- cf6da05 Support TLS_FALLBACK_SCSV. by Bodo Moeller · 10 years ago
- e67ddd1 RT 1528; misleading debug print, "pre-master" should be "master key" by Rich Salz · 11 years ago
- d183545 Fix compilation with -DSSL_DEBUG -DTLS_DEBUG -DKSSL_DEBUG by yogesh nagarkar · 11 years ago
- 4fdf917 Use correct digest when exporting keying material. by Dr. Stephen Henson · 11 years ago
- 955376f Fix for non compilation with TLS_DEBUG defined by Matt Caswell · 11 years ago
- 03da57f ssl/t1_enc.c: check EVP_MD_CTX_copy return value. by Andy Polyakov · 11 years ago
- e8b0dd5 ssl/t1_enc.c: optimize PRF (suggested by Intel). by Andy Polyakov · 11 years ago
- 20b82b5 Fix DTLS retransmission from previous session. by Dr. Stephen Henson · 11 years ago
- ed496b3 Check EVP errors for handshake digests. by Dr. Stephen Henson · 11 years ago
- 5e3ff62 Experimental encrypt-then-mac support. by Dr. Stephen Henson · 12 years ago
- 478b50c misspellings fixes by https://github.com/vlajos/misspell_fixer by Veres Lajos · 12 years ago
- 4221c0d Enable TLS 1.2 ciphers in DTLS 1.2. by Dr. Stephen Henson · 12 years ago
- eb7ece1 Typo. by Dr. Stephen Henson · 12 years ago
- cbd6489 Use enc_flags when deciding protocol variations. by Dr. Stephen Henson · 12 years ago
- dd7e60b ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV". by Andy Polyakov · 12 years ago
- 2aec073 ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility. by Andy Polyakov · 12 years ago
- c4e6fb1 Timing fix mitigation for FIPS mode. by Dr. Stephen Henson · 12 years ago
- e33ac0e Update DTLS code to match CBC decoding in TLS. by Ben Laurie · 12 years ago
- 93cab6b Don't crash when processing a zero-length, TLS >= 1.1 record. by Ben Laurie · 12 years ago
- 2acc020 Make CBC decoding constant time. by Ben Laurie · 12 years ago
- 4d88fc8 * ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in by Richard Levitte · 13 years ago
- 1cf218b New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passes by Dr. Stephen Henson · 13 years ago
- c46ecc3 Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 and by Dr. Stephen Henson · 13 years ago
- d2add2e ssl/t1_enc.c: pay attention to EVP_CIPH_FLAG_CUSTOM_CIPHER. by Andy Polyakov · 13 years ago
- 74b4b49 SSL export fixes (from Adam Langley) [original from 1.0.1] by Dr. Stephen Henson · 13 years ago
- 3c0ff9f Remove redundant TLS exporter. by Ben Laurie · 13 years ago
- ebba6c4 PR: 1794 by Dr. Stephen Henson · 13 years ago
- 21b52dd bcmp doesn't exist on all platforms, replace with memcmp by Dr. Stephen Henson · 13 years ago
- e0af040 Add TLS exporter. by Ben Laurie · 13 years ago
- 28dd49f Expand range of ctrls for AES GCM to support retrieval and setting of by Dr. Stephen Henson · 14 years ago
- 7532071 ssl/t1_enc.c: initial support for AEAD ciphers. by Andy Polyakov · 14 years ago
- 1b2047c Don't round up partitioned premaster secret length if there is only one by Dr. Stephen Henson · 14 years ago
- 086e32a Implement FIPS_mode and FIPS_mode_set by Dr. Stephen Henson · 14 years ago
- a2f9200 Initial TLS v1.2 client support. Include a default supported signature by Dr. Stephen Henson · 14 years ago
- 7409d7a Initial incomplete TLS v1.2 support. New ciphersuites added, new version by Dr. Stephen Henson · 14 years ago
- edc032b Add SRP support. by Ben Laurie · 14 years ago
- 7225215 Don't use decryption_failed alert for TLS v1.1 or later. by Dr. Stephen Henson · 14 years ago
- e9be051 use generalise mac API for SSL key generation by Dr. Stephen Henson · 14 years ago
- e15320f Only use explicit IV if cipher is in CBC mode. by Dr. Stephen Henson · 14 years ago
- f96ccf3 PR: 1830 by Dr. Stephen Henson · 15 years ago
- b9e7793 oops, revert wrong patch.. by Dr. Stephen Henson · 15 years ago
- d135da5 Fix warnings (From HEAD, original patch by Ben). by Dr. Stephen Henson · 15 years ago
- 9674de7 no need for empty fragments with TLS 1.1 and later due to explicit IV by Dr. Stephen Henson · 15 years ago
- c8bbd98 Fix warnings. by Ben Laurie · 15 years ago
- 7837c7e PR: 2259 Submitted By: Artem Chuprina <ran@cryptocom.ru> by Dr. Stephen Henson · 15 years ago
- 637f374 Initial experimental TLSv1.1 support by Dr. Stephen Henson · 15 years ago
- 8711efb Updates from 1.0.0-stable branch. by Dr. Stephen Henson · 16 years ago
- d7ecd42 Fix warnings properly this time ;-) by Dr. Stephen Henson · 16 years ago
- 211655f Fix sign-compare warnings. by Dr. Stephen Henson · 16 years ago
- fceac0b Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP by Lutz Jänicke · 16 years ago
