1. cf6da05 Support TLS_FALLBACK_SCSV. by Bodo Moeller · 10 years ago
  2. e67ddd1 RT 1528; misleading debug print, "pre-master" should be "master key" by Rich Salz · 11 years ago
  3. d183545 Fix compilation with -DSSL_DEBUG -DTLS_DEBUG -DKSSL_DEBUG by yogesh nagarkar · 11 years ago
  4. 4fdf917 Use correct digest when exporting keying material. by Dr. Stephen Henson · 11 years ago
  5. 955376f Fix for non compilation with TLS_DEBUG defined by Matt Caswell · 11 years ago
  6. 03da57f ssl/t1_enc.c: check EVP_MD_CTX_copy return value. by Andy Polyakov · 11 years ago
  7. e8b0dd5 ssl/t1_enc.c: optimize PRF (suggested by Intel). by Andy Polyakov · 11 years ago
  8. 20b82b5 Fix DTLS retransmission from previous session. by Dr. Stephen Henson · 11 years ago
  9. ed496b3 Check EVP errors for handshake digests. by Dr. Stephen Henson · 11 years ago
  10. 5e3ff62 Experimental encrypt-then-mac support. by Dr. Stephen Henson · 12 years ago
  11. 478b50c misspellings fixes by https://github.com/vlajos/misspell_fixer by Veres Lajos · 12 years ago
  12. 4221c0d Enable TLS 1.2 ciphers in DTLS 1.2. by Dr. Stephen Henson · 12 years ago
  13. eb7ece1 Typo. by Dr. Stephen Henson · 12 years ago
  14. cbd6489 Use enc_flags when deciding protocol variations. by Dr. Stephen Henson · 12 years ago
  15. dd7e60b ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV". by Andy Polyakov · 12 years ago
  16. 2aec073 ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility. by Andy Polyakov · 12 years ago
  17. c4e6fb1 Timing fix mitigation for FIPS mode. by Dr. Stephen Henson · 12 years ago
  18. e33ac0e Update DTLS code to match CBC decoding in TLS. by Ben Laurie · 12 years ago
  19. 93cab6b Don't crash when processing a zero-length, TLS >= 1.1 record. by Ben Laurie · 12 years ago
  20. 2acc020 Make CBC decoding constant time. by Ben Laurie · 12 years ago
  21. 4d88fc8 * ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in by Richard Levitte · 13 years ago
  22. 1cf218b New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passes by Dr. Stephen Henson · 13 years ago
  23. c46ecc3 Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 and by Dr. Stephen Henson · 13 years ago
  24. d2add2e ssl/t1_enc.c: pay attention to EVP_CIPH_FLAG_CUSTOM_CIPHER. by Andy Polyakov · 13 years ago
  25. 74b4b49 SSL export fixes (from Adam Langley) [original from 1.0.1] by Dr. Stephen Henson · 13 years ago
  26. 3c0ff9f Remove redundant TLS exporter. by Ben Laurie · 13 years ago
  27. ebba6c4 PR: 1794 by Dr. Stephen Henson · 13 years ago
  28. 21b52dd bcmp doesn't exist on all platforms, replace with memcmp by Dr. Stephen Henson · 13 years ago
  29. e0af040 Add TLS exporter. by Ben Laurie · 13 years ago
  30. 28dd49f Expand range of ctrls for AES GCM to support retrieval and setting of by Dr. Stephen Henson · 14 years ago
  31. 7532071 ssl/t1_enc.c: initial support for AEAD ciphers. by Andy Polyakov · 14 years ago
  32. 1b2047c Don't round up partitioned premaster secret length if there is only one by Dr. Stephen Henson · 14 years ago
  33. 086e32a Implement FIPS_mode and FIPS_mode_set by Dr. Stephen Henson · 14 years ago
  34. a2f9200 Initial TLS v1.2 client support. Include a default supported signature by Dr. Stephen Henson · 14 years ago
  35. 7409d7a Initial incomplete TLS v1.2 support. New ciphersuites added, new version by Dr. Stephen Henson · 14 years ago
  36. edc032b Add SRP support. by Ben Laurie · 14 years ago
  37. 7225215 Don't use decryption_failed alert for TLS v1.1 or later. by Dr. Stephen Henson · 14 years ago
  38. e9be051 use generalise mac API for SSL key generation by Dr. Stephen Henson · 14 years ago
  39. e15320f Only use explicit IV if cipher is in CBC mode. by Dr. Stephen Henson · 14 years ago
  40. f96ccf3 PR: 1830 by Dr. Stephen Henson · 15 years ago
  41. b9e7793 oops, revert wrong patch.. by Dr. Stephen Henson · 15 years ago
  42. d135da5 Fix warnings (From HEAD, original patch by Ben). by Dr. Stephen Henson · 15 years ago
  43. 9674de7 no need for empty fragments with TLS 1.1 and later due to explicit IV by Dr. Stephen Henson · 15 years ago
  44. c8bbd98 Fix warnings. by Ben Laurie · 15 years ago
  45. 7837c7e PR: 2259 Submitted By: Artem Chuprina <ran@cryptocom.ru> by Dr. Stephen Henson · 15 years ago
  46. 637f374 Initial experimental TLSv1.1 support by Dr. Stephen Henson · 15 years ago
  47. 8711efb Updates from 1.0.0-stable branch. by Dr. Stephen Henson · 16 years ago
  48. d7ecd42 Fix warnings properly this time ;-) by Dr. Stephen Henson · 16 years ago
  49. 211655f Fix sign-compare warnings. by Dr. Stephen Henson · 16 years ago
  50. fceac0b Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP by Lutz Jänicke · 16 years ago
