aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/s3_srvr.c
Commit message (Expand)AuthorAgeFilesLines
* Add missing casts.Rich Salz2016-07-281-2/+3
* Send alert for bad DH CKEDr. Stephen Henson2016-07-221-2/+4
* Send alert on CKE error.Dr. Stephen Henson2016-07-191-3/+5
* Avoid an overflow in constructing the ServerKeyExchange messageMatt Caswell2016-07-011-0/+5
* Change usage of RAND_pseudo_bytes to RAND_bytesMatt Caswell2016-06-271-5/+2
* Avoid some undefined pointer arithmeticMatt Caswell2016-06-011-7/+7
* Always generate DH keys for ephemeral DH cipher suitesMatt Caswell2016-01-281-14/+3
* Validate ClientHello session_id field length and send alert on failureAlessandro Ghedini2016-01-191-0/+6
* Remove the "eay" c-file-style indicatorsRichard Levitte2015-12-181-1/+1
* Remove cookie validation return value trickMatt Caswell2015-12-011-6/+4
* Ensure all EVP calls have their returns checked where appropriateMatt Caswell2015-11-201-19/+36
* Fix missing malloc return value checksMatt Caswell2015-11-091-0/+10
* Remove useless codeAlessandro Ghedini2015-10-231-1/+0
* Change functions to pass in a limit rather than calculate itMatt Caswell2015-10-051-1/+1
* Fix PSK handling.Dr. Stephen Henson2015-07-021-1/+1
* Clean premaster_secret for GOSTMatt Caswell2015-06-041-0/+1
* Clean Kerberos pre-master secretMatt Caswell2015-06-041-5/+16
* Don't allow a CCS when expecting a CertificateVerifyMatt Caswell2015-05-131-50/+24
* Add more error state transitionsMatt Caswell2015-05-051-13/+61
* Add Error stateMatt Caswell2015-05-051-1/+4
* Error out immediately on empty ciphers list.Emilia Kasper2015-04-171-7/+6
* Check for ClientHello message overrunsMatt Caswell2015-04-141-1/+41
* Add ticket length before buffering DTLS messageMatt Caswell2015-03-251-1/+1
* Fix DHE Null CKE vulnerabilityMatt Caswell2015-03-191-2/+9
* Fix missing return value checks.Matt Caswell2015-02-271-30/+49
* Re-align some comments after running the reformat script.OpenSSL_1_0_2-post-reformatMatt Caswell2015-01-221-53/+53
* Rerun util/openssl-format-source -v -c .OpenSSL_1_0_2-post-auto-reformatMatt Caswell2015-01-221-2/+1
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-3309/+3141
* Tweaks for comments due to indent's inability to handle themMatt Caswell2015-01-221-1/+2
* Fix source where indent will not be able to copeMatt Caswell2015-01-221-3/+5
* mark all block comments that need format preserving so thatTim Hudson2015-01-221-10/+15
* Unauthenticated DH client certificate fix.Dr. Stephen Henson2015-01-081-1/+1
* Only allow ephemeral RSA keys in export ciphersuites.Dr. Stephen Henson2015-01-061-15/+6
* Remove MS SGCDr. Stephen Henson2015-01-021-62/+7
* Clear warnings/errors within KSSL_DEBUG code sectionsRichard Levitte2014-12-171-4/+4
* Clear warnings/errors within CIPHER_DEBUG code sectionsRichard Levitte2014-12-171-3/+4
* Premaster secret handling fixesAdam Langley2014-12-171-8/+28
* Check return value of ssl3_output_cert_chainDr. Stephen Henson2014-12-161-1/+5
* Fixed memory leak in the event of a failure of BUF_MEM_growMatt Caswell2014-12-081-0/+1
* Do not resume a session if the negotiated protocol version does not matchDavid Benjamin2014-11-201-1/+10
* Ensure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is resetEmilia Kasper2014-11-201-4/+36
* New option no-ssl3-method which removes SSLv3_*methodDr. Stephen Henson2014-11-191-5/+7
* Process signature algorithms before deciding on certificate.Dr. Stephen Henson2014-11-191-0/+5
* RT3067: simplify patchEmilia Kasper2014-09-241-52/+20
* This change alters the processing of invalid, RSA pre-master secrets soAdam Langley2014-09-241-45/+89
* Fix SRP authentication ciphersuites.Dr. Stephen Henson2014-08-091-5/+6
* Check SRP parameters early.Dr. Stephen Henson2014-08-061-0/+7
* Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson2014-07-051-1/+1
* Remove all RFC5878 code.Dr. Stephen Henson2014-07-041-186/+2
* Fix for CVE-2014-0224Dr. Stephen Henson2014-06-051-0/+5