crypto/evp: harden RC4_MD5 cipher.
[openssl.git] / ssl /
2017-01-24 Andy PolyakovReplace div-spoiler hack with simpler code, GH#1027...
2017-01-24 Todd ShortCleanup EVP_CIPH/EP_CTRL duplicate defines
2017-01-24 Benjamin KadukDo not overallocate for tmp.ciphers_raw
2017-01-24 Matt CaswellFix SSL_get0_raw_cipherlist()
2017-01-24 Bernd EdlingerFix a ssl session leak due to OOM in lh_SSL_SESSION_insert
2017-01-23 Matt CaswellStop server from expecting Certificate message when...
2017-01-23 Matt CaswellStop client from sending Certificate message when not...
2017-01-23 Matt CaswellFix SSL_VERIFY_CLIENT_ONCE
2017-01-23 Bernd Edlingerfix a memory leak in ssl3_generate_key_block fix the...
2017-01-18 Rich SalzIf client doesn't send curves list, don't assume all.
2017-01-10 Matt CaswellMark a HelloRequest record as read if we ignore it
2016-12-12 Matt CaswellFix a leak in SSL_clear()
2016-12-08 Kurt RoeckxOnly call memcpy when the length is larger than 0.
2016-11-29 Matt CaswellEnsure we are in accept state in DTLSv1_listen
2016-11-23 Matt CaswellFix missing NULL checks in CKE processing
2016-11-21 Kurt RoeckxMake SSL_read and SSL_write return the old behaviour...
2016-11-16 Matt CaswellRemove a hack from ssl_test_old
2016-11-15 Rob PercivalCheck that SCT timestamps are not in the future
2016-11-09 EasySecWhen no SRP identity is found, no error was reported...
2016-11-07 Matt CaswellPartial revert of "Fix client verify mode to check...
2016-11-07 Matt CaswellAlways ensure that init_msg is initialised for a CCS
2016-11-02 Matt CaswellFail if an unrecognised record type is received
2016-11-02 Matt CaswellFix read_ahead
2016-10-28 Matt CaswellImplement length checks as a macro
2016-10-28 Matt CaswellEnsure we have length checks for all extensions
2016-10-28 Matt CaswellFix length check writing status request extension
2016-10-28 Matt CaswellA zero return from BIO_read()/BIO_write() could be...
2016-10-20 David WoodhouseDisable encrypt_then_mac negotiation for DTLS.
2016-09-29 Matt CaswellFix missing NULL checks in NewSessionTicket construction
2016-09-29 Matt CaswellFix an Uninit read in DTLS
2016-09-26 Matt CaswellFix Use After Free for large message sizes
2016-09-22 Dmitry BelyavskyAvoid KCI attack for GOST
2016-09-22 Matt CaswellFix a hang with SSL_peek()
2016-09-22 Matt CaswellFix a mem leak in NPN handling
2016-09-22 Matt CaswellFix OCSP Status Request extension unbounded memory...
2016-09-22 Richard LevitteFix error message typo, wrong function code
2016-09-21 Matt CaswellExcessive allocation of memory in dtls1_preprocess_frag...
2016-09-21 Matt CaswellExcessive allocation of memory in tls_get_message_header()
2016-09-21 Matt CaswellDon't allow too many consecutive warning alerts
2016-09-21 Alessandro GhediniUse switch instead of multiple ifs
2016-09-15 Matt CaswellRevert "Abort on unrecognised warning alerts"
2016-09-13 Matt CaswellAbort on unrecognised warning alerts
2016-09-08 Matt CaswellEnsure trace recognises X25519
2016-09-07 Rich SalzAdd missing debug strings.
2016-08-30 Matt CaswellEnsure the CertStatus message adds a DTLS message heade...
2016-08-26 Rich SalzRemove trailing zeros
2016-08-24 Rich SalzPut DES into "not default" category.
2016-08-24 Rich SalzTo avoid SWEET32 attack, move 3DES to weak
2016-08-24 Rob PercivalFix comment about return value of ct_extract_tls_extens...
2016-08-24 Matt CaswellRemove some dead code from rec_layer_s3.c
2016-08-23 Dr. Stephen HensonSanity check ticket length.
