- f756fb4 RT1815: More const'ness improvements by Justin Blanchard · 11 years ago
- ec5a992 Use more common name for GOST key exchange. by Dr. Stephen Henson · 11 years ago
- 924e5ed Add names of GOST algorithms. by Peter Mosmans · 11 years ago
- 7cb472b Make disabling last cipher work. by Thijs Alkemade · 11 years ago
- 2841d6c Fix off-by-one errors in ssl_cipher_get_evp() by Miod Vallat · 11 years ago
- cf1b08c Revert "Fix off-by-one errors in ssl_cipher_get_evp()" by Matt Caswell · 11 years ago
- abfb989 Fix off-by-one errors in ssl_cipher_get_evp() by Kurt Cancemi · 11 years ago
- 447280c SRP ciphersuite correction. by Dr. Stephen Henson · 11 years ago
- 21e0c1d Set security level in cipher string. by Dr. Stephen Henson · 11 years ago
- db7b5e0 Add function to free compression methods. by Dr. Stephen Henson · 11 years ago
- b45e874 Return previous compression methods when setting them. by Dr. Stephen Henson · 11 years ago
- cbb6744 New function to set compression methods so they can be safely freed. by Dr. Stephen Henson · 11 years ago
- 4b5cce6 Replace EDH-RSA-DES-CBC-SHA, etc. with DHE-RSA-DES-CBC-SHA by Daniel Kahn Gillmor · 11 years ago
- 5a21cad use SSL_kDHE throughout instead of SSL_kEDH by Daniel Kahn Gillmor · 11 years ago
- 7988163 Allow "DHE" and "kDHE" as synonyms of "EDH" and "kEDH" when specifiying ciphers by Daniel Kahn Gillmor · 11 years ago
- 4082fea use SSL_kECDHE throughout instead of SSL_kEECDH by Daniel Kahn Gillmor · 11 years ago
- 7963dde Allow "ECDHE" as a synonym of "EECDH" when specifiying ciphers by Daniel Kahn Gillmor · 11 years ago
- 5e3ff62 Experimental encrypt-then-mac support. by Dr. Stephen Henson · 12 years ago
- 14536c8 Make no-ec compilation work. by Dr. Stephen Henson · 12 years ago
- 8a97a33 Add AES-SHA256 stitch. by Andy Polyakov · 12 years ago
- 4544f0a Suite B support for DTLS 1.2 by Dr. Stephen Henson · 12 years ago
- 4842dde return error if Suite B mode is selected and TLS 1.2 can't be used. Correct error coded by Dr. Stephen Henson · 12 years ago
- d900c0a set auto ecdh parameter selction for Suite B by Dr. Stephen Henson · 12 years ago
- 1c16fd1 add Suite B 128 bit mode offering only combination 2 by Dr. Stephen Henson · 12 years ago
- 8ab92fc add "missing" TLSv1.2 cipher alias by Dr. Stephen Henson · 12 years ago
- 323fa64 If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" as by Dr. Stephen Henson · 12 years ago
- 94a209d Add ctrl and utility functions to retrieve raw cipher list sent by client in by Dr. Stephen Henson · 13 years ago
- d47c01a perform sanity checks on server certificate type as soon as it is received instead of waiting until server key exchange by Dr. Stephen Henson · 13 years ago
- 2ea8035 Add three Suite B modes to TLS code, supporting RFC6460. by Dr. Stephen Henson · 13 years ago
- a708609 Don't try to use unvalidated composite ciphers in FIPS mode by Dr. Stephen Henson · 13 years ago
- a20152b ssl/ssl_ciph.c: interim solution for assertion in d1_pkt.c(444). by Andy Polyakov · 13 years ago
- 8e1dc4d Support for fixed DH ciphersuites. by Dr. Stephen Henson · 13 years ago
- 19b0d0e Resolve a stack set-up race condition (if the list of compression by Bodo Möller · 13 years ago
- a0f2130 disable GCM if not available by Dr. Stephen Henson · 13 years ago
- 28dd49f Expand range of ctrls for AES GCM to support retrieval and setting of by Dr. Stephen Henson · 14 years ago
- d09677a Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support and by Dr. Stephen Henson · 14 years ago
- 146e1fc ssl/ssl_ciph.c: allow to switch to predefined "composite" cipher/mac by Andy Polyakov · 14 years ago
- 086e32a Implement FIPS_mode and FIPS_mode_set by Dr. Stephen Henson · 14 years ago
- 823df31 Disable SHA256 if not supported. by Dr. Stephen Henson · 14 years ago
- 7409d7a Initial incomplete TLS v1.2 support. New ciphersuites added, new version by Dr. Stephen Henson · 14 years ago
- 08557cf Initial "opaque SSL" framework. If an application defines by Dr. Stephen Henson · 14 years ago
- edc032b Add SRP support. by Ben Laurie · 14 years ago
- c8bbd98 Fix warnings. by Ben Laurie · 15 years ago
- 7689ed3 PR: 2025 by Dr. Stephen Henson · 16 years ago
- 14b3f10 Update from 0.9.8-stable. by Dr. Stephen Henson · 16 years ago
- 78625ca Submitted by: Victor Duchovni <Victor.Duchovni@morganstanley.com> by Dr. Stephen Henson · 16 years ago
- fceac0b Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP by Lutz Jänicke · 16 years ago
- 0eab41f If we're going to return errors (no matter how stupid), then we should by Ben Laurie · 16 years ago
- 70531c1 Make no-engine work again. by Dr. Stephen Henson · 16 years ago
- 349e78e Stop warning about different const qualifiers. by Dr. Stephen Henson · 16 years ago
- bfaead2 Fix warning. by Ben Laurie · 16 years ago
