Commits · 9ca2cc78a98297091f4e264e2378312ab906a93c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Dec 17, 2014
- Add a comment noting the padding oracle. · 9ca2cc78
  Emilia Kasper authored Dec 17, 2014
  9ca2cc78
- Revert "RT3425: constant-time evp_enc" · 0cf55223
  Emilia Kasper authored Dec 17, 2014
  0cf55223
- Build fixes · 0e1c318e
  Emilia Kasper authored Dec 15, 2014
  0e1c318e
- Clear warnings/errors within RL_DEBUG code sections (RL_DEBUG should be renamed) · 8bc8450a
  Richard Levitte authored Dec 16, 2014
  8bc8450a
- Clear warnings/errors within TLS_DEBUG code sections · bf68456f
  Richard Levitte authored Dec 16, 2014
  bf68456f
- Clear warnings/errors within KSSL_DEBUG code sections · 53332a75
  Richard Levitte authored Dec 16, 2014
  53332a75
- Clear warnings/errors within CIPHER_DEBUG code sections · cd387d21
  Richard Levitte authored Dec 16, 2014
  cd387d21
- Clear warnings/errors within CIPHER_DEBUG code sections · 0c403e80
  Richard Levitte authored Dec 16, 2014
  0c403e80
- Clear warnings/errors within BN_CTX_DEBUG code sections · 553affbe
  Richard Levitte authored Dec 16, 2014
  553affbe
- Premaster secret handling fixes · 1ecfb673
  Adam Langley authored Dec 16, 2014
  1ecfb673
- Backport regression test · bb565cd2
  Bodo Möller authored Oct 13, 2011
  bb565cd2
- Check for invalid divisors in BN_div. · a43bcd9e
  Emilia Kasper authored Dec 15, 2014
  a43bcd9e
Dec 16, 2014
- Check return value of ssl3_output_cert_chain · c8667a2e
  Dr. Stephen Henson authored Mar 18, 2014
  c8667a2e
- The dtls1_output_cert_chain function no longer exists so remove it from · 5ee44116
  Matt Caswell authored Dec 03, 2014
  5ee44116
- Don't set client_version to the ServerHello version. · 63ef0db6
  Adam Langley authored Dec 13, 2014
  63ef0db6
- Add more meaningful OPENSSL_NO_ECDH error message for suite b mode · f74f5c85
  Matt Caswell authored Dec 16, 2014
  f74f5c85
- Add OPENSSL_NO_ECDH guards · a38ae11c
  Matt Caswell authored Nov 18, 2014
  a38ae11c
- Remove extraneous white space, and add some braces · 4ca0e95b
  Matt Caswell authored Dec 15, 2014
  4ca0e95b
- DTLS fixes for signed/unsigned issues · f9398b92
  Matt Caswell authored Dec 12, 2014
  f9398b92
Dec 15, 2014
- Fix unused variable warning · 6af16ec5
  Emilia Kasper authored Dec 15, 2014
  6af16ec5
Dec 13, 2014
- Fix memory leak in s2_srvr.c if BUF_MEM_grow fails · d04a1e0b
  Matt Caswell authored Dec 12, 2014
  d04a1e0b
- Fixed memory leak if BUF_MEM_grow fails · bb1ddd3d
  Matt Caswell authored Dec 12, 2014
  bb1ddd3d
Dec 08, 2014
- Fixed memory leak in the event of a failure of BUF_MEM_grow · 6806b690
  Matt Caswell authored Dec 04, 2014
  6806b690
- Fix memory leak in SSL_new if errors occur. · 9809ab96
  Matt Caswell authored Dec 04, 2014
  9809ab96
Dec 05, 2014
- Clarify the return values for SSL_get_shared_curve. · bd34823e
  Emilia Kasper authored Dec 04, 2014
  bd34823e
- Add extra checks for odd-length EC curve lists. · 533814c6
  Emilia Kasper authored Dec 01, 2014
  533814c6
- Make 'make update' succeed and run it · b32474a4
  Emilia Kasper authored Dec 05, 2014
  b32474a4
- Reject elliptic curve lists of odd lengths. · f6e725e8
  Emilia Kasper authored Dec 01, 2014
  f6e725e8
Dec 04, 2014
- s_client and s_server take -verify_{host,email,ip}, not -check* · 7005eda3
  Richard Levitte authored Nov 29, 2014
  7005eda3
- Remove incorrect code inadvertently introduced through commit 59669b6a . · 9a6e9942
  Matt Caswell authored Dec 04, 2014
  9a6e9942
Dec 03, 2014
- Remove "#if 0" code · 0b3c1309
  Matt Caswell authored Dec 03, 2014
  0b3c1309
- Only use the fallback mtu after 2 unsuccessful retransmissions if it is less · dfa2762b
  Matt Caswell authored Dec 02, 2014
  dfa2762b
- Updates to s_client and s_server to remove the constant 28 (for IPv4 header · c0b90b32
  Matt Caswell authored Dec 01, 2014
  c0b90b32
- If we really get a situation where the underlying mtu is less than the minimum · 788a5bad
  Matt Caswell authored Dec 02, 2014
  788a5bad
- Fix dtls_query_mtu so that it will always either complete with an mtu that is · 1872083c
  Matt Caswell authored Dec 01, 2014
  1872083c
- Remove instances in libssl of the constant 28 (for size of IPv4 header + UDP) · 05e769f2
  Matt Caswell authored Dec 01, 2014
  05e769f2
- There are a number of instances throughout the code where the constant 28 is · ccecdb13
  Matt Caswell authored Dec 01, 2014
  ccecdb13
- The first call to query the mtu in dtls1_do_write correctly checks that the · 80d09058
  Matt Caswell authored Dec 01, 2014
  80d09058
- The SSL_OP_NO_QUERY_MTU option is supposed to stop the mtu from being · 3cc0c0d2
  Matt Caswell authored Dec 01, 2014
  3cc0c0d2
- Verify that we have a sensible message len and fail if not · 5e47008b
  Matt Caswell authored Dec 01, 2014
  5e47008b