aboutsummaryrefslogtreecommitdiffstats
path: root/CHANGES
Commit message (Expand)AuthorAgeFilesLines
* Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson2012-11-221-0/+4
* new function ASN1_TIME_diff to calculate difference between two ASN1_TIME str...Dr. Stephen Henson2012-11-191-0/+4
* PR: 2909Dr. Stephen Henson2012-11-181-0/+4
* add SSL_CONF functions and documentationDr. Stephen Henson2012-11-161-0/+4
* New functions to check a hostname email or IP address against aDr. Stephen Henson2012-10-081-0/+5
* config: detect linux-mips* targets.Andy Polyakov2012-09-191-0/+4
* Add -rev test option to s_server to just reverse order of characters receivedDr. Stephen Henson2012-09-141-0/+5
* Add -brief option to s_client and s_server to summarise connection details.Dr. Stephen Henson2012-09-121-0/+4
* Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson2012-09-121-0/+4
* Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson2012-09-111-2/+2
* Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie2012-09-111-0/+6
* Harmonize CHANGES in HEAD.Andy Polyakov2012-08-291-59/+67
* Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson2012-08-151-0/+6
* add suite B chain validation flags and associated verify errorsDr. Stephen Henson2012-08-031-0/+4
* Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson2012-07-271-0/+6
* Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson2012-07-241-0/+6
* check EC tmp key matches preferencesDr. Stephen Henson2012-07-241-0/+3
* Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson2012-07-231-0/+13
* New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson2012-07-181-0/+5
* Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson2012-07-081-0/+6
* Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson2012-07-031-0/+3
* Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson2012-06-291-0/+9
* Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson2012-06-281-0/+12
* Reorganise supported signature algorithm extension processing.Dr. Stephen Henson2012-06-251-0/+6
* Add support for application defined signature algorithms for use withDr. Stephen Henson2012-06-221-0/+5
* Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson2012-06-181-0/+5
* Initial record tracing code. Print out all fields in SSL/TLS recordsDr. Stephen Henson2012-06-151-0/+6
* New functions to retrieve certificate signatures and signature OID NID.Dr. Stephen Henson2012-06-131-0/+4
* print out issuer and subject unique identifier fields in certificatesDr. Stephen Henson2012-06-121-0/+4
* RFC 5878 support.Ben Laurie2012-05-301-0/+3
* PR: 2813Dr. Stephen Henson2012-05-111-0/+3
* PR: 2811Dr. Stephen Henson2012-05-111-2/+7
* Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 andDr. Stephen Henson2012-05-101-0/+8
* Reported by: Solar Designer of OpenwallDr. Stephen Henson2012-05-101-0/+4
* Don't try to use unvalidated composite ciphers in FIPS modeDr. Stephen Henson2012-04-261-2/+9
* CHANGES: clarify.Andy Polyakov2012-04-261-1/+2
* CHANGES: fix typos and clarify.Andy Polyakov2012-04-261-3/+5
* Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL andDr. Stephen Henson2012-04-251-0/+11
* s23_clnt.c: ensure interoperability by maitaining client "version capability"Andy Polyakov2012-04-251-1/+11
* Check for potentially exploitable overflows in asn1_d2i_read_bioDr. Stephen Henson2012-04-191-1/+10
* Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller2012-04-171-0/+3
* Additional workaround for PR#2771Dr. Stephen Henson2012-04-171-0/+13
* Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson2012-04-051-0/+7
* CHANGES: harmonize with 1.0.0 and 1.0.1.Andy Polyakov2012-03-311-2/+22
* Initial revision of ECC extension handling.Dr. Stephen Henson2012-03-281-0/+7
* New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson2012-03-061-0/+5
* Add new APIs EC_curve_nist2nid and EC_curve_nid2nist which convertDr. Stephen Henson2012-02-211-0/+5
* Fix bug in CVE-2011-4619: check we have really received a client helloDr. Stephen Henson2012-02-161-0/+7
* Additional compatibility fix for MDC2 signature format.Dr. Stephen Henson2012-02-151-0/+4
* An incompatibility has always existed between the format used for RSADr. Stephen Henson2012-02-151-0/+7