Convert memset calls to OPENSSL_cleanse
[openssl.git] / ssl /
2016-06-27 Matt CaswellChange usage of RAND_pseudo_bytes to RAND_bytes
2016-06-01 Matt CaswellAvoid some undefined pointer arithmetic
2016-05-26 Matt CaswellThe ssl3_digest_cached_records() function does not...
2016-05-19 Viktor DukhovniEnsure verify error is set when X509_verify_cert()...
2016-05-19 Matt CaswellFix a double free in tls1_setup_key_block
2016-05-17 Matt CaswellFix SSL compression symbol exporting
2016-05-09 David BenjaminDon't send signature algorithms when client_version...
2016-05-02 TJ SaundersRemove confusing comment.
2016-05-02 TJ SaundersIssue #719:
2016-04-26 Matt CaswellEnsure we check i2d_X509 return val
2016-04-07 David BenjaminFix memory leak on invalid CertificateRequest.
2016-04-04 Todd ShortFix ALPN
2016-03-18 Matt CaswellAdd a check for a failed malloc
2016-03-18 Matt CaswellEnsure that memory allocated for the ticket is freed
2016-03-14 Kurt RoeckxAdd no-ssl2-method
2016-03-09 Viktor Dukhovniexpose SSLv2 method prototypes
2016-03-08 Viktor DukhovniRetain SSLv2 methods as functions that return NULL
2016-03-07 Kurt RoeckxRemove LOW from the default
2016-03-01 Matt Caswellmake update
2016-03-01 Viktor DukhovniDisable EXPORT and LOW SSLv3+ ciphers by default
2016-03-01 Matt CaswellAdd a test for SSLv2 configuration
2016-03-01 Viktor DukhovniDisable SSLv2 default build, default negotiation and...
2016-02-08 Matt CaswellHandle SSL_shutdown while in init more appropriately #2
2016-01-28 Matt CaswellAlways generate DH keys for ephemeral DH cipher suites
2016-01-28 Viktor DukhovniBetter SSLv2 cipher-suite enforcement
2016-01-20 Matt CaswellHandle SSL_shutdown while in init more appropriately
2016-01-19 Alessandro GhediniValidate ClientHello session_id field length and send...
2016-01-17 Viktor DukhovniEmpty SNI names are not valid
2016-01-12 arijitnayakWrong definition of the macro SSL_set1_sigalgs in ssl.h
2016-01-10 Kurt RoeckxChange minimum DH size from 768 to 1024
2015-12-27 Matt CaswellEnsure we don't call the OCSP callback if resuming...
2015-12-27 Matt CaswellFix error when server does not send CertificateStatus...
2015-12-19 Matt CaswellFix more URLs mangled by reformat
2015-12-18 Richard LevitteRemove the "eay" c-file-style indicators
2015-12-10 Matt CaswellEnsure |rwstate| is set correctly on BIO_flush
2015-12-10 Matt CaswellFix DTLS handshake fragment retries
2015-12-10 Matt CaswellAdd a return value check
2015-12-02 Richard Levitte_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE instead
2015-12-01 Matt CaswellRemove cookie validation return value trick
2015-11-24 Pascal Cuoqssl3_free(): Return if it wasn't created
2015-11-24 Kurt RoeckxSet reference count earlier
2015-11-21 Viktor DukhovniGood hygiene with size_t output argument.
2015-11-20 Matt CaswellEnsure all EVP calls have their returns checked where...
2015-11-10 Matt CaswellStop DTLS servers asking for unsafe legacy renegotiation
2015-11-10 Matt CaswellOnly call ssl3_init_finished_mac once for DTLS
2015-11-09 Matt CaswellRemove redundant check from tls1_get_curvelist
2015-11-09 Matt CaswellFix missing malloc return value checks
2015-11-08 Dr. Stephen HensonReject TLS 1.2 ciphersuites if not allowed.
