summaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)Author
2024-08-15Ensure the msg_callback is called on CCS receipt in TLSv1.3Matt Caswell
2024-08-15Return SSL_AD_DECRYPT_ERROR alert on PSK binder validation failure (RFC 8446)Bhaskar Metiya
2024-08-13adds TLS signature algorithms list featureMichael Baentsch
2024-08-07Remove the event queue codeMatt Caswell
2024-08-07Check that a supported_versions extension is present in an HRRMatt Caswell
2024-08-07Add logging support for early dataLeonie Theobald
2024-08-07ssl: factorize and improved hex conversion codeFdaSilvaYY
2024-08-07ssl: remove stdio.h and sprintf use from libssl.FdaSilvaYY
2024-08-07Fix typos found by codespellDimitri Papadopoulos
2024-08-03Do not implicitly start connection with SSL_handle_events() or SSL_poll()Tomas Mraz
2024-08-03Return infinity time from SSL_get_event_timeout when the connection is not st...Tomas Mraz
2024-08-03Do not falsely start the connection through SSL_pending()/_has_pending()Tomas Mraz
2024-08-01ssl_evp_cipher_fetch(): Avoid using 3DES from the FIPS providerTomas Mraz
2024-08-013DES ciphersuites are not allowed in FIPS anymoreTomas Mraz
2024-08-01Speed up SSL_add_{file,dir}_cert_subjects_to_stackClemens Lang
2024-08-01Restrict the length of key-derivation key used in KDFspohsingwu
2024-07-26Fix second error from Coverity-161057Neil Horman
2024-07-22open brace '{' following struct go on the same lineDimitri Papadopoulos
2024-07-22that open brace { should be on the previous lineDimitri Papadopoulos
2024-07-22Remove trailing whitespaceDimitri Papadopoulos
2024-07-21tls13_meth.c: Check for negative return from EVP_CIPHER_CTX_get_iv_length()Tomas Mraz
2024-07-18Fix coverity-1610057Neil Horman
2024-07-18fix vs2019 warningGerd Hoffmann
2024-07-10Extend TLSv1.3 record layer padding API callsStephen Farrell
2024-07-08Add (void) cast to result of ossl_quic_rxfc_on_retire()MrRurikov
2024-06-27Add ALPN validation in the clientMatt Caswell
2024-06-27Correct return values for tls_construct_stoc_next_proto_negMatt Caswell
2024-06-27Use correctly formatted ALPN data in tserverMatt Caswell
2024-06-27More correctly handle a selected_len of 0 when processing NPNMatt Caswell
2024-06-27Fix SSL_select_next_protoMatt Caswell
2024-06-25bio_ssl.c: Do not call SSL_shutdown if not initederbsland-dev
2024-06-24Fix typos found by codespellDimitri Papadopoulos
2024-06-23Extend `mask` of `ssl_method_st` to 64-biterbsland-dev
2024-06-21Incorporate more review feedbackRobert Schulze
2024-06-21Incorporate review feedbackRobert Schulze
2024-06-21Fix data race between SSL_SESSION_list_add and ssl_session_dupRobert Schulze
2024-06-20Fix handling of max_fragment_length extension for PSKFrederik Wedel-Heinen
2024-06-10Fix memory leak in quic_trace.cAmir Mohammadi
2024-05-30ssl_sess.c: deprecate SSL_SESSION_get_time/SSL_SESSION_set_timeAlexander Kanavin
2024-05-30ssl_sess.c: deprecate SSL_CTX_flush_sessions in favour of _ex() replacementAlexander Kanavin
2024-05-28Set rl->packet to NULL after we've finished using itMatt Caswell
2024-05-28Only free the read buffers if we're not using themMatt Caswell
2024-05-28Move stack of compression methods from libssl to OSSL_LIB_CTXsashan
2024-05-14Release pkey_ctx on initialization failureirosay
2024-05-14Add support for integrity-only cipher suites for TLS v1.3Rajeev Ranjan
2024-05-14Remove SSL_ENC_FLAG_EXPLICIT_IV which is only set and never read.Frederik Wedel-Heinen
2024-05-14Add reason codes with the correct offset for two alertsJacob Champion
2024-05-13Typo fixeswillmafh
2024-05-10ssl_cipher_get_overhead(): Replace size_t with int and add the checksJiasheng Jiang
2024-05-09Set SSL_CONF_FLAG_SHOW_ERRORS when conf_diagnostics is enabledTomas Mraz