Commits · 65796038742b02a71bcefd2f48cb434966bfdb9b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Dec 03, 2014
- Only use the fallback mtu after 2 unsuccessful retransmissions if it is less · 65796038
  Matt Caswell authored Dec 02, 2014
  65796038
- Updates to s_client and s_server to remove the constant 28 (for IPv4 header · d68aade2
  Matt Caswell authored Dec 01, 2014
  d68aade2
- If we really get a situation where the underlying mtu is less than the minimum · 3242e593
  Matt Caswell authored Dec 02, 2014
  3242e593
- Fix dtls_query_mtu so that it will always either complete with an mtu that is · 35384e8e
  Matt Caswell authored Dec 01, 2014
  35384e8e
- Remove instances in libssl of the constant 28 (for size of IPv4 header + UDP) · 4c21e004
  Matt Caswell authored Dec 01, 2014
  4c21e004
- There are a number of instances throughout the code where the constant 28 is · 59ee70e3
  Matt Caswell authored Dec 01, 2014
  59ee70e3
- The first call to query the mtu in dtls1_do_write correctly checks that the · 43e56992
  Matt Caswell authored Dec 01, 2014
  43e56992
- The SSL_OP_NO_QUERY_MTU option is supposed to stop the mtu from being · 8aaeec9f
  Matt Caswell authored Dec 01, 2014
  8aaeec9f
- Verify that we have a sensible message len and fail if not · 8454d3f9
  Matt Caswell authored Dec 01, 2014
  8454d3f9
Dec 02, 2014
- Use the SSLv23 method by default · 5004c22c
  Kurt Roeckx authored Nov 29, 2014
  5004c22c
Nov 28, 2014
- Check for FindNextFile when defining it rather than FindFirstFile · e96872f4
  Richard Levitte authored Nov 28, 2014
  e96872f4
- [PR3597] Advance to the next state variant when reusing messages. · 14e9a78d
  Richard Levitte authored Nov 28, 2014
  14e9a78d
- Correct some layout issues, convert all remaining tabs to appropriate amounts of spaces. · 2aca9b27
  Richard Levitte authored Nov 28, 2014
  2aca9b27
- Improves the proxy certificates howto doc. · 26d7cb40
  Alok Menghrajani authored Nov 14, 2014
  26d7cb40
Nov 27, 2014
- Fixed warning in ssl2_enc · 2db95e09
  Matt Caswell authored Nov 27, 2014
  2db95e09
- Check EVP_Cipher return values for SSL2 · 5fc8bb6a
  Matt Caswell authored Nov 18, 2014
  5fc8bb6a
- Add checks to the return value of EVP_Cipher to prevent silent encryption failure. · 244d0955
  Matt Caswell authored Nov 18, 2014
  244d0955
- Remove redundant checks in ssl_cert_dup. This was causing spurious error messages when using GOST · 061e68c5
  Matt Caswell authored Nov 27, 2014
  061e68c5
- Remove duplicated code · 3f1d582f
  Matt Caswell authored Nov 17, 2014
  3f1d582f
- Tidy up ocsp help output · 8a2e5bf6
  Matt Caswell authored Nov 27, 2014
  8a2e5bf6
- Add documentation on -timeout option in the ocsp utility · 6c3d9487
  André Guerreiro authored Nov 27, 2014
  6c3d9487
- NetWare compilation fix. · 51c5ab5d
  Guenter authored Nov 27, 2014
  51c5ab5d
- Updates to X509_NAME_get_index_by_NID.pod submitted by user Bernardh via the wiki · ff60f338
  Matt Caswell authored Sep 12, 2014
  ff60f338
- Updates to X509_NAME_add_entry_by_txt.pod submitted by user Bernardh via the wiki · 2cfa5edb
  Matt Caswell authored Sep 06, 2014
  2cfa5edb
- Updates to EVP_PKEY_encrypt.pod submitted by user Bernardh via the wiki · 291a3e96
  Matt Caswell authored Sep 06, 2014
  291a3e96
- Add include of ssl.h which is required by srtp.h · 2184a14b
  Matt Caswell authored Nov 27, 2014
  2184a14b
Nov 26, 2014
- Fixed memory leak due to incorrect freeing of DTLS reassembly bit mask · 2e84084f
  Matt Caswell authored Nov 25, 2014
  2e84084f
Nov 25, 2014
- Corrected comments in ssl.h about SSLv23_method and friends · 26f9cfbd
  Matt Caswell authored Nov 25, 2014
  26f9cfbd
Nov 20, 2014
- Do not resume a session if the negotiated protocol version does not match · 7fc5f4f1
  David Benjamin authored Nov 20, 2014
  7fc5f4f1
- Ensure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is reset · 249a3e36
  Emilia Kasper authored Nov 19, 2014
  249a3e36
- Always require an advertised NewSessionTicket message. · 15d717f5
  Emilia Kasper authored Nov 19, 2014
  15d717f5
- Remove ssl3_check_finished. · b8712b2b
  Emilia Kasper authored Nov 19, 2014
  b8712b2b
- Set s->hit when resuming from external pre-shared secret. · 1eaccbef
  Emilia Kasper authored Nov 19, 2014
  1eaccbef
- Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext. · e2f69f5c
  Emilia Kasper authored Nov 19, 2014
  e2f69f5c
Nov 19, 2014
- New option no-ssl3-method which removes SSLv3_*method · 821bee43
  Dr. Stephen Henson authored Oct 29, 2014
  821bee43
Nov 18, 2014
- Added OPENSSL_NO_EC2M guards around the preferred EC curve list · 8b6205c4
  Matt Caswell authored Nov 10, 2014
  8b6205c4
Nov 17, 2014
- Don't use msg on error. · e5cf62b0
  Jan Hykel authored Nov 16, 2014
  e5cf62b0
Nov 13, 2014
- Fix cross reference table generator. · b1edca2a
  Dr. Stephen Henson authored Nov 01, 2014
  b1edca2a
Nov 12, 2014
- Fixes a minor typo in the EVP docs. · e7768ebb
  Alok Menghrajani authored Nov 11, 2014
  e7768ebb
- Correct timestamp output when clock_precision_digits > 0 · 329a76c0
  Michal Bozon authored Nov 12, 2014
  329a76c0