- 0eab41f If we're going to return errors (no matter how stupid), then we should by Ben Laurie · 16 years ago
- 6ba71a7 Handle the unlikely event that BIO_get_mem_data() returns -ve. by Ben Laurie · 16 years ago
- 6343829 Revert the size_t modifications from HEAD that had led to more by Geoff Thorpe · 16 years ago
- 7b80841 Make -DKSSL_DEBUG work again. by Dr. Stephen Henson · 16 years ago
- aff686d Fix unsigned/signed warnings in ssl. by Andy Polyakov · 17 years ago
- 0e1dba9 1. Changes for s_client.c to make it return non-zero exit code in case by Dr. Stephen Henson · 17 years ago
- 4fe5566 Make DTLS1 record layer MAC calculation RFC compliant. by Andy Polyakov · 17 years ago
- 67c8e7f Support for certificate status TLS extension. by Dr. Stephen Henson · 18 years ago
- 761772d Implement the Opaque PRF Input TLS extension by Bodo Möller · 18 years ago
- 8102566 Update ssl code to support digests other than MD5+SHA1 in handshake. by Dr. Stephen Henson · 18 years ago
- b948e2c Update ssl library to support EVP_PKEY MAC API. Include generic MAC support. by Dr. Stephen Henson · 18 years ago
- 52b8dad Reorganize the data used for SSL ciphersuite pattern matching. by Bodo Möller · 18 years ago
- cc684e3 ensure that the EVP_CIPHER_CTX object is initialized by Nils Larsch · 18 years ago
- 5cda6c4 Fix from stable branch. by Dr. Stephen Henson · 19 years ago
- ddac197 add initial support for RFC 4279 PSK SSL ciphersuites by Nils Larsch · 19 years ago
- 01c76c6 There's no such things as DTLS1_AD_MISSING_HANDSHAKE_MESSAGE. For now, anyway. by Bodo Möller · 19 years ago
- d32f888 prepare for additional RFC3546 alerts by Bodo Möller · 19 years ago
- f7914db make sure that the unrecognized_name alert actually gets sent by Bodo Möller · 19 years ago
- 09b6c2e Make OPENSSL_NO_COMP compile again. by Dr. Stephen Henson · 20 years ago
- 36d16f8 Add DTLS support. by Ben Laurie · 20 years ago
- 4579924 Cleanse memory using the new OPENSSL_cleanse() function. by Richard Levitte · 22 years ago
- 54a656e Security fixes brought forward from 0.9.7. by Ben Laurie · 22 years ago
- 7b63c0f Reorder inclusion of header files: by Lutz Jänicke · 23 years ago
- d1d0be3 emtpy fragments are not necessary for SSL_eNULL (but noone uses it anyway) by Bodo Möller · 23 years ago
- c21506b New option SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for disabling CBC by Bodo Möller · 23 years ago
- 82b0bf0 Implement known-IV countermeasure. by Bodo Möller · 23 years ago
- de941e2 by Dr. Stephen Henson · 23 years ago
- ff3fa48 Improve back compatibility. by Ben Laurie · 23 years ago
- 2879737 Fix memory leak. by Bodo Möller · 23 years ago
- 581f1c8 Modify EVP cipher behaviour in a similar way to digests to retain compatibility. by Dr. Stephen Henson · 23 years ago
- 20d2186 by Dr. Stephen Henson · 23 years ago
- 965b6da comment by Bodo Möller · 24 years ago
- ee60d9f Fix ssl/s3_enc.c, ssl/t1_enc.c and ssl/s3_pkt.c so that we don't by Bodo Möller · 24 years ago
- dbad169 Really add the EVP and all of the DES changes. by Ben Laurie · 24 years ago
- 4544216 Prevent KSSL server from requesting a client certificate. by Richard Levitte · 24 years ago
- 323f289 by Dr. Stephen Henson · 24 years ago
- 285b427 pay attention to blocksize before attempting decryption by Bodo Möller · 24 years ago
- 44e48ab Use memmove() instead of memcpy() on areas that may overlap. by Richard Levitte · 24 years ago
- 1876cc3 This change should be suitable as a workaround for the Solaris x86 by Bodo Möller · 24 years ago
- 5277d7c Fix ERR_R_... problems. by Bodo Möller · 24 years ago
- f9b3bff First tentative impementation of Kerberos 5 cryptos and keys for SSL/TLS. Implemented by Vern Staats <staatsvr@asc.hpc.mil>, further hacked and distributed by Jeffrey Altman <jaltnab@columbia.edu> by Richard Levitte · 24 years ago
- 26a3a48 There have been a number of complaints from a number of sources that names by Richard Levitte · 25 years ago
- 657e60f ispell (and minor modifications) by Ulf Möller · 25 years ago
- 245206e Use prototypes. by Bodo Möller · 25 years ago
- d02f751 Message digest stuff. by Ulf Möller · 26 years ago
- ec57782 Change #include filenames from <foo.h> to <openssl.h>. by Bodo Möller · 26 years ago
- 61f5b6f Work with -pedantic! by Ben Laurie · 26 years ago
- e4aac1c const correctness. by Ben Laurie · 26 years ago
- 6b691a5 Change functions to ANSI C. by Ulf Möller · 26 years ago
- e778802 Massive constification. by Ben Laurie · 26 years ago