- ab7e09f Win32 fixes... add new directory to build system. Fix warnings. by Dr. Stephen Henson · 16 years ago
- babb379 Type-checked (and modern C compliant) OBJ_bsearch. by Ben Laurie · 16 years ago
- 3ad74ed Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a new by Dr. Stephen Henson · 17 years ago
- 0e1dba9 1. Changes for s_client.c to make it return non-zero exit code in case by Dr. Stephen Henson · 17 years ago
- a6fbcb4 Change safestack reimplementation to match 0.9.8. by Dr. Stephen Henson · 18 years ago
- 8102566 Update ssl code to support digests other than MD5+SHA1 in handshake. by Dr. Stephen Henson · 18 years ago
- b948e2c Update ssl library to support EVP_PKEY MAC API. Include generic MAC support. by Dr. Stephen Henson · 18 years ago
- 96afc1c Add SEED encryption algorithm. by Bodo Möller · 18 years ago
- 9981a51 Stage 1 GOST ciphersuite support. by Dr. Stephen Henson · 18 years ago
- aa79dd6 prefer SHA1 over MD5 (this affects the Kerberos ciphersuites) by Bodo Möller · 18 years ago
- 114c9c3 SSL_kKRB5 ciphersuites shouldn't be preferred by default by Bodo Möller · 18 years ago
- fd5bc65 Improve ciphersuite order stability when disabling ciphersuites. by Bodo Möller · 18 years ago
- e041863 fix a typo in the new ciphersuite ordering code by Bodo Möller · 18 years ago
- 0a05123 Include "!eNULL" in SSL_DEFAULT_CIPHER_LIST to make sure that a by Bodo Möller · 18 years ago
- 52b8dad Reorganize the data used for SSL ciphersuite pattern matching. by Bodo Möller · 18 years ago
- 39d764e remove undefined constant by Nils Larsch · 18 years ago
- ed65f7d ensure that ciphersuite strings such as "RC4-MD5" match the SSL 2.0 by Bodo Möller · 19 years ago
- 777c47a Make things static that should be. Declare stuff in headers that should be. by Ben Laurie · 19 years ago
- ed3ecd8 Error messages for client ECC cert verification. by Bodo Möller · 19 years ago
- 09e20e0 Fix another new bug in the cipherstring logic. by Bodo Möller · 19 years ago
- a717831 Fix another bug introduced yesterday when deleting Fortezza stuff: by Bodo Möller · 19 years ago
- 89bbe14 Ciphersuite string bugfixes, and ECC-related (re-)definitions. by Bodo Möller · 19 years ago
- 675f605 Thread-safety fixes by Bodo Möller · 19 years ago
- f3dea9a Camellia cipher, contributed by NTT by Bodo Möller · 19 years ago
- ba1ba5f If cipher list contains a match for an explicit ciphersuite only match that by Dr. Stephen Henson · 19 years ago
- ddac197 add initial support for RFC 4279 PSK SSL ciphersuites by Nils Larsch · 19 years ago
- 09b6c2e Make OPENSSL_NO_COMP compile again. by Dr. Stephen Henson · 20 years ago
- 7f3c903 initialize cipher/digest methods table in SSL_library_init() and hence remove the need for a lock by Nils Larsch · 20 years ago
- f0747cd - let SSL_CTX_set_cipher_list and SSL_set_cipher_list return an by Nils Larsch · 20 years ago
- 052ec89 use "=" instead of "|=", fix typo by Nils Larsch · 20 years ago
- cbed917 ssl_create_cipher_list should return an error if no cipher could be by Nils Larsch · 20 years ago
- 0821bcd Constification. by Ben Laurie · 20 years ago
- f4bfd35 some const fixes by Nils Larsch · 20 years ago
- c284f20 Fix race condition when SSL ciphers are initialized. by Dr. Stephen Henson · 20 years ago
- 5fdf066 Avoid including cryptlib.h, it's not really needed. by Richard Levitte · 21 years ago
- 3822740 We're getting a clash with C++ because it has a type called 'list'. by Richard Levitte · 21 years ago
- d8ec0dc Avoid some shadowed variable names. Submitted by: Nils Larsch by Geoff Thorpe · 21 years ago
- 377dcdb Add functionality to get information on compression methods (not quite complete). by Richard Levitte · 21 years ago
- 8242354 Make sure int SSL_COMP_add_compression_method() checks if a certain by Richard Levitte · 21 years ago
- f6e8c19 Correct a mixup of return values by Richard Levitte · 22 years ago
- f65a757 Fix ordering of compare functions: strncmp() must be used first, a by Lutz Jänicke · 22 years ago
- f70ddce Protect loading routines with a lock. PR: 373 by Richard Levitte · 22 years ago
- 7ba666f Since it's defined in draft-ietf-tls-compression-04.txt, let's make by Richard Levitte · 22 years ago
- ea26226 ECC ciphersuite support by Bodo Möller · 23 years ago
- c6ccf05 New cipher selection options COMPLEMENTOFALL and COMPLEMENTOFDEFAULT. by Lutz Jänicke · 23 years ago
- ea4f109 AES cipher suites are now official (RFC3268) by Bodo Möller · 23 years ago
- a4f576a disable AES ciphersuites unless explicitly requested by Bodo Möller · 23 years ago
- a32d795 avoid everything resembling a magic trigraph by Bodo Möller · 24 years ago
- 4db73c1 (A version of) gcc had been giving somewhat odd "trigraph" warnings about by Geoff Thorpe · 24 years ago