]> git.ipfire.org Git - thirdparty/openssl.git/history - ssl/statem
Add test cases for the non CA certificate with pathlen:0
[thirdparty/openssl.git] / ssl / statem /
2020-04-01  Matt CaswellUse EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex...
2020-04-01  Matt CaswellDon't double free a DH object
2020-03-24  Matt CaswellMake sure we use a fetched cipher when encrypting state...
2020-03-24  Matt CaswellUse a fetched version of SHA256 in tls_process_new_sess...
2020-03-23  Matt CaswellUse the libctx and properties when constructing an...
2020-03-13  Benjamin KadukCode to thread-safety in ChangeCipherState
2020-03-13  Benjamin KadukDon't write to the session when computing TLS 1.3 keys
2020-02-20  PauliDeprecate the low level Diffie-Hellman functions.
2020-02-06  Matt CaswellUse the OPENSSL_CTX and property query string in EVP_PK...
2020-02-06  Matt CaswellExplicitly fetch ciphers and digests in libssl
2020-01-30  Matt CaswellDon't acknowledge a servername following warning alert...
2020-01-30  Matt CaswellFix SSL_get_servername() and SNI behaviour
2020-01-29  PauliTLS: use EVP for HMAC throughout libssl.
2020-01-24  Matt CaswellMake sure we use RAND_bytes_ex and RAND_priv_bytes_ex...
2020-01-19  Matt Caswelllibssl: Eliminate as much use of EVP_PKEY_size() as...
2019-12-13  Dmitry BelyavskiyParse large GOST ClientKeyExchange messages
2019-12-05  Matt CaswellMove constant time RSA code out of libssl
2019-11-22  Benjamin KadukFix a race condition in SNI handling
2019-11-11  Ido Ben-NatanFix misspelled resumption_label for CHARSET_EBCDIC
2019-10-10  Artiom Vaskovssl/statem/statem_lib.c: make servercontext/clientconte...
2019-10-09  Rich SalzExplicitly test against NULL; do not use !p or similar
2019-10-03  NaveenShivanna86'init_buf' memory can be freed when DTLS is used over...
2019-09-28  Dr. Matthias St... Reorganize local header files
2019-09-06  Matt CaswellDon't send a status_request extension in a CertificateR...
2019-08-14  opensslonzos-githubAdd missing EBCDIC strings
2019-08-01  raja-ashokUse allow_early_data_cb from SSL instead of SSL_CTX
2019-07-31  Richard LevitteAvoid using ERR_put_error() directly in OpenSSL code
2019-07-25  David BenjaminDon't generate an unnecessary Diffie-Hellman key in...
2019-07-16  PauliRemove tab characters from C source files.
2019-07-16  Rich SalzRemove function name from errors
2019-06-26  Benjamin KadukRevert "Delay setting the sig algs until after the...
2019-06-18  Matt CaswellFollowing the previous 2 commits also move ecpointforma...
2019-06-18  Matt CaswellFix a race condition in ciphers handling
2019-06-18  Matt CaswellFix a race condition in supported groups handling
2019-06-17  Matt CaswellFix no-ec with no-dh
2019-06-17  Matt CaswellAllow TLSv1.3 in a no-ec build
2019-06-12  raja-ashokTLS1.3 FFDHE Support
2019-06-11  Shane LontisMake EVP_MD_CTX_ctrl() work for legacy use cases (ssl3).
2019-06-04  Shane LontisMove digests to providers
2019-06-03  Matt CaswellDefer sending a KeyUpdate until after pending writes...
2019-04-29  Todd ShortCollapse ssl3_state_st (s3) into ssl_st
2019-03-28  Paul Monsonconn_is_closed should return 1 if get_last_sys_error...
2019-03-06  Richard LevitteAdapt CIPHER_DEBUG to the new generic trace API
2019-03-06  Richard LevitteAdapt SSL_DEBUG to the new generic trace API
2019-03-05  Matt CaswellDon't write the tick_identity to the session
2019-02-22  Matt CaswellDon't restrict the number of KeyUpdate messages we...
2019-02-15  Todd ShortAdd option to disable Extended Master Secret
2019-02-14  Matt CaswellDon't signal SSL_CB_HANDSHAKE_START for TLSv1.3 post...
2019-02-01  Michael TuexenFix end-point shared secret for DTLS/SCTP
2019-01-24  Matt CaswellRevert "Keep the DTLS timer running after the end of...
