Ben Laurie
|
93cab6b319
Don't crash when processing a zero-length, TLS >= 1.1 record.
|
11 anni fa |
Ben Laurie
|
2acc020b77
Make CBC decoding constant time.
|
11 anni fa |
Dr. Stephen Henson
|
81f57e5a69
oops, typo
|
12 anni fa |
Dr. Stephen Henson
|
1cf218bcaa
New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passes
|
12 anni fa |
Dr. Stephen Henson
|
27dfffd5b7
Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)
|
13 anni fa |
Dr. Stephen Henson
|
8f119a0357
set FIPS permitted flag before initalising digest
|
13 anni fa |
Dr. Stephen Henson
|
f37f20ffd3
PR: 2295
|
13 anni fa |
Dr. Stephen Henson
|
086e32a6c7
Implement FIPS_mode and FIPS_mode_set
|
13 anni fa |
Dr. Stephen Henson
|
7409d7ad51
Initial incomplete TLS v1.2 support. New ciphersuites added, new version
|
13 anni fa |
Ben Laurie
|
c8bbd98a2b
Fix warnings.
|
14 anni fa |
Dr. Stephen Henson
|
8711efb498
Updates from 1.0.0-stable branch.
|
15 anni fa |
Dr. Stephen Henson
|
220bd84911
Updates from 1.0.0-stable
|
15 anni fa |
Ben Laurie
|
0eab41fb78
If we're going to return errors (no matter how stupid), then we should
|
16 anni fa |
Ben Laurie
|
85e878f224
Die earlier if hash is NULL. (Coverity IDs 137 & 138).
|
16 anni fa |
Ben Laurie
|
0e941da6fa
Die earlier if we have no hash function.
|
16 anni fa |
Ben Laurie
|
6ba71a7173
Handle the unlikely event that BIO_get_mem_data() returns -ve.
|
16 anni fa |
Dr. Stephen Henson
|
8164032a2e
Fix warnings: computed value not use, incompatible pointer initialization
|
17 anni fa |
Dr. Stephen Henson
|
81025661a9
Update ssl code to support digests other than MD5+SHA1 in handshake.
|
17 anni fa |
Dr. Stephen Henson
|
b948e2c59e
Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.
|
17 anni fa |
Bodo Möller
|
52b8dad8ec
Reorganize the data used for SSL ciphersuite pattern matching.
|
17 anni fa |
Nils Larsch
|
cc684e330b
ensure that the EVP_CIPHER_CTX object is initialized
|
17 anni fa |
Nils Larsch
|
ddac197404
add initial support for RFC 4279 PSK SSL ciphersuites
|
18 anni fa |
Bodo Möller
|
d32f888db1
prepare for additional RFC3546 alerts
|
19 anni fa |
Bodo Möller
|
f7914dbf9a
make sure that the unrecognized_name alert actually gets sent
|
19 anni fa |
Dr. Stephen Henson
|
d08b6b44ba
Fix compilation without OPENSSL_NO_COMP :-)
|
19 anni fa |
Dr. Stephen Henson
|
09b6c2ef15
Make OPENSSL_NO_COMP compile again.
|
19 anni fa |
Ben Laurie
|
36d16f8ee0
Add DTLS support.
|
19 anni fa |
Geoff Thorpe
|
d8ec0dcf45
Avoid some shadowed variable names.
|
21 anni fa |
Geoff Thorpe
|
2754597013
A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.
|
21 anni fa |
Bodo Möller
|
ea513641d0
comments
|
22 anni fa |