1. 66fab92 Mark DTLS records as read when we have finished with them by Matt Caswell · 7 years ago
  2. f750641 Keep the DTLS timer running after the end of the handshake if appropriate by Matt Caswell · 7 years ago
  3. ad96225 Only auto-retry for DTLS if configured to do so by Matt Caswell · 7 years ago
  4. 6ec5fce Update copyright year by Matt Caswell · 7 years ago
  5. fe1128d Fix last(?) batch of malloc-NULL places by Rich Salz · 7 years ago
  6. 5b79813 Fix SSL_pending() for DTLS by Matt Caswell · 7 years ago
  7. b0edda1 Update copyright year by Matt Caswell · 7 years ago
  8. 16cfc2c Don't use a ssl specific DRBG anymore by Kurt Roeckx · 7 years ago
  9. a080c3e Fix a memory leak in tls1_mac by Bernd Edlinger · 7 years ago
  10. 302d169 Fix a memory leak in n_ssl3_mac by Bernd Edlinger · 7 years ago
  11. 3295d24 Use the TLSv1.3 record header as AAD by Matt Caswell · 7 years ago
  12. 77376c0 Remove OSSLzu, and fix the one place that used it. by Rich Salz · 7 years ago
  13. 5f7470d The record version for ClientHello2 should be TLS1.2 by Matt Caswell · 7 years ago
  14. 6738bf1 Update copyright year by Matt Caswell · 7 years ago
  15. ebc20cf Swap the check in ssl3_write_pending to avoid using by Bernd Edlinger · 7 years ago
  16. 3faa07b Move decisions about whether to accept reneg into the state machine by Matt Caswell · 7 years ago
  17. 48e5119 Copyright update of more files that have changed this year by Richard Levitte · 7 years ago
  18. 08455bc Tolerate DTLS alerts with an incorrect version number by Matt Caswell · 7 years ago
  19. fc7129d Update state machine to send CCS based on whether we did an HRR by Matt Caswell · 7 years ago
  20. fdd9236 Drop CCS messages received in the TLSv1.3 handshake by Matt Caswell · 7 years ago
  21. 2d729db Send TLSv1.2 as the record version when using TLSv1.3 by Matt Caswell · 7 years ago
  22. 921d84a Convert the remaining functions in the record layer to use SSLfatal() by Matt Caswell · 7 years ago
  23. 5591a61 Convert dlts1_write_bytes() to use SSLfatal() by Matt Caswell · 7 years ago
  24. c285338 More record layer conversions to use SSLfatal() by Matt Caswell · 7 years ago
  25. 99dd374 Convert ssl3_read_bytes() to use SSLfatal() by Matt Caswell · 7 years ago
  26. 196f2cb Update ssl3_get_record() to use SSLfatal() by Matt Caswell · 7 years ago
  27. cbe2964 Consistent formatting for sizeof(foo) by Rich Salz · 7 years ago
  28. e7d961e Remove spurious whitespace by Matt Caswell · 7 years ago
  29. d273b60 Convert more functions in ssl/statem/statem_dtls.c to use SSLfatal() by Matt Caswell · 7 years ago
  30. f63a17d Convert the state machine code to use SSLfatal() by Matt Caswell · 7 years ago
  31. 3a63c0e Resolve warnings in VC-WIN32 build, which allows to add /WX. by Andy Polyakov · 7 years ago
  32. f479eab style : fix some if(... by FdaSilvaYY · 7 years ago
  33. 1c47d35 Mark a zero length record as read by Matt Caswell · 7 years ago
  34. cf72c75 Implement Maximum Fragment Length TLS extension. by FdaSilvaYY · 7 years ago
  35. 26a7d93 Remove parentheses of return. by KaoruToda · 7 years ago
  36. beb3094 Tweak the comment regarding record version check with respect to TLSv1.3 by Matt Caswell · 7 years ago
  37. a2b97bd Don't do version neg on an HRR by Matt Caswell · 7 years ago
  38. 208fb89 Since return is inconsistent, I removed unnecessary parentheses and by KaoruToda · 7 years ago
  39. 0ef2802 Various review fixes for PSK early_data support by Matt Caswell · 8 years ago
  40. add8d0e Enable the ability to use an external PSK for sending early_data by Matt Caswell · 8 years ago
  41. 677963e e_os.h removal from other headers and source files. by Pauli · 8 years ago
  42. 0e97f1e (Re)move some things from e_os.h by Rich Salz · 8 years ago
  43. ae3947d Add a DRBG to each SSL object by Rich Salz · 8 years ago
  44. 67dc995 Move ossl_assert by Matt Caswell · 8 years ago
  45. 3519bae Fix typos in files in ssl directory by Xiaoyin Liu · 8 years ago
  46. 00f3a01 Remove redundant declarations in record_locl.h by Xiaoyin Liu · 8 years ago
  47. cf34d54 drop some no-longer-relevant TODO(TLS1.3) entries by Benjamin Kaduk · 8 years ago
  48. bd91e3c Fix a bundle of trailing spaces in several files by Paul Yang · 8 years ago
  49. db0f35d Fix #2400 Add NO_RENEGOTIATE option by Todd Short · 8 years ago
  50. dffdcc7 Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION by Todd Short · 8 years ago
  51. 42bd7a1 Add an error to the stack on failure in dtls1_write_bytes() by Matt Caswell · 8 years ago
