 Matt Caswell
|
258f8721a5
Encapsulate s->s3->rrec
|
9 years ago |
 Rich Salz
|
ca3a82c3b3
free NULL cleanup
|
9 years ago |
|
Matt Caswell
|
69f6823748
Fix missing return value checks
|
9 years ago |
|
Matt Caswell
|
c9dd49a751
Cleanse buffers
|
9 years ago |
|
Matt Caswell
|
35a1cc90bc
More comment realignment
|
9 years ago |
|
Matt Caswell
|
0f113f3ee4
Run util/openssl-format-source -v -c .
|
9 years ago |
|
Matt Caswell
|
e636e2acd7
Fix source where indent will not be able to cope
|
9 years ago |
|
Matt Caswell
|
23a22b4cf7
More comments
|
9 years ago |
 Jonas Maebe
|
bf8e7047aa
ssl3_digest_cached_records: check for NULL after allocating s->s3->handshake_dgst
|
10 years ago |
 Dr. Stephen Henson
|
00b4ee7664
Remove some unnecessary OPENSSL_FIPS references
|
10 years ago |
 Kurt Roeckx
|
45f55f6a5b
Remove SSLv2 support
|
9 years ago |
|
Matt Caswell
|
fe78f08d15
Add checks to the return value of EVP_Cipher to prevent silent encryption failure.
|
10 years ago |
 Bodo Moeller
|
cf6da05304
Support TLS_FALLBACK_SCSV.
|
10 years ago |
 Justin Blanchard
|
f756fb430e
RT1815: More const'ness improvements
|
10 years ago |
|
Matt Caswell
|
687721a7dc
Fixed incorrect return code handling in ssl3_final_finish_mac.
|
10 years ago |
|
Matt Caswell
|
043fd64689
Revert "Fixed incorrect return code handling in ssl3_final_finish_mac"
|
10 years ago |
|
Matt Caswell
|
2f1dffa88e
Fixed incorrect return code handling in ssl3_final_finish_mac
|
10 years ago |
|
Dr. Stephen Henson
|
5e3ff62c34
Experimental encrypt-then-mac support.
|
11 years ago |
 Veres Lajos
|
478b50cf67
misspellings fixes by https://github.com/vlajos/misspell_fixer
|
11 years ago |
 Andy Polyakov
|
dd7e60bd70
ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV".
|
11 years ago |
|
Andy Polyakov
|
2aec073a52
ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.
|
11 years ago |
 Ben Laurie
|
e33ac0e71d
Update DTLS code to match CBC decoding in TLS.
|
11 years ago |
|
Ben Laurie
|
93cab6b319
Don't crash when processing a zero-length, TLS >= 1.1 record.
|
11 years ago |
|
Ben Laurie
|
2acc020b77
Make CBC decoding constant time.
|
11 years ago |
|
Dr. Stephen Henson
|
81f57e5a69
oops, typo
|
12 years ago |
|
Dr. Stephen Henson
|
1cf218bcaa
New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passes
|
12 years ago |
|
Dr. Stephen Henson
|
27dfffd5b7
Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)
|
12 years ago |
|
Dr. Stephen Henson
|
8f119a0357
set FIPS permitted flag before initalising digest
|
13 years ago |
|
Dr. Stephen Henson
|
f37f20ffd3
PR: 2295
|
13 years ago |
|
Dr. Stephen Henson
|
086e32a6c7
Implement FIPS_mode and FIPS_mode_set
|
13 years ago |
