- 94a209d Add ctrl and utility functions to retrieve raw cipher list sent by client in by Dr. Stephen Henson · 13 years ago
- 2daceb0 Call OCSP Stapling callback after ciphersuite has been chosen, so the by Ben Laurie · 13 years ago
- d47c01a perform sanity checks on server certificate type as soon as it is received instead of waiting until server key exchange by Dr. Stephen Henson · 13 years ago
- 2ea8035 Add three Suite B modes to TLS code, supporting RFC6460. by Dr. Stephen Henson · 13 years ago
- 6dbb621 Make tls1_check_chain return a set of flags indicating checks passed by Dr. Stephen Henson · 13 years ago
- ec4a50b Abort handshake if signature algorithm used not supported by peer. by Dr. Stephen Henson · 13 years ago
- d18b716 check EC tmp key matches preferences by Dr. Stephen Henson · 13 years ago
- 74ecfab Add support for certificate stores in CERT structure. This makes it by Dr. Stephen Henson · 13 years ago
- b7bfe69 New function ssl_set_client_disabled to set masks for any ciphersuites by Dr. Stephen Henson · 13 years ago
- 9f27b1e Add new ctrl to retrieve client certificate types, print out by Dr. Stephen Henson · 13 years ago
- 3dbc46d Separate client and server permitted signature algorithm support: by default by Dr. Stephen Henson · 13 years ago
- 18d7158 Add certificate callback. If set this is called whenever a certificate by Dr. Stephen Henson · 13 years ago
- 0f39bab Function tls1_check_ec_server_key is now redundant as we make by Dr. Stephen Henson · 13 years ago
- d61ff83 Add new "valid_flags" field to CERT_PKEY structure which determines what by Dr. Stephen Henson · 13 years ago
- 4453cd8 Reorganise supported signature algorithm extension processing. by Dr. Stephen Henson · 13 years ago
- 0f229cc Add support for application defined signature algorithms for use with by Dr. Stephen Henson · 13 years ago
- a5ee80b Make it possible to delete all certificates from an SSL structure. by Dr. Stephen Henson · 13 years ago
- 71fa451 Version skew reduction: trivia (I hope). by Ben Laurie · 13 years ago
- a9e1c50 RFC 5878 support. by Ben Laurie · 13 years ago
- 09e4e4b Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
- ce33b42 oops, not yet ;-) by Dr. Stephen Henson · 13 years ago
- 579d553 update NEWS by Dr. Stephen Henson · 13 years ago
- b2284ed Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> by Dr. Stephen Henson · 13 years ago
- a435263 Add support for automatic ECDH temporary key parameter selection. When by Dr. Stephen Henson · 13 years ago
- fd2b65c Tidy up EC parameter check code: instead of accessing internal structures by Dr. Stephen Henson · 13 years ago
- d0595f1 Initial revision of ECC extension handling. by Dr. Stephen Henson · 13 years ago
- ea6e386 PR: 2756 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> by Dr. Stephen Henson · 13 years ago
- e7f8ff4 New ctrls to retrieve supported signature algorithms and curves and by Dr. Stephen Henson · 13 years ago
- 74b4b49 SSL export fixes (from Adam Langley) [original from 1.0.1] by Dr. Stephen Henson · 13 years ago
- f71c6e5 Add support for distinct certificate chains per key type and per SSL structure. by Dr. Stephen Henson · 13 years ago
- c526ed4 Revise ssl code to use a CERT_PKEY structure when outputting a by Dr. Stephen Henson · 13 years ago
- 4379d0e Tidy/enhance certificate chain output code. by Dr. Stephen Henson · 13 years ago
- 8e1dc4d Support for fixed DH ciphersuites. by Dr. Stephen Henson · 13 years ago
- 4817504 PR: 2658 by Dr. Stephen Henson · 13 years ago
- 7e159e0 PR: 2535 by Dr. Stephen Henson · 13 years ago
- 1c78c43 move internal functions to ssl_locl.h by Dr. Stephen Henson · 13 years ago
- e0af040 Add TLS exporter. by Ben Laurie · 13 years ago
- 1d7392f PR: 2602 by Dr. Stephen Henson · 14 years ago
- 28dd49f Expand range of ctrls for AES GCM to support retrieval and setting of by Dr. Stephen Henson · 14 years ago
- d09677a Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support and by Dr. Stephen Henson · 14 years ago
- f37f20f PR: 2295 by Dr. Stephen Henson · 14 years ago
- 8f82912 Process signature algorithms during TLS v1.2 client authentication. by Dr. Stephen Henson · 14 years ago
- a2f9200 Initial TLS v1.2 client support. Include a default supported signature by Dr. Stephen Henson · 14 years ago
- 6b7be58 Continuing TLS v1.2 support: add support for server parsing of by Dr. Stephen Henson · 14 years ago
- 7409d7a Initial incomplete TLS v1.2 support. New ciphersuites added, new version by Dr. Stephen Henson · 14 years ago
- edc032b Add SRP support. by Ben Laurie · 14 years ago
- bf48836 Fixes to NPN from Adam Langley. by Ben Laurie · 15 years ago
