]> git.ipfire.org Git - thirdparty/openssl.git/history - ssl/statem
DH private key size was one bit too large
[thirdparty/openssl.git] / ssl / statem /
5 days ago  Eugene Syromiatnikovssl: use array memory (re)allocation routines
2025-07-25  martinAdd support for TLS 1.3 OCSP multi-stapling for server...
2025-07-09  Michael BaentschIntroduce SSL_OP_SERVER_PREFERENCE to replace SSL_OP_CI...
2025-07-02  Tomas Mrazlibssl: Silence warnings on Win64 builds
2025-06-30  noctuellesfix: msg callback in dtls1_do_write that incorrectly...
2025-06-20  Sergey KandaurovPreserve connection custom extensions in SSL_set_SSL_CTX()
2025-06-20  Sergey KandaurovAdd a helper function to copy custom extensions with...
2025-06-10  yexiaochuanfix: add parsing check in TLS compress_certificate...
2025-06-03  Matt CaswellEnsure client read app data secret change occurs after...
2025-06-03  Matt CaswellImplement explicit storing of the server_finished_hash
2025-06-03  Matt CaswellEnsure client read handshake secret change occurs after...
2025-06-03  Matt CaswellImplement explicit storing of the handshake_traffic_hash
2025-05-13  Norbert Pocsstatem_srvr.c: Add check for empty ecdhe encoded key
2025-04-29  Anton TielemanTest+fix handling "wrong" downgrade signals
2025-04-14  Andrey TsygunkaFix potential NULL pointer dereference in final_maxfrag...
2025-04-01  Benjamin Kadukstatem: always save sigalgs during PHA
2025-03-31  Viktor DukhovniFix sigalg corner cases
2025-03-20  Matt CaswellMove the Handshake read secret change earlier in the... 26860/head
2025-03-12  openssl-machineCopyright year updates
2025-02-25  Tomas Mraztls_construct_ctos_key_share(): Fix handling of HRR...
2025-02-19  Cheng ZhangAdd the SSL_NO_EOED internal macro
2025-02-19  Neil HormanRelax checking of supported-groups/keyshare ordering
2025-02-18  Frederik Wedel-HeinenAdds missing checks of return from XXX_up_ref(). feature/evp_skey
2025-02-17  Hugo Landaulibssl: Move SSL object unwrapping macros to separate...
2025-02-11  Viktor DukhovniUse ERR marks also when verifying server X.509 certs
2025-02-11  Viktor DukhovniWith SSL_VERIFY_PEER client RPK should abort on X509...
2025-02-10  Dave KelseyAdd support for multiple key shares
2025-01-02  cxReject invalid FFDHE and ECDHE key shares with SSL_AD_I...
2024-12-06  willmafhDelete a redundant break
2024-11-22  Peiwei HuFix multiple wrong checks of EVP_PKEY_set1_encoded_publ...
2024-11-13  Andrew DinhChange "a SSL" to "an SSL"
2024-11-07  Matt CaswellMake sure we use the correct SSL object when making...
2024-11-04  Todd ShortUse correct alerts for some cert comp errors
2024-10-11  Niels DosscheFix memory leak in tls_parse_ctos_psk()
2024-09-05  FdaSilvaYYssl: rework "e_os.h" inclusions
2024-09-05  Tomas MrazCopyright year updates
2024-08-29  Viktor DukhovniCheck for excess data in CertificateVerify
2024-08-29  erbsland-devCorrect Alert Handling for Missing Compression Methods
2024-08-29  slontisEVP_MD_size() updates
2024-08-21  Matt CaswellFix the alert used on a missing key_share
2024-08-15  Bhaskar MetiyaReturn SSL_AD_DECRYPT_ERROR alert on PSK binder validat...
2024-08-07  Matt CaswellCheck that a supported_versions extension is present...
2024-07-22  Dimitri Papadopoulosthat open brace { should be on the previous line
2024-07-22  Dimitri PapadopoulosRemove trailing whitespace
2024-07-18  Gerd Hoffmannfix vs2019 warning
2024-06-27  Matt CaswellAdd ALPN validation in the client
2024-06-27  Matt CaswellCorrect return values for tls_construct_stoc_next_proto_neg
2024-06-27  Matt CaswellMore correctly handle a selected_len of 0 when processi...
