]> git.ipfire.org Git - thirdparty/openssl.git/history - ssl
try_pkcs12(): cleanse passphrase so it is not left on the stack
[thirdparty/openssl.git] / ssl /
2021-12-21  Dr. David von Oheimbadd OSSL_STACK_OF_X509_free() for commonly used pattern
2021-12-14  Matt CaswellFix invalid handling of verify errors in libssl
2021-12-07  Matt CaswellDon't free the EVP_PKEY on error in set0_tmp_dh_pkey...
2021-11-29  Dmitry BelyavskiyNo EtM for GOST ciphers in TLS 1.2
2021-11-29  olszomalDon't include any TLSv1.3 ciphersuites that are disabled
2021-11-26  Bernd EdlingerEnable brainpool curves for TLS1.3
2021-11-17  Dr. David von OheimbMove more general parts of internal/cryptlib.h to new...
2021-11-17  Dr. David von OheimbAdd and use HAS_PREFIX() and CHECK_AND_SKIP_PREFIX...
2021-11-16  Peiwei HuBIO_read_filename: fix return check
2021-11-16  Peiwei HuRAND_bytes_ex: fix return check
2021-11-15  Matt CaswellReset the rwstate before calling ASYNC_start_job()
2021-11-12  PauliAdd return value NULL checks that were missing
2021-11-08  Tianjia ZhangKTLS: use EVP_CIPHER_is_a instead of nid
2021-11-04  Bernd EdlingerFix a memory leak in ssl_create_cipher_list
2021-11-04  Bernd EdlingerFix a memory leak in tls_parse_stoc_key_share
2021-10-28  x2018fix some code with obvious wrong coding style
2021-10-27  x2018free the Post-Handshake Auth digest when there is an...
2021-10-11  Matt CaswellNew extensions can be sent in a certificate request
2021-10-06  Bernd EdlingerReplace the AES-128-CBC-HMAC-SHA1 cipher in e_ossltest.c
2021-10-04  Dr. David von OheimbFix ssl_free() and thus BIO_free() to respect BIO_NOCLOSE
2021-09-30  Erik LaxAllow cipher strings to be given using its standard...
2021-09-28  Tianjia Zhangssl: Correct comment for ssl3_read_bytes()
2021-09-26  Tianjia Zhangssl: Correct filename in README
2021-09-24  Paulitls/ccm8: reduce the cipher strength for CCM8 ciphers...
2021-09-24  Paulidoc: document the change to the security level of CCM8...
2021-09-24  Paulitls: reduce the strength of CCM_8 ciphers due to their...
2021-09-23  slontisChange TLS RC4 cipher strength check to be data driven.
2021-09-07  Richard LevitteUpdate copyright year
2021-09-02  Daniel BeveniusFix indentation of tls13_hkdf_expand parameters
2021-08-31  Tomas MrazMake the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION...
2021-08-25  Bernd EdlingerFix the array size of dtlsseq in tls1_enc
2021-08-18  Todd ShortFix state name abbreviation
2021-08-16  Todd ShortFix potential double-free
2021-08-11  Dmitry BelyavskiyOmitted signature_algorithms extension alerts updated
2021-08-05  Paulitls/prov: move the TLS 1.3 KDF code to providers
2021-07-29  yangyangtiantianlo... Fix dtls timeout dead code
2021-07-29  Matt CaswellUpdate copyright year
2021-07-28  Todd ShortAdd missing session timeout calc
2021-07-27  Tomas MrazKTLS: AES-CCM in TLS-1.3 is broken on 5.x kernels,...
2021-07-21  Dr. David von Oheimbtls_process_{client,server}_certificate(): allow verify...
2021-07-17  Matt CaswellFix some minor record layer issues
2021-07-16  Matt CaswellDisallow SSL_key_update() if there are writes pending
2021-07-16  Matt CaswellDon't reset the packet pointer in ssl3_setup_read_buffer
2021-07-06  Matt CaswellAvoid "excessive message size" for session tickets
2021-07-06  Tomas Mrazfips module header inclusion fine-tunning
2021-06-23  Richard LevitteAdapt other parts of the source to the changed EVP_Q_di...
2021-06-22  Hubert Kariocross-reference the DH and RSA SECLEVEL to level of...
