- 71fa451 Version skew reduction: trivia (I hope). by Ben Laurie · 13 years ago
- a9e1c50 RFC 5878 support. by Ben Laurie · 13 years ago
- 4140965 s2_clnt.c: compensate for compiler bug. by Andy Polyakov · 13 years ago
- c3b1303 PR: 2811 Reported by: Phil Pennock <openssl-dev@spodhuis.org> by Dr. Stephen Henson · 13 years ago
- efb19e1 PR: 2806 Submitted by: PK <runningdoglackey@yahoo.com> by Dr. Stephen Henson · 13 years ago
- c46ecc3 Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 and by Dr. Stephen Henson · 13 years ago
- a708609 Don't try to use unvalidated composite ciphers in FIPS mode by Dr. Stephen Henson · 13 years ago
- 43d5b4f Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL and by Dr. Stephen Henson · 13 years ago
- f2ad358 s23_clnt.c: ensure interoperability by maitaining client "version capability" by Andy Polyakov · 13 years ago
- 09e4e4b Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
- ce33b42 oops, not yet ;-) by Dr. Stephen Henson · 13 years ago
- 579d553 update NEWS by Dr. Stephen Henson · 13 years ago
- b214184 recognise X9.42 DH certificates on servers by Dr. Stephen Henson · 13 years ago
- aa09c2c correct error codes by Dr. Stephen Henson · 13 years ago
- d3ddf02 Disable SHA-2 ciphersuites in < TLS 1.2 connections. by Bodo Möller · 13 years ago
- 800e1cd Additional workaround for PR#2771 by Dr. Stephen Henson · 13 years ago
- 293706e Partial workaround for PR#2771. by Dr. Stephen Henson · 13 years ago
- 4a1fbd1 OPENSSL_NO_SOCK fixes. PR: 2791 Submitted by: Ben Noordhuis by Andy Polyakov · 13 years ago
- 3b1fb1a s3_srvr.c: fix typo. PR: 2538 by Andy Polyakov · 13 years ago
- fc90e42 e_aes_cbc_hmac_sha1.c: handle zero-length payload and engage empty frag by Andy Polyakov · 13 years ago
- adfd95c use different variable for chain iteration by Dr. Stephen Henson · 13 years ago
- b2284ed Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
- a435263 Add support for automatic ECDH temporary key parameter selection. When by Dr. Stephen Henson · 13 years ago
- a20152b ssl/ssl_ciph.c: interim solution for assertion in d1_pkt.c(444). by Andy Polyakov · 13 years ago
- fd2b65c Tidy up EC parameter check code: instead of accessing internal structures by Dr. Stephen Henson · 13 years ago
- 94e9215 PR: 2778(part) Submitted by: John Fitzgibbon <john_fitzgibbon@yahoo.com> by Dr. Stephen Henson · 13 years ago
- d0595f1 Initial revision of ECC extension handling. by Dr. Stephen Henson · 13 years ago
- 7744ef1 use client version when deciding whether to send supported signature algorithms extension by Dr. Stephen Henson · 13 years ago
- 156421a oops, revert unrelated patches by Dr. Stephen Henson · 13 years ago
- 61ad826 update FAQ, NEWS by Dr. Stephen Henson · 13 years ago
- d2add2e ssl/t1_enc.c: pay attention to EVP_CIPH_FLAG_CUSTOM_CIPHER. by Andy Polyakov · 13 years ago
- 15a40af Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
- ea6e386 PR: 2756 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> by Dr. Stephen Henson · 13 years ago
- e7f8ff4 New ctrls to retrieve supported signature algorithms and curves and by Dr. Stephen Henson · 13 years ago
- 62b6948 PR: 2755 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> by Dr. Stephen Henson · 13 years ago
- 0fbf8b9 PR: 2748 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> by Dr. Stephen Henson · 13 years ago
- 57cb030 PR: 2739 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> by Dr. Stephen Henson · 13 years ago
- 8f27a92 ABI fixes from 1.0.1-stable by Dr. Stephen Henson · 13 years ago
- 5421196 ABI compliance fixes. by Dr. Stephen Henson · 13 years ago
- 74b4b49 SSL export fixes (from Adam Langley) [original from 1.0.1] by Dr. Stephen Henson · 13 years ago
- de2b5b7 initialise i if n == 0 by Dr. Stephen Henson · 13 years ago
- 206310c Fix bug in CVE-2011-4619: check we have really received a client hello by Dr. Stephen Henson · 13 years ago
- 11eaec9 Submitted by: Eric Rescorla <ekr@rtfm.com> by Dr. Stephen Henson · 13 years ago
- 1df80b6 PR: 2704 Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
- 5997efc Submitted by: Eric Rescorla <ekr@rtfm.com> by Dr. Stephen Henson · 13 years ago
- 5755947 oops, revert unrelated changes by Dr. Stephen Henson · 13 years ago
- f4e1169 Modify client hello version when renegotiating to enhance interop with by Dr. Stephen Henson · 13 years ago