- ee2ffc2 Add Next Protocol Negotiation. by Ben Laurie · 15 years ago
- 8025e25 PR: 2121 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> by Dr. Stephen Henson · 15 years ago
- 637f374 Initial experimental TLSv1.1 support by Dr. Stephen Henson · 15 years ago
- 4996844 PR: 2115 by Dr. Stephen Henson · 15 years ago
- e0e7997 First cut of renegotiation extension. (port to HEAD) by Dr. Stephen Henson · 15 years ago
- b972fba PR: 1997 by Dr. Stephen Henson · 16 years ago
- 9289f21 Update from 1.0.0 stable branch. by Dr. Stephen Henson · 16 years ago
- eb38b26 Update from 1.0.0-stable. by Dr. Stephen Henson · 16 years ago
- e5fa864 Updates from 1.0.0-stable. by Dr. Stephen Henson · 16 years ago
- cc7399e Changes from 1.0.0-stable. by Dr. Stephen Henson · 16 years ago
- fceac0b Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP by Lutz Jänicke · 16 years ago
- 0eab41f If we're going to return errors (no matter how stupid), then we should by Ben Laurie · 16 years ago
- 6ba71a7 Handle the unlikely event that BIO_get_mem_data() returns -ve. by Ben Laurie · 16 years ago
- e19106f Create function of the form OBJ_bsearch_xxx() in bsearch typesafe macros by Dr. Stephen Henson · 16 years ago
- 606f6c4 Fix a shed load or warnings: by Dr. Stephen Henson · 16 years ago
- babb379 Type-checked (and modern C compliant) OBJ_bsearch. by Ben Laurie · 16 years ago
- 96562f2 update comment by Bodo Möller · 17 years ago
- 3ad74ed Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a new by Dr. Stephen Henson · 17 years ago
- 474b3b1 Fix error codes for memory-saving patch. by Bodo Möller · 17 years ago
- 45d3767 Prevent signed/unsigned warning on VC++ by Dr. Stephen Henson · 17 years ago
- 8671b89 Memory saving patch. by Ben Laurie · 17 years ago
- 368888b Add client cert engine to SSL routines. by Dr. Stephen Henson · 17 years ago
- 5d58f1b Prohibit RC4 in DTLS. by Andy Polyakov · 17 years ago
- 67c8e7f Support for certificate status TLS extension. by Dr. Stephen Henson · 18 years ago
- 761772d Implement the Opaque PRF Input TLS extension by Bodo Möller · 18 years ago
- 8102566 Update ssl code to support digests other than MD5+SHA1 in handshake. by Dr. Stephen Henson · 18 years ago
- 956006b Use SHA256 for ticket HMAC if possible. by Dr. Stephen Henson · 18 years ago
- 367eb1f Fix warning and make no-tlsext work. by Dr. Stephen Henson · 18 years ago
- 6434abb RFC4507 (including RFC4507bis) TLS stateless session resumption support by Dr. Stephen Henson · 18 years ago
- b948e2c Update ssl library to support EVP_PKEY MAC API. Include generic MAC support. by Dr. Stephen Henson · 18 years ago
- 96afc1c Add SEED encryption algorithm. by Bodo Möller · 18 years ago
- 9981a51 Stage 1 GOST ciphersuite support. by Dr. Stephen Henson · 18 years ago
- 52b8dad Reorganize the data used for SSL ciphersuite pattern matching. by Bodo Möller · 18 years ago
- ed3ecd8 Error messages for client ECC cert verification. by Bodo Möller · 19 years ago
- 89bbe14 Ciphersuite string bugfixes, and ECC-related (re-)definitions. by Bodo Möller · 19 years ago
- f3dea9a Camellia cipher, contributed by NTT by Bodo Möller · 19 years ago
- 3327372 Implement Supported Elliptic Curves Extension. by Bodo Möller · 19 years ago
- 36ca4ba Implement the Supported Point Formats Extension for ECC ciphersuites by Bodo Möller · 19 years ago
- ddac197 add initial support for RFC 4279 PSK SSL ciphersuites by Nils Larsch · 19 years ago
- 58ece83 Further TLS extension improvements by Bodo Möller · 19 years ago
- f1fd454 Various changes in the new TLS extension code, including the following: by Bodo Möller · 19 years ago
- ed3883d Support TLS extensions (specifically, HostName) by Bodo Möller · 19 years ago
- 7f3c903 initialize cipher/digest methods table in SSL_library_init() and hence remove the need for a lock by Nils Larsch · 20 years ago
- 4ebb342 Let the TLSv1_method() etc. functions return a const SSL_METHOD by Nils Larsch · 20 years ago
- 01a9792 remove unused internal foo_base_method functions by Nils Larsch · 20 years ago
- f3b656b Initialize SSL_METHOD structures at compile time. This removes the need by Dr. Stephen Henson · 20 years ago
- 3eeaab4 make by Nils Larsch · 20 years ago
- c6c2e31 Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled by Bodo Möller · 20 years ago
- 6c61726 Lots of Win32 fixes for DTLS. by Dr. Stephen Henson · 20 years ago
- 480506b remove some functions from exported headers by Bodo Möller · 20 years ago
- beb056b fix SSLerr stuff for DTLS1 code; by Bodo Möller · 20 years ago
- 36d16f8 Add DTLS support. by Ben Laurie · 20 years ago
- 3ed449e More cover-ups, removing OPENSSL_GLOBAL/EXTERNS. We can remove more... by Andy Polyakov · 20 years ago