2019-01-08  Matt CaswellDon't artificially limit the size of the ClientHello
2019-01-07  Matt CaswellDon't complain if we receive the cryptopro extension...
2019-01-06  Dmitry BelyavskiyRestore compatibility with GOST2001 implementations.
2018-12-15  Kurt RoeckxUse (D)TLS_MAX_VERSION_INTERNAL internally
2018-12-06  Richard LevitteFollowing the license change, modify the boilerplates...
2018-12-05  Matt CaswellFix some SSL_export_keying_material() issues
2018-11-27  Paul YangFix access zero memory if SSL_DEBUG is enabled
2018-11-14  Matt CaswellFix no-ec and no-tls1_2
2018-11-12  Matt CaswellSeparate ca_names handling for client and server
2018-11-12  Matt CaswellDon't negotiate TLSv1.3 if our EC cert isn't TLSv1...
2018-11-08  Matt CaswellIgnore disabled ciphers when deciding if we are using ECC
2018-11-04  Benjamin KadukRestore sensible "sess_accept" counter tracking
2018-10-30  Matt CaswellDon't call the client_cert_cb immediately in TLSv1.3
2018-10-29  Richard Levittessl/statem: Don't compare size_t with less than zero
2018-10-19  Matt CaswellFix a DTLS memory leak
2018-10-17  Mansour AhmadiAdd a missing check on s->s3->tmp.pkey
2018-09-21  Matt CaswellDelay setting the sig algs until after the cert_cb...
2018-09-12  Bernd EdlingerFix a possible recursion in SSLfatal handling
2018-09-07  Matt CaswellDo not reset SNI data in SSL_do_handshake()
2018-09-07  Ben KadukRestore historical SSL_get_servername() behavior
2018-09-07  Matt CaswellEnsure certificate callbacks work correctly in TLSv1.3
2018-09-07  Matt CaswellProcess KeyUpdate and NewSessionTicket messages after...
2018-09-04  Matt CaswellSend a NewSessionTicket after using an external PSK
2018-09-04  Matt CaswellIgnore EPIPE when sending NewSessionTickets in TLSv1.3
2018-08-22  Matt CaswellDon't detect a downgrade where the server has a protoco...
2018-08-22  Matt CaswellUse the same min-max version range on the client consis...
2018-08-20  Matt CaswellChange Post Handshake auth so that it is opt-in
2018-08-15  Matt CaswellTurn on TLSv1.3 downgrade protection by default
2018-08-15  Matt CaswellUpdate code for the final RFC version of TLSv1.3 (RFC8446)
2018-08-14  Dmitry YakovlevMove SSL_DEBUG md fprintf after assignment
2018-08-09  Matt CaswellImprove fallback protection
2018-08-08  Matt CaswellTolerate encrypted or plaintext alerts
2018-08-08  Matt CaswellEnsure that we write out alerts correctly after early_data
2018-08-08  Matt CaswellFix a missing call to SSLfatal
2018-08-07  Andy Polyakovssl/*: switch to switch to Thread-Sanitizer-friendly...
2018-08-06  Matt CaswellEnsure we send an alert on error when processing a...
2018-07-20  Benjamin KadukNormalize SNI hostname handling for SSL and SSL_SESSION
2018-07-20  Benjamin Kadukconst-ify some input SSL * arguments
2018-07-20  Matt CaswellValidate legacy_version
2018-07-19  Matt CaswellDon't skip over early_data if we sent an HRR
2018-07-17  Matt CaswellFix no-psk
2018-07-17  Matt CaswellAlways issue new tickets when using TLSv1.3 stateful...
2018-07-17  Matt CaswellDon't remove sessions from the cache during PHA in...
2018-07-13  Matt CaswellAs a server don't select TLSv1.3 if we're not capable...
2018-07-13  Matt CaswellUse ssl_version_supported() when choosing server version
2018-07-03  Matt CaswellRemove TLSv1.3 tickets from the client cache as we...
2018-07-03  Matt CaswellRestore behaviour from commit 36ff232cf that was incorr...
2018-07-02  Matt CaswellAdd setters to set the early_data callback
2018-07-02  Matt CaswellMake the anti-replay feature optional
2018-07-02  Matt CaswellFix a NULL ptr deref in error path in tls_process_cke_dhe()
next