 Matt Caswell
|
ad64a69e02
Change usage of RAND_pseudo_bytes to RAND_bytes
|
8 years ago |
 Viktor Dukhovni
|
d81a160058
Better SSLv2 cipher-suite enforcement
|
9 years ago |
 Alessandro Ghedini
|
607e77300e
Validate ClientHello session_id field length and send alert on failure
|
8 years ago |
 Emilia Kasper
|
ae50d82700
Harden SSLv2-supporting servers against Bleichenbacher's attack.
|
9 years ago |
|
Matt Caswell
|
5cc6509dae
Fix unsigned/signed warnings
|
9 years ago |
|
Emilia Kasper
|
86f8fb0e34
Fix reachable assert in SSLv2 servers.
|
9 years ago |
|
Matt Caswell
|
323d39e87f
Rerun util/openssl-format-source -v -c .
|
9 years ago |
|
Matt Caswell
|
ae5c8664e5
Run util/openssl-format-source -v -c .
|
9 years ago |
|
Matt Caswell
|
aae3233e1e
More tweaks for comments due indent issues
|
9 years ago |
|
Matt Caswell
|
335d4d06a7
Tweaks for comments due to indent's inability to handle them
|
9 years ago |
|
Matt Caswell
|
d04a1e0b5b
Fix memory leak in s2_srvr.c if BUF_MEM_grow fails
|
10 years ago |
 Ben Laurie
|
68d2cf51bc
Reduce version skew: trivia (I hope).
|
12 years ago |
 Bodo Möller
|
a288aaefc4
Assorted bugfixes:
|
13 years ago |
 Dr. Stephen Henson
|
e97359435e
Fix warnings (From HEAD, original patch by Ben).
|
14 years ago |
|
Dr. Stephen Henson
|
3d1dab4404
PR: 2055
|
15 years ago |
|
Dr. Stephen Henson
|
bab534057b
Updatde from stable branch.
|
16 years ago |
|
Ben Laurie
|
babb379849
Type-checked (and modern C compliant) OBJ_bsearch.
|
16 years ago |
|
Dr. Stephen Henson
|
a6fbcb4220
Change safestack reimplementation to match 0.9.8.
|
17 years ago |
|
Dr. Stephen Henson
|
6434abbfc6
RFC4507 (including RFC4507bis) TLS stateless session resumption support
|
17 years ago |
|
Dr. Stephen Henson
|
b948e2c59e
Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.
|
17 years ago |
|
Dr. Stephen Henson
|
7bbcb2f690
Avoid warnings on VC++ 2005.
|
19 years ago |
 Nils Larsch
|
4ebb342fcd
Let the TLSv1_method() etc. functions return a const SSL_METHOD
|
19 years ago |
|
Dr. Stephen Henson
|
f3b656b246
Initialize SSL_METHOD structures at compile time. This removes the need
|
19 years ago |
|
Bodo Möller
|
c6c2e3135d
Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled
|
19 years ago |
|
Nils Larsch
|
7c7667b86b
check return value of RAND_pseudo_bytes; backport from the stable branch
|
19 years ago |
 Richard Levitte
|
875a644a90
Constify d2i, s2i, c2i and r2i functions and other associated
|
20 years ago |
|
Richard Levitte
|
5fdf06666c
Avoid including cryptlib.h, it's not really needed.
|
21 years ago |
|
Ben Laurie
|
54a656ef08
Security fixes brought forward from 0.9.7.
|
22 years ago |
|
Bodo Möller
|
b8565a9af9
really fix race conditions
|
22 years ago |
|
Bodo Möller
|
e78f137899
really fix race condition
|
22 years ago |
