if no-ec and we're doing...
2020-06-19 Matt CaswellProvider a better error message if we fail to copy...
2020-06-19 Matt CaswellUpdate the various SSL group getting and setting functions
2020-06-19 Matt CaswellModify libssl to discover supported groups based on...
2020-06-11 PauliThe EVP_MAC functions have been renamed for consistency...
2020-06-11 Paulikdf: make function naming consistent.
2020-06-09 Tomas MrazDo not allow dropping Extended Master Secret extension...
2020-06-09 Hubert Kariouse safe primes in ssl_get_auto_dh()
2020-06-08 Vadim FedorenkoTLSv1.3: additional checks in SSL_set_record_padding_ca...
2020-06-08 Vadim FedorenkoTLSv13: add kTLS support
2020-06-08 Vadim FedorenkokTLS: add support for AES_CCM128 and AES_GCM256
2020-06-05 Matt CaswellDon't downgrade keys in libssl
2020-06-05 Matt CaswellCheck that Signature Algorithms are available before...
2020-06-04 Otto HollmannAdd cipher list ciphersuites which using encryption...
2020-06-04 Matt CaswellUpdate copyright year
2020-06-02 Billy BrumleyMove EC_METHOD to internal-only
2020-06-01 Tim Hudsonundeprecate SSL_CTX_load_verify_locations and X509_STOR...
2020-05-27 Dr. David von OheimbRename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp...
2020-05-20 Tomas Mrazt1_trce: Fix remaining places where the 24 bit shift...
2020-05-19 Dmitry BelyavskiyIntroducing option SSL_OP_IGNORE_UNEXPECTED_EOF
2020-05-19 Dmitry BelyavskiyNew Russian TLS 1.2 implementation
2020-05-15 raja-ashokFix crash in early data send with out-of-band PSK using...
2020-05-15 Richard LevitteSSL: refactor ssl_cert_lookup_by_pkey() to work with...
2020-05-15 Matt CaswellUpdate copyright year
2020-05-15 Matt CaswellCorrect alignment calculation in ssl3_setup_write
2020-05-07 Dr. Matthias St... Fix use-after-free in BIO_C_SET_SSL callback
2020-05-07 Nikolay MorozovSSL_OP_DISABLE_TLSEXT_CA_NAMES option implementation
2020-05-06 Matt CaswellDon't offer or accept ciphersuites that we can't support
2020-05-06 Benjamin KadukFix up whitespace nits introduced by PR #11416
2020-05-01 Benjamin KadukAdd SSL_new_session_ticket() API
2020-05-01 Benjamin KadukFix whitespace nit in ossl_statem_server_pre_work
2020-04-30 Paulicoverity 1462581 Dereference after null check
2020-04-30 Paulicoverity 1462570 Resource leak
2020-04-28 Nikolay MorozovFix GOST curve sec bits
2020-04-24 Rich SalzIn OpenSSL builds, declare STACK for datatypes ...
2020-04-23 Matt CaswellUpdate copyright year
2020-04-22 Nikolay MorozovGOST2012 TLS Supported Groups Identifiers Support
2020-04-21 Matt CaswellFix test_ssl_new test failure
2020-04-21 Benjamin KadukFix NULL dereference in SSL_check_chain() for TLS 1.3
2020-04-20 Matt CaswellUse a fetched MD if appropriate in ssl3_cbc_digest_record
2020-04-19 Matt CaswellUse the libctx for all EVP_PKEY_CTX operations
2020-04-18 Nikolay MorozovGOST2012 TLS ClientCertificateType Identifiers support
2020-04-16 Nikolay MorozovTLSEXT_SIGALG_gostr34102012 0x0840 and 0x0841 support
2020-04-15 Matt CaswellMake sure we always send an alert in libssl if we hit...
2020-04-15 Matt CaswellMake sure we use the libctx in libssl when loading...
2020-04-09 Matt CaswellEnsure libssl uses the new library context aware CT...
2020-04-08 Matt CaswellExplicitly cache the X509v3_extensions in one more...
2020-04-08 Matt CaswellUse X509_STORE_CTX_new_with_libctx() in libssl
2020-04-08 Richard LevitteTLS: Temporarly downgrade newly generated EVP_PKEYs...
2020-04-08 Richard LevitteEVP & TLS: Add necessary EC_KEY data extraction functio...
2020-04-02 Nikolay MorozovTLS Cipher Suite 0xC102 Support
2020-04-01 Matt CaswellMake sure we use the libctx when creating an EVP_PKEY_C...
2020-04-01 Matt CaswellUse EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex...
2020-04-01 Matt CaswellDon't double free a DH object
2020-03-30 Matt CaswellGive a better error if we can't find a sig alg
2020-03-30 Matt CaswellExplicitly cache X509v3 extensions in libssl
2020-03-30 Matt CaswellDon't attempt to up-ref an EVP_CIPHER if it is NULL
2020-03-27 Matt CaswellUpdate libssl to use the new library context aware...
2020-03-27 Matt CaswellIgnore some fetch failures
2020-03-26 Matt CaswellUse a fetched cipher for the TLSv1.3 early secret
2020-03-26 Matt CaswellUse a fetched cipher when decrypting a ticket in libssl
2020-03-24 Matt CaswellMake sure we use a fetched cipher when encrypting state...
2020-03-24 Matt CaswellUse a fetched version of SHA256 in tls_process_new_sess...
2020-03-23 Matt CaswellUse correct libctx when fetching the TLS1 PRF in libssl
2020-03-23 Matt CaswellUse the libctx and properties when constructing an...
2020-03-23 Dr. David von OheimbConstify various mostly X509-related parameter types...
2020-03-16 John BaldwinUse a flag in SSL3_BUFFER to track when an application...
2020-03-13 Benjamin KadukCode to thread-safety in ChangeCipherState
next