Commits · dfa2762bba9c372a488ec4bcb17e69ce45974768 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Dec 03, 2014
- Only use the fallback mtu after 2 unsuccessful retransmissions if it is less · dfa2762b
  Matt Caswell authored Dec 02, 2014
  dfa2762b
- Updates to s_client and s_server to remove the constant 28 (for IPv4 header · c0b90b32
  Matt Caswell authored Dec 01, 2014
  c0b90b32
- If we really get a situation where the underlying mtu is less than the minimum · 788a5bad
  Matt Caswell authored Dec 02, 2014
  788a5bad
- Fix dtls_query_mtu so that it will always either complete with an mtu that is · 1872083c
  Matt Caswell authored Dec 01, 2014
  1872083c
- Remove instances in libssl of the constant 28 (for size of IPv4 header + UDP) · 05e769f2
  Matt Caswell authored Dec 01, 2014
  05e769f2
- There are a number of instances throughout the code where the constant 28 is · ccecdb13
  Matt Caswell authored Dec 01, 2014
  ccecdb13
- The first call to query the mtu in dtls1_do_write correctly checks that the · 80d09058
  Matt Caswell authored Dec 01, 2014
  80d09058
- The SSL_OP_NO_QUERY_MTU option is supposed to stop the mtu from being · 3cc0c0d2
  Matt Caswell authored Dec 01, 2014
  3cc0c0d2
- Verify that we have a sensible message len and fail if not · 5e47008b
  Matt Caswell authored Dec 01, 2014
  5e47008b
Dec 02, 2014
- Use the SSLv23 method by default · e9f47de1
  Kurt Roeckx authored Nov 29, 2014
  e9f47de1
Nov 28, 2014
- Check for FindNextFile when defining it rather than FindFirstFile · 6a7a4a4e
  Richard Levitte authored Nov 28, 2014
  6a7a4a4e
- [PR3597] Advance to the next state variant when reusing messages. · 67a0ea70
  Richard Levitte authored Nov 28, 2014
  67a0ea70
- Correct some layout issues, convert all remaining tabs to appropriate amounts of spaces. · 89e1e5c8
  Richard Levitte authored Nov 28, 2014
  89e1e5c8
- Improves the proxy certificates howto doc. · 7cae6eee
  Alok Menghrajani authored Nov 14, 2014
  7cae6eee
Nov 27, 2014
- Fix warning in ssl2_enc · 4b12a17f
  Matt Caswell authored Nov 27, 2014
  4b12a17f
- Remove more references to dtls1_enc · 2e524475
  Matt Caswell authored Nov 27, 2014
  2e524475
- Check EVP_Cipher return values for SSL2 · ac3dc3ee
  Matt Caswell authored Nov 18, 2014
  ac3dc3ee
- Delete unused file · 63039a17
  Matt Caswell authored Nov 18, 2014
  63039a17
- Add checks to the return value of EVP_Cipher to prevent silent encryption failure. · ca88bd41
  Matt Caswell authored Nov 18, 2014
  ca88bd41
- Remove redundant checks in ssl_cert_dup. This was causing spurious error messages when using GOST · 1e7b4891
  Matt Caswell authored Nov 27, 2014
  1e7b4891
- Remove duplicated code · 3623e24b
  Matt Caswell authored Nov 17, 2014
  3623e24b
- Tidy up ocsp help output · e1645826
  Matt Caswell authored Nov 27, 2014
  e1645826
- Add documentation on -timeout option in the ocsp utility · 4d3df37b
  André Guerreiro authored Nov 27, 2014
  4d3df37b
- NetWare compilation fix. · 261e64b8
  Guenter authored Nov 27, 2014
  261e64b8
- Updates to X509_NAME_get_index_by_NID.pod submitted by user Bernardh via the wiki · 23cf8844
  Matt Caswell authored Sep 12, 2014
  23cf8844
- Updates to X509_NAME_add_entry_by_txt.pod submitted by user Bernardh via the wiki · bd819260
  Matt Caswell authored Sep 06, 2014
  bd819260
- Updates to EVP_PKEY_encrypt.pod submitted by user Bernardh via the wiki · 8f8e7cec
  Matt Caswell authored Sep 06, 2014
  8f8e7cec
- Add include of ssl.h which is required by srtp.h · 14332e43
  Matt Caswell authored Nov 27, 2014
  14332e43
Nov 26, 2014
- Fixed memory leak due to incorrect freeing of DTLS reassembly bit mask · 60de554e
  Matt Caswell authored Nov 25, 2014
  60de554e
Nov 25, 2014
- Corrected comments in ssl.h about SSLv23_method and friends · c57400e8
  Matt Caswell authored Nov 25, 2014
  c57400e8
Nov 20, 2014
- Print out Suite B status. · f90fd2b0
  Dr. Stephen Henson authored Nov 20, 2014
  f90fd2b0
- Fix SuiteB chain checking logic. · 8d325d1d
  Dr. Stephen Henson authored Nov 20, 2014
  8d325d1d
- Do not resume a session if the negotiated protocol version does not match · 03d14f58
  David Benjamin authored Nov 20, 2014
  03d14f58
- When using EVP_PKEY_derive with a KDF set, a negative error from · 6f71d7da
  Matt Caswell authored Nov 19, 2014
  6f71d7da
- Clean up CHANGES · 0b9e8276
  Emilia Kasper authored Nov 20, 2014
  0b9e8276
- Ensure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is reset · e5f261df
  Emilia Kasper authored Nov 19, 2014
  e5f261df
- Always require an advertised NewSessionTicket message. · 9baee021
  Emilia Kasper authored Nov 19, 2014
  9baee021
- Remove ssl3_check_finished. · 5d23e130
  Emilia Kasper authored Nov 19, 2014
  5d23e130
- Set s->hit when resuming from external pre-shared secret. · f7c7aa69
  Emilia Kasper authored Nov 19, 2014
  f7c7aa69
- Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext. · ce5f32cf
  Emilia Kasper authored Nov 19, 2014
  ce5f32cf