- febec8f typo by Dr. Stephen Henson · 13 years ago
- f71c6e5 Add support for distinct certificate chains per key type and per SSL structure. by Dr. Stephen Henson · 13 years ago
- 9ade64d code tidy by Dr. Stephen Henson · 13 years ago
- c526ed4 Revise ssl code to use a CERT_PKEY structure when outputting a by Dr. Stephen Henson · 13 years ago
- 4379d0e Tidy/enhance certificate chain output code. by Dr. Stephen Henson · 13 years ago
- 08e4ea4 initialise dh_clnt by Dr. Stephen Henson · 13 years ago
- 0d60939 add support for use of fixed DH client certificates by Dr. Stephen Henson · 13 years ago
- 1db5f35 return error if md is NULL by Dr. Stephen Henson · 13 years ago
- 855d291 Fix for DTLS DoS issue introduced by fix for CVE-2011-4109. by Dr. Stephen Henson · 13 years ago
- 8e1dc4d Support for fixed DH ciphersuites. by Dr. Stephen Henson · 13 years ago
- 7bb1cc9 Fix for builds without DTLS support. by Bodo Möller · 13 years ago
- 59e6861 PR: 2671 Submitted by: steve by Dr. Stephen Henson · 13 years ago
- 192540b Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve by Dr. Stephen Henson · 13 years ago
- e745572 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de> by Dr. Stephen Henson · 13 years ago
- 27dfffd Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) by Dr. Stephen Henson · 13 years ago
- d0dc991 Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619) by Dr. Stephen Henson · 13 years ago
- 25536ea Submitted by: Adam Langley <agl@chromium.org> Reviewed by: steve by Dr. Stephen Henson · 13 years ago
- b3720c3 oops, revert wrong patch by Dr. Stephen Henson · 13 years ago
- 5733919 only send heartbeat extension from server if client sent one by Dr. Stephen Henson · 13 years ago
- 4817504 PR: 2658 by Dr. Stephen Henson · 13 years ago
- 84b6e27 make update by Dr. Stephen Henson · 13 years ago
- c79f22c PR: 1794 by Dr. Stephen Henson · 13 years ago
- f3d781b PR: 2326 Submitted by: Tianjie Mao <tjmao@tjmao.net> Reviewed by: steve by Dr. Stephen Henson · 13 years ago
- 7e159e0 PR: 2535 by Dr. Stephen Henson · 13 years ago
- b9e1488 typo by Dr. Stephen Henson · 13 years ago
- 9c52c3e delete unimplemented function from header file, update ordinals by Dr. Stephen Henson · 13 years ago
- b646fc4 remove prototype for deleted SRP function by Dr. Stephen Henson · 13 years ago
- f9b0b45 New ctrl values to clear or retrieve extra chain certs from an SSL_CTX. by Dr. Stephen Henson · 13 years ago
- f2fc307 PR: 1794 by Dr. Stephen Henson · 13 years ago
- 3c0ff9f Remove redundant TLS exporter. by Ben Laurie · 13 years ago
- 7a23626 fix error discrepancy by Dr. Stephen Henson · 13 years ago
- 19b0d0e Resolve a stack set-up race condition (if the list of compression by Bodo Möller · 13 years ago
- ebba6c4 PR: 1794 by Dr. Stephen Henson · 13 years ago
- 6f31dd7 Fix NPN implementation for renegotiation. (Problem pointed out by Ben Murphy.) by Bodo Möller · 13 years ago
- 1c78c43 move internal functions to ssl_locl.h by Dr. Stephen Henson · 13 years ago
- 21b52dd bcmp doesn't exist on all platforms, replace with memcmp by Dr. Stephen Henson · 13 years ago
- e0af040 Add TLS exporter. by Ben Laurie · 13 years ago
- 333f926 Add DTLS-SRTP. by Ben Laurie · 13 years ago
- ae55176 Fix some warnings caused by __owur. Temporarily (I hope) remove the more by Ben Laurie · 13 years ago
- 0c58d22 PR: 1794 by Dr. Stephen Henson · 13 years ago
- 930e801 PR: 2628 by Dr. Stephen Henson · 13 years ago
- fe0e302 PR: 2628 by Dr. Stephen Henson · 13 years ago
- 45906fe Use correct tag for SRP username. by Dr. Stephen Henson · 13 years ago
- ffbfbef more vxworks patches by Dr. Stephen Henson · 13 years ago
- 3ddc06f In ssl3_clear, preserve s3->init_extra along with s3->rbuf. by Bodo Möller · 13 years ago
- eb47b2f add GCM ciphers in SSL_library_init by Dr. Stephen Henson · 13 years ago
- a0f2130 disable GCM if not available by Dr. Stephen Henson · 13 years ago
- 7d7c13c Don't disable TLS v1.2 by default now. by Dr. Stephen Henson · 13 years ago
- 6dd5473 use client version when eliminating TLS v1.2 ciphersuites in client hello by Dr. Stephen Henson · 13 years ago
- fca38e3 fix signed/unsigned warning by Dr. Stephen Henson · 14 years ago
- d18a0df make sure eivlen is initialised by Dr. Stephen Henson · 14 years ago
- 1d7392f PR: 2602 by Dr. Stephen Henson · 14 years ago
- c519e89 Fix session handling. by Bodo Möller · 14 years ago