 Matt Caswell
|
c2f5de13cd
Cleanse buffers
|
9 years ago |
|
Matt Caswell
|
40720ce3ca
Run util/openssl-format-source -v -c .
|
9 years ago |
|
Matt Caswell
|
117e79dd88
Yet more changes to comments
|
9 years ago |
|
Matt Caswell
|
00ea17f9d7
Fix source where indent will not be able to cope
|
9 years ago |
|
Matt Caswell
|
564ccc55d6
Further comment amendments to preserve formatting prior to source reformat
|
9 years ago |
 Bodo Moeller
|
c6a876473c
Support TLS_FALLBACK_SCSV.
|
10 years ago |
|
Matt Caswell
|
bb50d30f35
Fix for non compilation with TLS_DEBUG defined
|
10 years ago |
 mancha
|
a375025e4d
Fix alert handling.
|
10 years ago |
 Geoff Lowe
|
a93cc7c573
Use orig_len, not rec->orig_len
|
11 years ago |
 Andy Polyakov
|
fb092ef4fc
ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.
|
11 years ago |
 Dr. Stephen Henson
|
924b117422
Timing fix mitigation for FIPS mode.
|
11 years ago |
 Ben Laurie
|
be88529753
Update DTLS code to match CBC decoding in TLS.
|
11 years ago |
|
Ben Laurie
|
b3a959a337
Don't crash when processing a zero-length, TLS >= 1.1 record.
|
11 years ago |
|
Ben Laurie
|
2928cb4c82
Fixups.
|
11 years ago |
|
Ben Laurie
|
35a65e814b
Make CBC decoding constant time.
|
11 years ago |
 Richard Levitte
|
c06271bc35
* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in
|
12 years ago |
 Ben Laurie
|
d886975835
Fix gcc 4.6 warnings. Check TLS server hello extension length.
|
14 years ago |
|
Dr. Stephen Henson
|
a224fe14e9
PR: 1751
|
15 years ago |
 Lutz Jänicke
|
f4677b7960
Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP
|
16 years ago |
|
Dr. Stephen Henson
|
2c17b493b1
Make -DKSSL_DEBUG work again.
|
16 years ago |
|
Andy Polyakov
|
3413424f01
DTLS didn't handle alerts correctly [from HEAD].
|
16 years ago |
|
Dr. Stephen Henson
|
14748adb09
Make ssl code consistent with FIPS branch. The new code has no effect
|
16 years ago |
|
Andy Polyakov
|
91d509f0d9
Make DTLS1 record layer MAC calculation RFC compliant. From HEAD with a
|
17 years ago |
 Nils Larsch
|
d31a13953c
ensure that the EVP_CIPHER_CTX object is initialized
|
17 years ago |
|
Dr. Stephen Henson
|
b723a7b11b
Don't check for padding bug if compression is negotiated.
|
18 years ago |
|
Dr. Stephen Henson
|
54f51116b2
Update from HEAD.
|
19 years ago |
|
Ben Laurie
|
36d16f8ee0
Add DTLS support.
|
19 years ago |
|
Richard Levitte
|
4579924b7e
Cleanse memory using the new OPENSSL_cleanse() function.
|
22 years ago |
|
Ben Laurie
|
54a656ef08
Security fixes brought forward from 0.9.7.
|
22 years ago |
|
Lutz Jänicke
|
7b63c0fa8c
Reorder inclusion of header files:
|
22 years ago |