  52. b77f3ed Convert existing usage of assert() to ossl_assert() in libssl by Matt Caswell · 8 years ago
  53. 380a522 Replace instances of OPENSSL_assert() with soft asserts in libssl by Matt Caswell · 8 years ago
  54. aabe3a3 Fix return code in tls1_mac by Matt Caswell · 8 years ago
  55. fb34a0f Try to be more consistent about the alerts we send by Matt Caswell · 8 years ago
  56. bd990e2 Don't allow fragmented alerts by Matt Caswell · 8 years ago
  57. 9010b7b Add some extra comments following alert changes by Matt Caswell · 8 years ago
  58. fc4c15f TLSv1.3 alert and handshake messages can never be 0 length by Matt Caswell · 8 years ago
  59. 0b367d7 TLSv1.3 alerts cannot be fragmented and only one per record by Matt Caswell · 8 years ago
  60. 3c544ac Check that a TLSv1.3 encrypted message has an app data content type by Matt Caswell · 8 years ago
  61. f66f8a4 Reject unknown warning alerts in TLSv1.3 by Matt Caswell · 8 years ago
  62. ad5100b Add support to SSL_trace() for inner content types by Matt Caswell · 8 years ago
  63. 96c9aee Limit padded record to max plaintext by Todd Short · 8 years ago
  64. c649d10 TLS1.3 Padding by Todd Short · 8 years ago
  65. aefb925 Don't attempt to send fragments > max_send_fragment in DTLS by Matt Caswell · 8 years ago
  66. bd79bcb Remove special case code for SCTP reneg handling by Matt Caswell · 8 years ago
  67. d1186c3 Fix minor compiler issues. by Todd Short · 8 years ago
  68. cbbe918 Additional check to handle BAD SSL_write retry by Rich Salz · 8 years ago
  69. 59cebcf Don't handle handshake messages when writing early data on server by Matt Caswell · 8 years ago
  70. 39ef782 Fix bug with SSL_read_early_data() by Matt Caswell · 8 years ago
  71. 69687aa More typo fixes by FdaSilvaYY · 8 years ago
  72. ef6c191 Update end of early data processing for draft-19 by Matt Caswell · 8 years ago
  73. aebe9e3 Fix some -Wshadow warnings by Benjamin Kaduk · 8 years ago
  74. 4f7b76b Fix no-comp by Matt Caswell · 8 years ago
  75. b8c4961 Provide a function to test whether we have unread records pending by Matt Caswell · 8 years ago
  76. 4321969 Tweak the TLSv1.3 record overflow limits by Matt Caswell · 8 years ago
  77. 7daf715 Don't attempt to write more early_data than we know the server will accept by Matt Caswell · 8 years ago
  78. a832b5e Skip early_data if appropriate after a HelloRetryRequest by Matt Caswell · 8 years ago
  79. 70ef40a Check max_early_data against the amount of early data we actually receive by Matt Caswell · 8 years ago
  80. 67f78ea Make sure we reset the read sequence when skipping records by Matt Caswell · 8 years ago
  81. d781d24 Provide an SSL_read_early() function for reading early data by Matt Caswell · 8 years ago
  82. 0a87d0a Parse the early_data extension by Matt Caswell · 8 years ago
  83. 49e7fe1 Provide functions to write early data by Matt Caswell · 8 years ago
  84. f33f9dd Fix a compression bug by Matt Caswell · 8 years ago
  85. a3004c8 Check for zero records and return immediately by Jon Spillett · 8 years ago
  86. 2f0ca54 Remove some obsolete/obscure internal define switches: by Emilia Kasper · 8 years ago
  87. 38f2837 Remove some commented out code in libssl by Matt Caswell · 8 years ago
  88. b53338c Clean up references to FIPS by Emilia Kasper · 8 years ago
  89. df15c84 Remove some dead code from libssl by Matt Caswell · 8 years ago
  90. 2c55b28 Remove an OPENSSL_assert() and replace with a soft assert and check by Matt Caswell · 8 years ago
  91. 28a31a0 Don't change the state of the ETM flags until CCS processing by Matt Caswell · 8 years ago
  92. 18b3a80 Fix crash in tls13_enc by Matt Caswell · 8 years ago
  93. 20fc205 Use contants for Chacha/Poly, redo algorithm expressions. by Dr. Stephen Henson · 8 years ago
  94. ec07b1d Add CCM mode support for TLS 1.3 by Dr. Stephen Henson · 8 years ago
  95. cc2455b Move TLSv1.3 Session Ticket processing into the state machine by Matt Caswell · 8 years ago
  96. c7f4778 Move state machine knowledge out of the record layer by Matt Caswell · 8 years ago
  97. 0386aad Remove use of the SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS flag by Matt Caswell · 8 years ago
  98. 9799748 ChangeCipherSpec is not allowed in TLSv1.3 by Matt Caswell · 8 years ago
  99. 9d6fcd4 Cleanup EVP_CIPH/EP_CTRL duplicate defines by Todd Short · 8 years ago
  100. 8f77fab Replace div-spoiler hack with simpler code by Andy Polyakov · 8 years ago