- 17 Sep, 2013 1 commit
-
-
Bodo Moeller authored
the main branch (http://cvs.openssl.org/chngview?cn=19322) later added to the 1.0.2 branch (http://cvs.openssl.org/chngview?cn=23113), and thus not a change "between 1.0.2 and 1.1.0".
-
- 16 Sep, 2013 3 commits
-
-
Trevor Perrin authored
-
Bodo Moeller authored
(Various changes from the master branch are now in the 1.0.2 branch too.)
-
Bodo Moeller authored
- EC_GROUP_cmp shouldn't consider curves equal just because the curve name is the same. (They really *should* be the same in this case, but there's an EC_GROUP_set_curve_name API, which could be misused.) - EC_POINT_cmp shouldn't return 0 for ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED or EC_R_INCOMPATIBLE_OBJECTS errors because in a cmp API, 0 indicates equality (not an error). Reported by: king cope
-
- 15 Sep, 2013 5 commits
-
-
Andy Polyakov authored
PR: 3125 Submitted by: Kyle McMartin
-
Andy Polyakov authored
PR: 3110 Submitted by Corinna Vinschen.
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Ard Biesheuvel authored
Signed-off-by:
Ard Biesheuvel <ard.biesheuvel@linaro.org>
-
- 13 Sep, 2013 5 commits
-
-
Rob Stradling authored
-
Rob Stradling authored
-
Rob Stradling authored
-
Rob Stradling authored
-
Mat authored
-
- 12 Sep, 2013 1 commit
-
-
Scott Deboy authored
-
- 10 Sep, 2013 1 commit
-
-
Ben Laurie authored
-
- 09 Sep, 2013 2 commits
-
-
Andy Polyakov authored
Avoid occasional up to 8% performance drops.
-
Andy Polyakov authored
-
- 08 Sep, 2013 4 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
When verifying a partial path always check to see if the EE certificate is explicitly trusted: the path could contain other untrusted certificates.
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Experimental support for encrypt then mac from draft-gutmann-tls-encrypt-then-mac-02.txt To enable it set the appropriate extension number (0x10 for the test server) using e.g. -DTLSEXT_TYPE_encrypt_then_mac=0x10 For non-compliant peers (i.e. just about everything) this should have no effect.
-
- 07 Sep, 2013 1 commit
-
-
Dr. Stephen Henson authored
-
- 06 Sep, 2013 5 commits
-
-
Ben Laurie authored
-
Scott Deboy authored
Free generated supp data after handshake completion, add comment regarding use of num_renegotiations in TLS and supp data generation callbacks
-
Ben Laurie authored
-
Ben Laurie authored
-
Scott Deboy authored
Add callbacks supporting generation and retrieval of supplemental data entries, facilitating RFC 5878 (TLS auth extensions) Removed prior audit proof logic - audit proof support was implemented using the generic TLS extension API Tests exercising the new supplemental data registration and callback api can be found in ssltest.c. Implemented changes to s_server and s_client to exercise supplemental data callbacks via the -auth argument, as well as additional flags to exercise supplemental data being sent only during renegotiation.
-
- 05 Sep, 2013 8 commits
-
-
Ben Laurie authored
-
-
Ben Laurie authored
-
Carlos Alberto Lopez Perez authored
* Many XMPP servers are configured with multiple domains (virtual hosts) * In order to establish successfully the TLS connection you have to specify which virtual host you are trying to connect. * Test this, for example with :: * Fail: openssl s_client -connect talk.google.com:5222 -starttls xmpp * Works: openssl s_client -connect talk.google.com:5222 -starttls xmpp -xmpphost gmail.com
-
Carlos Alberto Lopez Perez authored
-
Carlos Alberto Lopez Perez authored
* When the host used in "-connect" is not what the remote XMPP server expects the server will return an error like this: <stream:error> <host-unknown xmlns='urn:ietf:params:xml:ns:xmpp-streams'/> </stream:error> * But the actual code will stay on the loop forever because the stop condition "/stream:features>" will never happen, * Make this more robust: The stop condition should be that BIO_read failed * Test if for example with :: openssl s_client -connect random.jabb3r.net:5222 -starttls xmpp
-
Carlos Alberto Lopez Perez authored
* Some XMPP Servers (OpenFire) use double quotes. * This makes s_client starttls work with this servers. * Tested with OpenFire servers from http://xmpp.net/ :: openssl s_client -connect coderollers.com:5222 -starttls xmpp
-
Rob Stradling authored
OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
-
- 03 Sep, 2013 1 commit
-
-
Dr. Stephen Henson authored
-
- 21 Aug, 2013 3 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Ben Laurie authored
-