aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Fix error codes.Dr. Stephen Henson2013-02-262-2/+2
* Fix ignored return value warnings.Ben Laurie2013-02-211-2/+3
* make depend.Ben Laurie2013-02-211-1/+21
* Check DTLS_BAD_VER for version number.David Woodhouse2013-02-121-1/+1
* Fix in ssltest is no-ssl2 configuredDr. Stephen Henson2013-02-111-1/+7
* s3_cbc.c: make CBC_MAC_ROTATE_IN_PLACE universal.Andy Polyakov2013-02-081-8/+9
* s3_cbc.c: get rid of expensive divisions.Andy Polyakov2013-02-081-13/+20
* s3_cbc.c: fix warning [in Windows build].Andy Polyakov2013-02-081-3/+3
* ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV".Andy Polyakov2013-02-087-59/+43
* Fix for EXP-RC2-CBC-MD5Adam Langley2013-02-061-9/+30
* e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.Andy Polyakov2013-02-062-17/+22
* ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov2013-02-067-31/+38
* Don't access EVP_MD_CTX internals directly.Dr. Stephen Henson2013-02-061-2/+2
* s3/s3_cbc.c: allow for compilations with NO_SHA256|512.Andy Polyakov2013-02-061-1/+18
* ssl/s3_cbc.c: md_state alignment portability fix.Andy Polyakov2013-02-061-15/+16
* ssl/s3_cbc.c: uint64_t portability fix.Andy Polyakov2013-02-061-11/+6
* typo.Dr. Stephen Henson2013-02-061-1/+1
* Timing fix mitigation for FIPS mode.Dr. Stephen Henson2013-02-063-0/+62
* Oops. Add missing file.Ben Laurie2013-02-061-0/+696
* Update DTLS code to match CBC decoding in TLS.Ben Laurie2013-02-065-57/+67
* Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie2013-02-065-7/+24
* Make CBC decoding constant time.Ben Laurie2013-02-068-197/+212
* Add and use a constant-time memcmp.Ben Laurie2013-02-066-7/+6
* Fix for trace code: SSL3 doesn't include a length value forDr. Stephen Henson2013-02-041-1/+10
* Fix warning: lenmax isn't used any more.Dr. Stephen Henson2013-01-241-2/+0
* Improve WINCE support.Andy Polyakov2013-01-191-2/+2
* Remove extraneous brackets (clang doesn't like them).Ben Laurie2013-01-191-1/+1
* Can't check a size_t for < 0.Ben Laurie2013-01-191-1/+3
* Make "make depend" work on MacOS out of the box.Ben Laurie2013-01-191-1/+1
* stop warning when compiling with no-compDr. Stephen Henson2012-12-292-2/+7
* typoDr. Stephen Henson2012-12-261-1/+1
* Use client version when deciding which cipher suites to disable.Dr. Stephen Henson2012-12-181-1/+1
* d1_lib.c,bss_dgram.c: eliminate dependency on _ftime.Andy Polyakov2012-12-161-5/+9
* revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 i...Dr. Stephen Henson2012-12-101-1/+5
* allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY modeDr. Stephen Henson2012-12-091-5/+1
* send out the raw SSL/TLS headers to the msg_callback and display them in SSL_...Dr. Stephen Henson2012-12-074-10/+25
* typoDr. Stephen Henson2012-12-071-1/+1
* really fix automatic ;-)Dr. Stephen Henson2012-12-071-1/+1
* fix handling of "automatic" in file modeDr. Stephen Henson2012-12-061-1/+6
* return error if Suite B mode is selected and TLS 1.2 can't be used. Correct e...Dr. Stephen Henson2012-12-014-5/+14
* Print out point format list for clients too.Dr. Stephen Henson2012-11-261-10/+7
* Use default point formats extension for server side as well as clientDr. Stephen Henson2012-11-261-44/+38
* change inaccurate error messageDr. Stephen Henson2012-11-261-1/+1
* set auto ecdh parameter selction for Suite BDr. Stephen Henson2012-11-261-0/+2
* add Suite B 128 bit mode offering only combination 2Dr. Stephen Henson2012-11-241-2/+10
* Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson2012-11-222-0/+17
* reject zero length point format list or supported curves extensionsDr. Stephen Henson2012-11-221-2/+4
* curves can be set in both client and serverDr. Stephen Henson2012-11-211-2/+0
* use correct return values when callin cmdDr. Stephen Henson2012-11-211-3/+7
* make dependDr. Stephen Henson2012-11-191-15/+55