2016-08-22 Matt CaswellFix leak on error in tls_construct_cke_gost
2016-08-22 Matt CaswellPrevent DTLS Finished message injection
2016-08-22 Matt CaswellFix DTLS buffered message DoS attack
2016-08-19 Matt CaswellFix DTLS replay protection
2016-08-19 Matt CaswellFix DTLS unprocessed records bug
2016-08-18 Emilia KasperIndent ssl/
2016-08-17 Dr. Stephen HensonConstify ssl_cert_type()
2016-08-17 Dr. Stephen HensonConvert X509* functions to use const getters
2016-08-17 Remi GacogneAdd missing session id and tlsext_status accessors
2016-08-16 Matt CaswellConvert SSL_SESSION* functions to use const getters
2016-08-16 Matt CaswellEnsure we unpad in constant time for read pipelining
2016-08-16 David WoodhouseFix satsub64be() to unconditionally use 64-bit integers
2016-08-15 Matt CaswellAddress feedback on SSLv2 ClientHello processing
2016-08-15 Matt CaswellSend an alert if we get a non-initial record with the...
2016-08-15 Matt CaswellAddress feedback on SSLv2 ClientHello processing
2016-08-15 Rob PercivalImproves CTLOG_STORE setters
2016-08-15 Dr. Stephen HensonFix no-ec
2016-08-13 Dr. Stephen HensonModify TLS support for new X25519 API.
2016-08-12 Rich SalzGH1446: Add SSL_SESSION_get0_cipher
2016-08-08 Adam LangleyFix test of first of 255 CBC padding bytes.
2016-08-06 JimCFix CIPHER_DEBUG
2016-08-05 klemensspelling fixes, just comments and readme.
2016-08-05 Richard LevitteRemove OPENSSL_NO_STDIO guards around certain SSL cert...
2016-08-04 David WoodhouseFix ubsan 'left shift of negative value -1' error in...
2016-08-04 David WoodhouseMake DTLS1_BAD_VER work with DTLS_client_method()
2016-08-04 David WoodhouseFix cipher support for DTLS1_BAD_VER
2016-08-04 David WoodhouseFix DTLS_VERSION_xx() comparison macros for DTLS1_BAD_VER
2016-08-04 David WoodhouseFix ossl_statem_client_max_message_size() for DTLS1_BAD_VER
2016-08-04 David WoodhouseFix SSL_export_keying_material() for DTLS1_BAD_VER
2016-08-01 Ben Lauriepeer_tmp doesn't exist if no-ec no-dh.
2016-07-30 Matt CaswellFix crash as a result of MULTIBLOCK
2016-07-29 Matt CaswellSimplify and rename SSL_set_rbio() and SSL_set_wbio()
2016-07-29 Matt CaswellFix BIO_pop for SSL BIOs
2016-07-29 Matt CaswellFix BIO_push ref counting for SSL BIO
2016-07-29 Matt CaswellDon't double free the write bio
2016-07-29 Matt CaswellMake the checks for an SSLv2 style record stricter
2016-07-25 russorzero pad DHE public key in ServerKeyExchange message...
2016-07-25 FdaSilvaYYEnforce and explicit some const casting
2016-07-23 Richard LevitteCorrect misspelt OPENSSL_NO_SRP
2016-07-22 Dr. Stephen HensonSend alert for bad DH CKE
2016-07-22 Richard LevitteHave load_buildtin_compression in ssl/ssl_ciph.c return...
2016-07-20 Kurt RoeckxCheck for errors allocating the error strings.
2016-07-20 Matt CaswellNever expose ssl->bbio in the public API.
2016-07-20 FdaSilvaYYFix a few if(, for(, while( inside code.
2016-07-19 Dr. Stephen HensonSanity check in ssl_get_algorithm2().
2016-07-19 Dr. Stephen HensonSend alert on CKE error.
2016-07-19 Richard LevitteChange all our uses of CRYPTO_THREAD_run_once to use...
2016-07-19 Emilia KasperFix two bugs in clienthello processing
2016-07-19 Emilia KasperSSL test framework: port NPN and ALPN tests
next