  51. 0eab41f If we're going to return errors (no matter how stupid), then we should by Ben Laurie · 16 years ago
  52. 6ba71a7 Handle the unlikely event that BIO_get_mem_data() returns -ve. by Ben Laurie · 16 years ago
  53. 6343829 Revert the size_t modifications from HEAD that had led to more by Geoff Thorpe · 16 years ago
  54. 7b80841 Make -DKSSL_DEBUG work again. by Dr. Stephen Henson · 16 years ago
  55. aff686d Fix unsigned/signed warnings in ssl. by Andy Polyakov · 17 years ago
  56. 0e1dba9 1. Changes for s_client.c to make it return non-zero exit code in case by Dr. Stephen Henson · 17 years ago
  57. 4fe5566 Make DTLS1 record layer MAC calculation RFC compliant. by Andy Polyakov · 17 years ago
  58. 67c8e7f Support for certificate status TLS extension. by Dr. Stephen Henson · 18 years ago
  59. 761772d Implement the Opaque PRF Input TLS extension by Bodo Möller · 18 years ago
  60. 8102566 Update ssl code to support digests other than MD5+SHA1 in handshake. by Dr. Stephen Henson · 18 years ago
  61. b948e2c Update ssl library to support EVP_PKEY MAC API. Include generic MAC support. by Dr. Stephen Henson · 18 years ago
  62. 52b8dad Reorganize the data used for SSL ciphersuite pattern matching. by Bodo Möller · 18 years ago
  63. cc684e3 ensure that the EVP_CIPHER_CTX object is initialized by Nils Larsch · 18 years ago
  64. 5cda6c4 Fix from stable branch. by Dr. Stephen Henson · 19 years ago
  65. ddac197 add initial support for RFC 4279 PSK SSL ciphersuites by Nils Larsch · 19 years ago
  66. 01c76c6 There's no such things as DTLS1_AD_MISSING_HANDSHAKE_MESSAGE. For now, anyway. by Bodo Möller · 19 years ago
  67. d32f888 prepare for additional RFC3546 alerts by Bodo Möller · 19 years ago
  68. f7914db make sure that the unrecognized_name alert actually gets sent by Bodo Möller · 19 years ago
  69. 09b6c2e Make OPENSSL_NO_COMP compile again. by Dr. Stephen Henson · 20 years ago
  70. 36d16f8 Add DTLS support. by Ben Laurie · 20 years ago
  71. 4579924 Cleanse memory using the new OPENSSL_cleanse() function. by Richard Levitte · 22 years ago
  72. 54a656e Security fixes brought forward from 0.9.7. by Ben Laurie · 22 years ago
  73. 7b63c0f Reorder inclusion of header files: by Lutz Jänicke · 23 years ago
  74. d1d0be3 emtpy fragments are not necessary for SSL_eNULL (but noone uses it anyway) by Bodo Möller · 23 years ago
  75. c21506b New option SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for disabling CBC by Bodo Möller · 23 years ago
  76. 82b0bf0 Implement known-IV countermeasure. by Bodo Möller · 23 years ago
  77. de941e2 by Dr. Stephen Henson · 23 years ago
  78. ff3fa48 Improve back compatibility. by Ben Laurie · 23 years ago
  79. 2879737 Fix memory leak. by Bodo Möller · 23 years ago
  80. 581f1c8 Modify EVP cipher behaviour in a similar way to digests to retain compatibility. by Dr. Stephen Henson · 23 years ago
  81. 20d2186 by Dr. Stephen Henson · 23 years ago
  82. 965b6da comment by Bodo Möller · 24 years ago
  83. ee60d9f Fix ssl/s3_enc.c, ssl/t1_enc.c and ssl/s3_pkt.c so that we don't by Bodo Möller · 24 years ago
  84. dbad169 Really add the EVP and all of the DES changes. by Ben Laurie · 24 years ago
  85. 4544216 Prevent KSSL server from requesting a client certificate. by Richard Levitte · 24 years ago
  86. 323f289 by Dr. Stephen Henson · 24 years ago
  87. 285b427 pay attention to blocksize before attempting decryption by Bodo Möller · 24 years ago
  88. 44e48ab Use memmove() instead of memcpy() on areas that may overlap. by Richard Levitte · 24 years ago
  89. 1876cc3 This change should be suitable as a workaround for the Solaris x86 by Bodo Möller · 24 years ago
  90. 5277d7c Fix ERR_R_... problems. by Bodo Möller · 24 years ago
  91. f9b3bff First tentative impementation of Kerberos 5 cryptos and keys for SSL/TLS. Implemented by Vern Staats <staatsvr@asc.hpc.mil>, further hacked and distributed by Jeffrey Altman <jaltnab@columbia.edu> by Richard Levitte · 24 years ago
  92. 26a3a48 There have been a number of complaints from a number of sources that names by Richard Levitte · 25 years ago
  93. 657e60f ispell (and minor modifications) by Ulf Möller · 25 years ago
  94. 245206e Use prototypes. by Bodo Möller · 25 years ago
  95. d02f751 Message digest stuff. by Ulf Möller · 26 years ago
  96. ec57782 Change #include filenames from <foo.h> to <openssl.h>. by Bodo Möller · 26 years ago
  97. 61f5b6f Work with -pedantic! by Ben Laurie · 26 years ago
  98. e4aac1c const correctness. by Ben Laurie · 26 years ago
  99. 6b691a5 Change functions to ANSI C. by Ulf Möller · 26 years ago
  100. e778802 Massive constification. by Ben Laurie · 26 years ago