Fix off-by-one in BN_rand
[openssl.git] / ssl /
2015-04-14 Matt CaswellFix ssl_get_prev_session overrun
2015-04-14 Matt CaswellCheck for ClientHello message overruns
2015-03-19 Matt CaswellFix unsigned/signed warnings
2015-03-19 Richard LevitteVMS build fix
2015-03-19 Emilia KasperFix reachable assert in SSLv2 servers.
2015-03-14 Kurt RoeckxDisable export and SSLv2 ciphers by default
2015-03-11 Matt CaswellCleanse buffers
2015-02-06 Matt CaswellFix error handling in ssltest
2015-01-22 Matt CaswellRe-align some comments after running the reformat script. OpenSSL_0_9_8-post-reformat
2015-01-22 Matt CaswellRerun util/openssl-format-source -v -c . OpenSSL_0_9_8-post-auto-reformat
2015-01-22 Matt CaswellRun util/openssl-format-source -v -c .
2015-01-22 Matt CaswellMore comment changes required for indent OpenSSL_0_9_8-pre-auto-reformat
2015-01-22 Matt CaswellYet more changes to comments
2015-01-22 Matt CaswellMore tweaks for comments due indent issues
2015-01-22 Matt CaswellTweaks for comments due to indent's inability to handle...
2015-01-22 Matt CaswellMove more comments that confuse indent
2015-01-22 Matt CaswellFix indent comment corruption issue
2015-01-22 Matt Caswellindent has problems with comments that are on the right...
2015-01-22 Matt CaswellFix source where indent will not be able to cope
2015-01-22 Matt CaswellAdditional comment changes for reformat of 0.9.8
2015-01-22 Matt CaswellFurther comment amendments to preserve formatting prior...
2015-01-22 Tim Hudsonmark all block comments that need format preserving...
2015-01-08 Dr. Stephen HensonFix typo.
2015-01-08 Matt CaswellFollow on from CVE-2014-3571. This fixes the code that...
2015-01-08 Dr. Stephen HensonFix crash in dtls1_get_record whilst in the listen...
2015-01-07 Dr. Stephen Hensonfix error discrepancy
2015-01-06 Dr. Stephen HensonOnly allow ephemeral RSA keys in export ciphersuites.
2015-01-05 Dr. Stephen HensonECDH downgrade bug fix.
2014-10-21 Bodo MoellerFix and improve SSL_MODE_SEND_FALLBACK_SCSV documentation.
2014-10-21 Bodo MoellerWhen processing ClientHello.cipher_suites, don't ignore...
2014-10-21 Kurt RoeckxFix warning
2014-10-21 Kurt RoeckxKeep old method in case of an unsupported protocol
2014-10-15 Geoff ThorpeFix no-ssl3 configuration option
2014-10-15 Dr. Stephen HensonFix for session tickets memory leak.
2014-10-15 Bodo MoellerOops -- fix typo in coment added with TLS_FALLBACK_SCSV...
2014-10-15 Bodo MoellerSupport TLS_FALLBACK_SCSV.
2014-09-24 Emilia KasperRT3067: simplify patch
2014-09-24 Adam LangleyThis change alters the processing of invalid, RSA pre...
2014-09-24 Emilia KasperRT3066: rewrite RSA padding checks to be slightly more...
2014-09-21 Tim HudsonFixed error introduced in commit f2be92b94dad3c6cbdf79d...
2014-08-28 Emilia KasperConstant-time utilities
2014-08-22 Adam LangleyRT3060: Limit the number of empty records.
2014-08-15 Matt CaswellFixed out-of-bounds read errors in ssl3_get_key_exchange.
2014-08-06 Emilia KäsperFix DTLS anonymous EC(DH) denial of service
2014-08-06 David BenjaminFix protocol downgrade bug in case of fragmented packets
2014-08-06 Adam LangleyRemove some duplicate DTLS code.
2014-08-06 Matt CaswellApplying same fix as in dtls1_process_out_of_seq_messag...
2014-08-06 Adam LangleyFix return code for truncated DTLS fragment.
2014-08-06 Adam LangleyFix memory leak from zero-length DTLS fragments.
2014-08-06 Matt CaswellFix DTLS handshake message size checks.
