1. 4b6dee2 Parse custom extensions after internal extensions. by Dr. Stephen Henson · 10 years ago
  2. 33f653a New extension callback features. by Dr. Stephen Henson · 11 years ago
  3. 707b026 Remove serverinfo checks. by Dr. Stephen Henson · 11 years ago
  4. 28ea0a0 Add custom extension sanity checks. by Dr. Stephen Henson · 11 years ago
  5. ecf4d66 Custom extension revision. by Dr. Stephen Henson · 11 years ago
  6. f756fb4 RT1815: More const'ness improvements by Justin Blanchard · 11 years ago
  7. b83294f Revision of custom extension code. by Dr. Stephen Henson · 11 years ago
  8. 80bd7b4 Fix SRP ciphersuite DoS vulnerability. by Dr. Stephen Henson · 11 years ago
  9. fb0bc2b Fix race condition in ssl_parse_serverhello_tlsext by Gabor Tyukasz · 11 years ago
  10. 22a10c8 Fix possible buffer overrun. by Ben Laurie · 11 years ago
  11. 161e0a6 More constification. by Ben Laurie · 11 years ago
  12. 44724be Fix memory leak. by Dr. Stephen Henson · 11 years ago
  13. c7f2673 Check there is enough room for extension. by David Benjamin · 11 years ago
  14. 01f2f18 Option to disable padding extension. by Dr. Stephen Henson · 11 years ago
  15. 487dac8 Fix cast of boolean where cast of LHS intended. by Juli Mallett · 11 years ago
  16. deffd89 Fix bug in signature algorithm copy. by Dr. Stephen Henson · 11 years ago
  17. 731f431 Add heartbeat extension bounds check. by Dr. Stephen Henson · 11 years ago
  18. cd6bd5f Set TLS padding extension value. by Dr. Stephen Henson · 11 years ago
  19. b362cca Security framework. by Dr. Stephen Henson · 11 years ago
  20. 8b8e5be Allow return of supported ciphers. by Dr. Stephen Henson · 11 years ago
  21. 09599b5 Auto DH support. by Dr. Stephen Henson · 11 years ago
  22. 4563da1 Fix memory leak with client auth. by Dr. Stephen Henson · 11 years ago
  23. ded1863 Move CT viewer extension code to crypto/x509v3 by Dr. Stephen Henson · 11 years ago
  24. e91fb53 Make i2r_sctlist static. by Ben Laurie · 11 years ago
  25. b263f21 Move the SCT List extension parser into libssl. by Rob Stradling · 11 years ago
  26. 9dabfce Don't break out of the custom extension callback loop - continue instead by Scott Deboy · 11 years ago
  27. 0a60287 Fix whitespace, new-style comments. by Ben Laurie · 11 years ago
  28. e9add06 Re-add alert variables removed during rebase Whitespace fixes by Scott Deboy · 11 years ago
  29. ac20719 Update custom TLS extension and supplemental data 'generate' callbacks to support sending an alert. by Scott Deboy · 11 years ago
  30. d0b039d Omit initial status request callback check. by Kaspar Brand · 11 years ago
  31. 4082fea use SSL_kECDHE throughout instead of SSL_kEECDH by Daniel Kahn Gillmor · 11 years ago
  32. f6dfbee Update curve list size. by Dr. Stephen Henson · 11 years ago
  33. 4fcdd66 Update to pad extension. by Dr. Stephen Henson · 11 years ago
  34. 2911575 Fix compilation with no-nextprotoneg. by Piotr Sikora · 11 years ago
  35. 0467ea6 Experimental workaround TLS filler (WTF) extension. by Dr. Stephen Henson · 11 years ago
  36. 29b490a Fix SSL_OP_SINGLE_ECDH_USE by Piotr Sikora · 11 years ago
  37. 4547363 Prevent use of RSA+MD5 in TLS 1.2 by default. by Dr. Stephen Henson · 11 years ago
  38. 6699cb8 Add brainpool curves to NID table too. by Dr. Stephen Henson · 11 years ago
  39. c2c76a4 RFC7027 (Brainpool for TLS) support. by Dr. Stephen Henson · 11 years ago
  40. cbf8123 Tidy up comments. by Rob Stradling · 12 years ago
  41. 378341e Use TLS version supplied by client when fingerprinting Safari. by Rob Stradling · 12 years ago
  42. 5e3ff62 Experimental encrypt-then-mac support. by Dr. Stephen Henson · 12 years ago
  43. a6a48e8 Make it build. by Ben Laurie · 12 years ago
  44. 3608618 Add callbacks supporting generation and retrieval of supplemental data entries, facilitating RFC 5878 (TLS auth extensions) by Scott Deboy · 12 years ago
  45. dece320 Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X. by Rob Stradling · 12 years ago
  46. 14536c8 Make no-ec compilation work. by Dr. Stephen Henson · 12 years ago
  47. 0b2bde7 Various custom extension fixes. by Trevor Perrin · 12 years ago
  48. 6f017a8 Support ALPN. by Adam Langley · 12 years ago
  49. 5382adb Cosmetic touchups. by Trevor · 12 years ago
  50. 9cd50f7 Cleanup of custom extension stuff. by Trevor · 12 years ago
  51. a398f82 Add support for arbitrary TLS extensions. by Trevor · 12 years ago
  52. 1e2d4cb Make TLS 1.2 ciphers work again. by Dr. Stephen Henson · 12 years ago
  53. 4221c0d Enable TLS 1.2 ciphers in DTLS 1.2. by Dr. Stephen Henson · 12 years ago
  54. 874a18c Enable various DTLS extensions. by Dr. Stephen Henson · 12 years ago