2015-11-04 Matt CaswellEnsure the dtls1_get_*_methods work with DTLS_ANY_VERSION
2015-10-23 Alessandro GhediniRemove useless code
2015-10-23 Alessandro GhediniFix references to various RFCs
2015-10-23 Alessandro GhediniFix memory leaks and other mistakes on errors
2015-10-05 Matt CaswellChange functions to pass in a limit rather than calcula...
2015-10-05 Alessandro GhediniValidate ClientHello extension field length
2015-09-28 Emilia KasperRT2772: accept empty SessionTicket
2015-09-20 Dr. Stephen HensonHandle SSL_ERROR_WANT_X509_LOOKUP
2015-09-16 Kurt RoeckxFix return values when adding serverinfo fails.
2015-09-16 Ivo RaisrMake no-psk compile without warnings.
2015-09-15 Rich SalzRT4044: Remove .cvsignore files.
2015-09-04 Dr. Stephen HensonMatch SUITEB strings at start of cipher list.
2015-09-01 Hiroyuki YAMAMORIFix DTLS1.2 compression
2015-09-01 Hiroyuki YAMAMORIFix DTLS1.2 buffers
2015-09-01 Matt CaswellFix session resumption
2015-09-01 Matt CaswellFix building with OPENSSL_NO_TLSEXT.
2015-08-28 Alessandro GhediniGH354: Memory leak fixes
2015-08-26 Matt CaswellFix DTLS session ticket renewal
2015-08-11 Matt CaswellFix "make test" seg fault with SCTP enabled
2015-08-11 Matt CaswellFix missing return value checks in SCTP
2015-08-11 Guy Leaver (guleaver)Fix seg fault with 0 p val in SKE
2015-07-30 Matt CaswellFix write failure handling in DTLS1.2
2015-07-27 Matt CaswellFix SSL_set_session_ticket_ext when used with SSLv23_method
2015-07-27 Matt CaswellAdd test for SSL_set_session_ticket_ext
2015-07-02 Dr. Stephen HensonFix PSK handling.
2015-06-20 Dr. Stephen Hensontypo: should be OPENSSL_free
2015-06-12 Adam LangleyAllow a zero length extension block
2015-06-11 Matt CaswellMore ssl_session_dup fixes
2015-06-10 Kurt RoeckxOnly allow a temporary rsa key exchange when they key...
2015-06-10 Kurt RoeckxProperly check certificate in case of export ciphers.
2015-06-10 Matt CaswellDTLS handshake message fragments musn't span packets
2015-06-10 Matt CaswellTighten extension handling
2015-06-10 Matt CaswellFix Kerberos issue in ssl_session_dup
2015-06-08 Emilia KasperUse CRYPTO_memcmp in s3_cbc.c
2015-06-04 Kurt RoeckxAllow all curves when the client doesn't send an suppor...
2015-06-04 Matt CaswellRemove misleading comment
2015-06-04 Matt CaswellClean premaster_secret for GOST
2015-06-04 Matt CaswellClean Kerberos pre-master secret
2015-06-04 Matt CaswellFix DTLS session resumption
2015-06-02 Matt CaswellFix race condition in NewSessionTicket
2015-05-31 Matt CaswellCheck the message type requested is the type received...
2015-05-26 Emilia KasperFix ssltest to use 1024-bit DHE parameters
2015-05-26 Matt CaswellDon't check for a negative SRP extension size
2015-05-25 Matt CaswellDon't send an alert if we've just received one
2015-05-23 Richard LevitteFix the update target and remove duplicate file updates
2015-05-22 Matt CaswellFix typo setting up certificate masks
2015-05-22 Matt CaswellRemove export static DH ciphersuites
2015-05-22 LubomLost alert in DTLS
2015-05-20 Kurt RoeckxCorrectly check for export size limit
2015-05-20 Emilia KasperOnly support >= 256-bit elliptic curves with ecdh_auto...
2015-05-20 Emilia Kasperclient: reject handshakes with DH parameters < 768...
2015-05-13 Matt CaswellDon't allow a CCS when expecting a CertificateVerify
next