2014-08-06 Matt CaswellAdded comment for the frag->reassembly == NULL case...
2014-08-06 Adam LangleyAvoid double free when processing DTLS packets.
2014-07-15 Dr. Stephen HensonFix DTLS certificate requesting code.
2014-07-07 Dr. Stephen HensonFix ECC SSLv2 exclusion on OpenSSL 0.9.8.
2014-07-05 Dr. Stephen HensonDon't limit message sizes in ssl3_get_cert_verify.
2014-06-29 Dr. Stephen HensonFix memory leak.
2014-06-27 Dr. Stephen HensonDon't disable state strings with no-ssl2
2014-06-27 Ken BallouRemove redundant check.
2014-06-27 Tomas MrazDon't advertise ECC ciphersuits in SSLv2 compatible...
2014-06-22 Miod Vallat Fix off-by-one errors in ssl_cipher_get_evp()
2014-06-22 Matt CaswellRevert " Fix off-by-one errors in ssl_cipher_get_evp()"
2014-06-14 Dr. Stephen HensonAccept CCS after sending finished.
2014-06-12 Kurt Cancemi Fix off-by-one errors in ssl_cipher_get_evp()
2014-06-12 Ben LaurieAllow the maximum value.
2014-06-10 Dr. Stephen HensonFix null pointer errors.
2014-06-05 Matt CaswellFixed Windows compilation failure
2014-06-03 Dr. Stephen HensonFix CVE-2014-3470
2014-06-03 Dr. Stephen HensonFix CVE-2014-0221
2014-06-03 Dr. Stephen HensonAdditional CVE-2014-0224 protection.
2014-06-03 Dr. Stephen HensonFix for CVE-2014-0224
2014-06-03 Dr. Stephen HensonFix for CVE-2014-0195
2014-06-02 zhu qun-yingFree up s->d1->buffered_app_data.q properly.
2014-06-02 Sami FarinTypo: set i to -1 before goto.
2014-06-01 David RamosAllocate extra space when NETSCAPE_HANG_BUG defined.
2014-05-29 Ben LaurieFix signed/unsigned warning.
2014-05-24 Matt CaswellFix for non compilation with TLS_DEBUG defined
2014-05-12 Kurt RoeckxCheck sk_SSL_CIPHER_num() after assigning sk.
2014-05-11 Günther NoackAvoid out-of-bounds write in SSL_get_shared_ciphers
2014-05-11 Tim Hudsonsafety check to ensure we dont send out beyond the...
2014-03-27 manchaFix alert handling.
2014-01-04 Dr. Stephen HensonRestore SSL_OP_MSIE_SSLV2_RSA_PADDING
2013-10-04 Rob StradlingFix compilation with this branch's definition of SSL_CI...
2013-10-04 Rob StradlingRemove empty line.
2013-10-04 Rob StradlingTidy up comments.
2013-10-04 Rob StradlingUse TLS version supplied by client when fingerprinting...
2013-10-04 Rob StradlingBackport TLS 1.1/1.2 #defines
2013-10-04 Rob StradlingDon't prefer ECDHE-ECDSA ciphers when the client appear...
2013-08-13 Michael TuexenDTLS message_sequence number wrong in rehandshake Serve...
2013-08-08 Michael TuexenDTLS handshake fix.
2013-04-08 Dr. Stephen HensonSet s->d1 to NULL after freeing it.
2013-03-19 Dr. Stephen HensonDisable compression for DTLS.
2013-03-18 Michael TuexenAvoid unnecessary fragmentation.
2013-02-26 Dr. Stephen HensonMerge branch 'OpenSSL_0_9_8-stable' of /home/steve...
2013-02-26 Geoff LoweUse orig_len, not rec->orig_len
2013-02-12 David WoodhouseCheck DTLS_BAD_VER for version number.
2013-02-11 Dr. Stephen HensonFix for SSL_get_certificate
2013-02-11 Dr. Stephen HensonFix in ssltest is no-ssl2 configured
2013-02-09 Andy Polyakovssl/s3_[clnt|srvr].c: fix warning and linking error.
2013-02-08 Andy Polyakovs3_cbc.c: make CBC_MAC_ROTATE_IN_PLACE universal.
2013-02-08 Andy Polyakovs3_cbc.c: get rid of expensive divisions [from master].
next