2021-06-19  Paulissl: fix indentation
2021-06-19  Paulissl: fix indentation
2021-06-19  Paulissl: replace tabs with spaces
2021-06-19  Paulissl: do not choose auto DH groups that are weaker than...
2021-06-17  Matt CaswellUpdate copyright year
2021-06-15  Dmitry BelyavskiyDisabling Encrypt-then-MAC extension in s_client/s_server
2021-06-13  Tomas MrazDo not duplicate symbols between libcrypto and libssl...
2021-06-10  Todd ShortOptimize session cache flushing
2021-06-04  Matt CaswellOnly call dtls1_start_timer() once
2021-06-02  Paulitls: remove TODOs
2021-06-01  Trev LarockModify ssl_handshake_hash to call SSLfatal
2021-06-01  Tomas MrazRename all getters to use get/get0 in name
2021-06-01  Paulissl: ass size_t to RAND_bytes_ex()
2021-05-29  Paulissl: add zero strenght arguments to BN and RAND RNG...
2021-05-27  Todd ShortCall SSLfatal when the generate_ticket_cb returns 0
2021-05-27  Juergen ChristFix compilation warning with GCC11.
2021-05-26  Rich SalzUse "" for include crypto/xxx
2021-05-26  Rich SalzUse "" for include internal/xxx
2021-05-26  Paulierr: rename err_load_xxx_strings_int functions
2021-05-25  Benjamin KadukAllow TLS13_AD_MISSING_EXTENSION for older versions
2021-05-21  Dmitry BelyavskiyCleanup the peer point formats on regotiation
2021-05-20  Matt CaswellUpdate copyright year
2021-05-19  Benjamin KadukLet SSL_new_session_ticket() enter init immediately
2021-05-17  Rich SalzAdd SSL_OP_ALLOW_CLIENT_RENEGOTIATION
2021-05-15  Benjamin KadukPromote SSL_get_negotiated_group() for non-TLSv1.3
2021-05-14  Rich SalzSlightly reformat ssl.h.in
2021-05-14  Rich SalzConvert SSL_{CTX}_[gs]et_options to 64
2021-05-13  Tomas MrazReplace EVP_PKEY_supports_digest_nid
2021-05-12  Benjamin KadukDon't send key_share for PSK-only key exchange
2021-05-12  Benjamin Kadukmake update
2021-05-12  Benjamin KadukImprove RFC 8446 PSK key exchange mode compliance
2021-05-08  Dr. David von OheimbAdd quick one-shot EVP_Q_mac() and deprecation compensa...
2021-05-08  Shane LontisRemove unused code from the fips module
2021-05-07  Richard LevitteDrop libimplementations.a
2021-05-06  Dmitry BelyavskiyAvoid sending alerts after shutdown
2021-05-05  Rich SalzRemove all trace of FIPS_mode functions
2021-05-05  Benjamin KadukCorrect ssl_conf logic for "legacy_server_connect"
2021-05-05  Benjamin KadukEnforce secure renegotiation support by default
2021-05-01  FdaSilvaYYssl: fix possible ref counting fields use before init.
2021-05-01  Dmitry BelyavskiyUse OCSP-specific error code for clarity
2021-04-28  Matt CaswellDefer Finished MAC handling until after state transition
2021-04-22  Matt CaswellUpdate copyright year
2021-04-19  Matt CaswellFix some TODO(3.0) occurrences in ssl/t1_lib.c
2021-04-18  Rich SalzAdd "origin" field to EVP_CIPHER, EVP_MD
2021-04-13  Todd ShortHandle set_alpn_protos inputs better.
2021-04-12  Matt CaswellOnly enable KTLS if it is explicitly configured
2021-04-12  Shane LontisReplace OSSL_PARAM_BLD_free_params() with OSSL_PARAM_fr...
2021-04-09  Nan XiaoFix typo in statem_clnt.c
2021-04-08  Matt CaswellUpdate copyright year
2021-04-01  Randall S. BeckerCorrected missing definitions from NonStop SPT build.
2021-04-01  Nan XiaoFix typos in ssl_lib.c
2021-04-01  Tomas MrazOBJ_nid2sn(NID_sha256) is completely equivalent to...
2021-03-30  Paulissl: fix problem where MAC IDs were globally cached.
next