2024-06-20  Frederik Wedel-HeinenFix handling of max_fragment_length extension for PSK
2024-05-28  sashanMove stack of compression methods from libssl to OSSL_L...
2024-05-14  irosayRelease pkey_ctx on initialization failure
2024-05-06  Matt CaswellSet the server sig algs before calling the session_secr...
2024-04-26  Jiasheng Jiangssl/statem: Replace size_t with int and add the checks
2024-04-22  Tim PerryUse empty renegotiate extension instead of SCSV for...
2024-04-09  Richard LevitteCopyright year updates
2024-04-08  Matt CaswellFix unconstrained session cache growth in TLSv1.3
2024-03-14  Frederik Wedel-HeinenAvoid a memcpy in dtls_get_reassembled_message()
2024-01-31  Matt CaswellWhen selecting a method ensure we use the correct clien...
2024-01-18  Frederik Wedel-HeinenMove increment of dtls epoch to change cipher state...
2024-01-03  Frederik Wedel-HeinenSimplify ssl protocol version comparisons.
2023-12-29  Dimitri PapadopoulosFix new typos found by codespell
2023-12-18  Frederik Wedel-HeinenRemove redundant logic for DTLS server version selection
2023-12-18  Frederik Wedel-HeinenHandle tls and dtls server version selection similarly
2023-11-30  Markus MinichmayrFix implementation of `PreferNoDHEKEX` option.
2023-11-27  Hugo LandauMake scsv read-only
2023-11-27  Hugo LandauMake bitmask table read only
2023-11-24  Markus MinichmayrAdd option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the...
2023-11-22  Bernd EdlingerFix a possible use-after-free in custom_exts_free
2023-11-21  Matt CaswellMove freeing of an old record layer to dtls1_clear_sent...
2023-11-21  Neil Hormanzero data in hm_fragment on alloc
2023-11-13  Alexey Fofanovset_client_ciphersuite(): Fix for potential UB if sessi...
2023-11-08  Bernd EdlingerFix a possible memory leak in custom_ext_add
2023-11-02  Hugo LandauTLS: Fix use of an uninitialized value
2023-10-23  Matt CaswellIgnore a bad signature in a CertificateVerify message...
2023-09-13  Dimitri PapadopoulosFix typos found by codespell
2023-09-11  Dimitri Papadopoulos"foo * bar" should be "foo *bar"
2023-09-11  Dimitri PapadopoulosRemove repeated words
2023-09-07  Matt CaswellCopyright year updates
2023-08-25  Tomas MrazAlways use uint8_t for TLS record type
2023-08-24  Matt CaswellChange the TLS handshake keys early if we're not doing...
2023-08-20  shub-alssl_get_min_max_version(): Remove unused variable single
2023-08-15  Matt CaswellTLS KeyUpdate messages are not allowed in QUIC
2023-08-15  Matt CaswellNewSessionTickets with an early_data extension must...
2023-08-04  Frederik Wedel-HeinenResolves some magic values that has a hello_retry_reque...
2023-07-16  Matt CaswellFix ssl3_do_write() to correctly handle retries
2023-06-23  Matt CaswellDon't ask for an invalid group in an HRR
2023-06-15  Dimitri PapadopoulosFix typos found by codespell
2023-06-02  Jairus Christensen[feat] SSL RTT in both client and server statem. SSL_ge...
2023-05-30  Dr. David von Oheimbssl/statem_srvr.c: clean up handling of EVP_PKEY_decryp...
2023-05-05  Matt CaswellBe more accurate about what we accept as a valid DTLS...
2023-05-02  Tomas MrazDo not send the empty renegotiation info SCSV in QUIC
2023-04-12  Matt CaswellMake the data field for get_record() const
2023-03-28  Todd ShortRFC7250 (RPK) support
2023-03-21  VeronikaNguyenAdded `CERTIFICATE_VERIFY_MAX_LENGTH` constant
2023-03-01  Matt CaswellFix early_data age calculation
2023-02-24  Michael Baentschfirst cut at sigalg loading
2023-02-22  Matt CaswellAdd the ability to mutate TLS handshake messages before...
2023-02-20  Philippe Antoinefuzz: fix coverity warnings
2023-02-08  Philippe Antoinefuzz: make post handshake reachable
2023-01-24  Matt CaswellAdd the ability to add a custom extension on an SSL...
next