- Jun 12, 2014
-
-
Kurt Cancemi authored
In the ssl_cipher_get_evp() function, fix off-by-one errors in index validation before accessing arrays. PR#3375
-
Andy Polyakov authored
Fix SEH and stack handling in Win64 build. (cherry picked from commit 977f32e8)
-
Matt Caswell authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Richard Levitte authored
Partly provided by Zoltan Arpadffy <arpadffy@polarhome.com>
-
Richard Levitte authored
-
Richard Levitte authored
-
Richard Levitte authored
-
- Jun 11, 2014
-
-
Andy Polyakov authored
(cherry picked from commit 77a27a50)
-
Dr. Stephen Henson authored
(cherry picked from commit 7239a09c7b5757ed8d0e9869f3e9b03c0e11f4d1)
-
Andy Polyakov authored
(cherry picked from commit 1cf8f57b)
-
Andy Polyakov authored
(cherry picked from commit 619b9466)
-
- Jun 10, 2014
-
-
Rob Stradling authored
(cherry picked from commit fd2309aa)
-
Matt Caswell authored
-
Andy Polyakov authored
(cherry picked from commit 82741e9c)
-
Andy Polyakov authored
Result of joint effort with Ard Biesheuvel. (cherry picked from commit 2d5a799d)
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
Submitted by: Ard Biesheuvel. (cherry picked from commit cd91fd7c)
-
Andy Polyakov authored
(cherry picked from commit f8aab617)
-
Andy Polyakov authored
(cherry picked from commit ddb6b965)
-
Andy Polyakov authored
armcap.c is shared between 32- and 64-bit builds and features link-time detection of getauxval. Submitted by: Ard Biesheuvel. (cherry picked from commit e8d93e34)
-
Andy Polyakov authored
(cherry picked from commit e2eabed1)
-
Andy Polyakov authored
Pointer out and suggested by: Ard Biesheuvel. (cherry picked from commit 5dcf70a1)
-
Andy Polyakov authored
(cherry picked from commit 72346328)
-
Andy Polyakov authored
(cherry picked from commit 797d24be)
-
Andy Polyakov authored
sha/asm/sha256-armv4.pl: add ARMv8 code path. (cherry picked from commit 9250a306)
-
Andy Polyakov authored
(cherry picked from commit 4afa9f03)
-
Hubert Kario authored
Backport of patch: add ECC strings to ciphers(1), point out difference between DH and ECDH and backport of other other assorted fixes to this man page * Make a clear distinction between DH and ECDH key exchange. * Group all key exchange cipher suite identifiers, first DH then ECDH * add descriptions for all supported *DH* identifiers * add ECDSA authentication descriptions * add example showing how to disable all suites that offer no authentication or encryption * update status of static DH (it's now supported) * backport descriptions of AES128, AES256, AESGCM * backport descriptions of CAMELLIA128, CAMELLIA256 * backport listing of standard names for ECC cipher suites and TLSv1.2 cipher suites * backport description of PSK cipher suites
-
Mike Bland authored
Defines SETUP_TEST_FIXTURE and EXECUTE_TEST, and updates ssl/heartbeat_test.c using these macros. SETUP_TEST_FIXTURE makes use of the new TEST_CASE_NAME macro, defined to use __func__ or __FUNCTION__ on platforms that support those symbols, or to use the file name and line number otherwise. This should fix several reported build problems related to lack of C99 support.
-
Dr. Stephen Henson authored
Remove experimental DANE/dnssec code: not ready for use in an official release yet.
-
Dr. Stephen Henson authored
PR#3394 (cherry picked from commit 7a9d59c1)
-
- Jun 09, 2014
-
-
Dr. Stephen Henson authored
SRP ciphersuites do not have no authentication. They have authentication based on SRP. Add new SRP authentication flag and cipher string. (cherry picked from commit a86b88acc373ac1fb0ca709a5fb8a8fa74683f67)
-
Dr. Stephen Henson authored
Fix strength_bits to 112 for 3DES. (cherry picked from commit 837c203719205ab19b5609b2df7151be8df05687)
-
- Jun 08, 2014
-
-
Kurt Roeckx authored
It's using an internal API that that might not be available in the shared library.
-
Jakub Wilk authored
Because of a missing include <fcntl.h> we don't have O_CREATE and don't create the file with open() using mode 0600 but fall back to using fopen() with the default umask followed by a chmod(). Problem found by Jakub Wilk <jwilk@debian.org>.
-
- Jun 07, 2014
-
-
Dr. Stephen Henson authored
If application uses tls_session_secret_cb for session resumption set the CCS_OK flag. (cherry picked from commit 953c592572e8811b7956cc09fbd8e98037068b58)
-