  55. cbd6489 Use enc_flags when deciding protocol variations. by Dr. Stephen Henson · 12 years ago
  56. 173e72e DTLS revision. by Dr. Stephen Henson · 12 years ago
  57. 7c770d5 Add and use a constant-time memcmp. by Ben Laurie · 12 years ago
  58. c38b76b Fix warning: lenmax isn't used any more. by Dr. Stephen Henson · 12 years ago
  59. eef6935 Remove extraneous brackets (clang doesn't like them). by Ben Laurie · 12 years ago
  60. 517dd30 Can't check a size_t for < 0. by Ben Laurie · 12 years ago
  61. 230ec17 Use client version when deciding which cipher suites to disable. by Dr. Stephen Henson · 12 years ago
  62. b34aa49 revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 instead by Dr. Stephen Henson · 12 years ago
  63. d372d36 allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY mode by Dr. Stephen Henson · 12 years ago
  64. 5087afa Use default point formats extension for server side as well as client by Dr. Stephen Henson · 12 years ago
  65. e83aefb reject zero length point format list or supported curves extensions by Dr. Stephen Henson · 12 years ago
  66. ddd13d6 fix typo and warning by Dr. Stephen Henson · 12 years ago
  67. 8bb870d new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for some operations (currently curves and signature algorithms) by Dr. Stephen Henson · 12 years ago
  68. e5db9c3 Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificate by Dr. Stephen Henson · 13 years ago
  69. 2daceb0 Call OCSP Stapling callback after ciphersuite has been chosen, so the by Ben Laurie · 13 years ago
  70. 319354e store and print out message digest peer signed with in TLS 1.2 by Dr. Stephen Henson · 13 years ago
  71. ed83ba5 Add compilation flag to disable certain protocol checks and allow use of by Dr. Stephen Henson · 13 years ago
  72. 2ea8035 Add three Suite B modes to TLS code, supporting RFC6460. by Dr. Stephen Henson · 13 years ago
  73. 6dbb621 Make tls1_check_chain return a set of flags indicating checks passed by Dr. Stephen Henson · 13 years ago
  74. ec4a50b Abort handshake if signature algorithm used not supported by peer. by Dr. Stephen Henson · 13 years ago
  75. d18b716 check EC tmp key matches preferences by Dr. Stephen Henson · 13 years ago
  76. 1e4cb46 typo by Dr. Stephen Henson · 13 years ago
  77. 8e2a06b stop warning by Dr. Stephen Henson · 13 years ago
  78. b7bfe69 New function ssl_set_client_disabled to set masks for any ciphersuites by Dr. Stephen Henson · 13 years ago
  79. 15a70fe no need to check s->server as default_nid is never used for TLS 1.2 client authentication by Dr. Stephen Henson · 13 years ago
  80. 3dbc46d Separate client and server permitted signature algorithm support: by default by Dr. Stephen Henson · 13 years ago
  81. 18d7158 Add certificate callback. If set this is called whenever a certificate by Dr. Stephen Henson · 13 years ago
  82. 0f39bab Function tls1_check_ec_server_key is now redundant as we make by Dr. Stephen Henson · 13 years ago
  83. d61ff83 Add new "valid_flags" field to CERT_PKEY structure which determines what by Dr. Stephen Henson · 13 years ago
  84. be681e1 don't use pseudo digests for default values of keys by Dr. Stephen Henson · 13 years ago
  85. 4453cd8 Reorganise supported signature algorithm extension processing. by Dr. Stephen Henson · 13 years ago
  86. 0f229cc Add support for application defined signature algorithms for use with by Dr. Stephen Henson · 13 years ago
  87. 195b9ee Fix memory leak. by Ben Laurie · 13 years ago
  88. aeda172 Parse authz correctly. by Ben Laurie · 13 years ago
  89. 71fa451 Version skew reduction: trivia (I hope). by Ben Laurie · 13 years ago
  90. a9e1c50 RFC 5878 support. by Ben Laurie · 13 years ago
  91. 09e4e4b Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
  92. aa09c2c correct error codes by Dr. Stephen Henson · 13 years ago
  93. b2284ed Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
  94. a435263 Add support for automatic ECDH temporary key parameter selection. When by Dr. Stephen Henson · 13 years ago
  95. fd2b65c Tidy up EC parameter check code: instead of accessing internal structures by Dr. Stephen Henson · 13 years ago
  96. d0595f1 Initial revision of ECC extension handling. by Dr. Stephen Henson · 13 years ago
  97. 7744ef1 use client version when deciding whether to send supported signature algorithms extension by Dr. Stephen Henson · 13 years ago
  98. 156421a oops, revert unrelated patches by Dr. Stephen Henson · 13 years ago
  99. 61ad826 update FAQ, NEWS by Dr. Stephen Henson · 13 years ago
  100. e7f8ff4 New ctrls to retrieve supported signature algorithms and curves and by Dr. Stephen Henson · 13 years ago