Lutz Jänicke
|
836f996010
New Option SSL_OP_CIPHER_SERVER_PREFERENCE allows TLS/SSLv3 server to override
|
24 years ago |
Dr. Stephen Henson
|
a342cc5a70
Zero the premaster secret after deriving the master secret in DH
|
24 years ago |
Richard Levitte
|
f9b3bff6f7
First tentative impementation of Kerberos 5 cryptos and keys for SSL/TLS. Implemented by Vern Staats <staatsvr@asc.hpc.mil>, further hacked and distributed by Jeffrey Altman <jaltnab@columbia.edu>
|
24 years ago |
Bodo Möller
|
7396958515
Increase permissible ClientKeyExchange message length.
|
24 years ago |
Bodo Möller
|
bbb8de0966
Avoid abort() throughout the library, except when preprocessor
|
24 years ago |
Bodo Möller
|
93d8bfcdc4
typo
|
24 years ago |
Bodo Möller
|
2c05c494c0
Implement SSL_OP_TLS_ROLLBACK_BUG for servers.
|
24 years ago |
Bodo Möller
|
98e04f9eeb
Comments for SSL_get_peer_cert_chain inconsistency.
|
25 years ago |
Dr. Stephen Henson
|
fbb41ae0ad
Allow code which calls RSA temp key callback to cope
|
25 years ago |
Ulf Möller
|
4c5fac4ac4
Fix NO_RSA (misplaced #endif).
|
25 years ago |
Bodo Möller
|
a2a0158959
Fix some bugs and document others
|
25 years ago |
Bodo Möller
|
745c70e565
Move MAC computations for Finished from ssl3_read_bytes into
|
25 years ago |
Dr. Stephen Henson
|
de469ef21e
Fix for Netscape "hang" bug.
|
25 years ago |
Ulf Möller
|
657e60fa00
ispell (and minor modifications)
|
25 years ago |
Ulf Möller
|
9d1a01be8f
Source code cleanups: Use void * rather than char * in lhash,
|
25 years ago |
Bodo Möller
|
a87030a1ed
Make DSA_generate_parameters, and fix a couple of bug
|
25 years ago |
Dr. Stephen Henson
|
018e57c74d
Apply Lutz Behnke's 56 bit cipher patch with a few
|
25 years ago |
Ulf Möller
|
e7f97e2d22
Check RAND_bytes() return value or use RAND_pseudo_bytes().
|
25 years ago |
Ulf Möller
|
eb952088f0
Precautions against using the PRNG uninitialized: RAND_bytes() now
|
25 years ago |
Bodo Möller
|
c51ae173a6
Clean up some of the SSL server code.
|
25 years ago |
Ben Laurie
|
752d706aaf
Make NO_RSA compile with pedantic.
|
25 years ago |
Bodo Möller
|
f2d9a32cf4
Use separate arrays for certificate verify and for finished hashes.
|
25 years ago |
Bodo Möller
|
c44f754047
Slight code cleanup for handling finished labels.
|
25 years ago |
Dr. Stephen Henson
|
3d14b9d04a
Add support for MS "fast SGC".
|
25 years ago |
Bodo Möller
|
47134b7864
Don't request client certificate in anonymous ciphersuites
|
25 years ago |
Bodo Möller
|
b1fe6ca175
Store verify_result with sessions to avoid potential security hole.
|
25 years ago |
Ben Laurie
|
ca7fea9656
Fix warnings.
|
25 years ago |
Dr. Stephen Henson
|
1c80019a2c
Add new sign and verify members to RSA_METHOD and change SSL code to use sign
|
25 years ago |
Bodo Möller
|
5bdae1675c
Fix yet another bug for client hello handling.
|
25 years ago |
Bodo Möller
|
074309b7ee
Fix server behaviour when facing backwards-compatible client hellos.
|
25 years ago |