Commits · c5b831f21d0d29d1e517d139d9d101763f60c9a2 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Jan 28, 2016
- Always generate DH keys for ephemeral DH cipher suites · c5b831f2
  Matt Caswell authored Dec 17, 2015
  c5b831f2
- Prevent small subgroup attacks on DH/DHE · 878e2c5b
  Matt Caswell authored Jan 18, 2016
  878e2c5b
- Better SSLv2 cipher-suite enforcement · d81a1600
  Viktor Dukhovni authored Dec 30, 2015
  d81a1600
Jan 22, 2016
- pkeyutl: allow peerkey for EC_DERIVE to reside on a hardware token (public key for now) · 3665fa25
  Mouse authored Jan 15, 2016
  3665fa25
Jan 21, 2016
- RT3863 ECC: Add missing NULL check. Set a flag · 2b80d00e
  Billy Brumley authored Jan 21, 2016
  2b80d00e
Jan 20, 2016
- GH issue 572: Error in help message · 78a140ec
  Rich Salz authored Jan 20, 2016
  78a140ec
- Handle SSL_shutdown while in init more appropriately · f73c737c
  Matt Caswell authored Dec 07, 2015
  f73c737c
Jan 19, 2016
- Fix BSD -rpath parameter · 930d87c1
  Richard Levitte authored Jan 19, 2016
  930d87c1
- Validate ClientHello session_id field length and send alert on failure · 607e7730
  Alessandro Ghedini authored Jan 13, 2016
  607e7730
- Update license year range to 2016 · 0555901c
  Prayag Verma authored Jan 18, 2016
  0555901c
Jan 18, 2016
- Don't use "grep -q", "-q" is not POSIX, and fails on Solaris. · 7934ce27
  Kristian Amlie authored Jan 18, 2016
  7934ce27
Jan 17, 2016
- Empty SNI names are not valid · 4d6fe78f
  Viktor Dukhovni authored Jan 16, 2016
  4d6fe78f
Jan 15, 2016
- NGX-2040 - fix wildcard match on punycode/IDNA DNS names · 15debc12
  Zi Lin authored Jan 15, 2016
  15debc12
Jan 14, 2016
- To avoid possible time_t overflow use X509_time_adj_ex() · e254d12c
  Dr. Stephen Henson authored Jan 14, 2016
  e254d12c
Jan 13, 2016
- Root cause discovered and fixed, this fix became unnecessary · 8788fb97
  Mouse authored Jan 12, 2016
  8788fb97
- Changed help output · 6fa6a662
  Uri Blumenthal authored Jan 11, 2016
  6fa6a662
- Pass engine=NULL to EVP_PKEY_CTX_new(), unless "-engine_impl" was given · a2a29f70
  Mouse authored Jan 04, 2016
  a2a29f70
- Remove unnecessary debugging fprintf · 8259ccb4
  Mouse authored Jan 03, 2016
  8259ccb4
- Fixed crash (SIGSEGV) when freeing of ex_data stumbles upon a NULL-pointer. · ad81ca90
  Mouse authored Jan 01, 2016
  ad81ca90
- Fixed a bug preventing pkeyutl from accessing keys directly on the token via engine_pkcs11 · d65a8d0b
  Mouse authored Jan 01, 2016
  d65a8d0b
Jan 12, 2016
- Wrong definition of the macro SSL_set1_sigalgs in ssl.h · 75fdee04
  arijitnayak authored Dec 31, 2015
  75fdee04
Jan 10, 2016
- Change minimum DH size from 768 to 1024 · a4530ce0
  Kurt Roeckx authored Jan 10, 2016
  a4530ce0
- File is about s_time, not s_client · cb19c0d1
  Kurt Roeckx authored Jan 02, 2016
  cb19c0d1
Jan 02, 2016
- Fix X509_STORE_CTX_cleanup() · a3d74afc
  Viktor Dukhovni authored Jan 01, 2016
  a3d74afc
Dec 28, 2015
- RT4202: Update rt URL's. · 4d9c6fa0
  Rich Salz authored Dec 28, 2015
  4d9c6fa0
Dec 27, 2015
- Add some documentation for the OCSP callback functions · c52c3b5e
  Matt Caswell authored Nov 30, 2015
  c52c3b5e
- Ensure we don't call the OCSP callback if resuming a session · 0ac62399
  Matt Caswell authored Nov 30, 2015
  0ac62399
- Fix error when server does not send CertificateStatus message · 905943af
  Matt Caswell authored Nov 05, 2015
  905943af
Dec 23, 2015
- The functions take a SSL *, not a SSL_CTX * · 155a1623
  Daniel Kahn Gillmor authored Dec 23, 2015
  155a1623
Dec 22, 2015
- Fix memory leak in DSA redo case. · 1c7de36f
  David Benjamin authored Dec 17, 2015
  1c7de36f
Dec 20, 2015
- Don't check RSA_FLAG_SIGN_VER. · 6656ba71
  Dr. Stephen Henson authored Dec 20, 2015
  6656ba71
Dec 19, 2015
- BIO_s_datagram() ctrl doesn't support SEEK/TELL, so don't pretend it does · 17592f32
  Richard Levitte authored Nov 02, 2015
  17592f32
- Correct or add comments indicating what controls belong to what · 6d97060e
  Richard Levitte authored Nov 01, 2015
  6d97060e
- Document how BIO_get_conn_ip and BIO_get_conn_int_port actually work · 7eb51251
  Richard Levitte authored Nov 01, 2015
  7eb51251
- Have BIO_get_conn_int_port use BIO_ctrl instead BIO_int_ctrl · 2a60fccd
  Richard Levitte authored Nov 01, 2015
  2a60fccd
- Fix more URLs mangled by reformat · f6cadeee
  Matt Caswell authored Dec 19, 2015
  f6cadeee
- Fix URLs mangled by reformat · dd045d17
  Matt Caswell authored Dec 19, 2015
  dd045d17
Dec 18, 2015
- Remove the "eay" c-file-style indicators · 93a17f79
  Richard Levitte authored Dec 18, 2015
  93a17f79
Dec 16, 2015
- Provide better "make depend" warning. · ecadde4d
  Rich Salz authored Dec 10, 2015
  ecadde4d
Dec 14, 2015
- Fix a ** 0 mod 1 = 0 for real this time. · 44e4f5b0
  Emilia Kasper authored Dec 14, 2015
  44e4f5b0