Lutz Jänicke 4db3e88459 Firstly, the bitmap we use for replay protection was ending up with zero ...

length, so a _single_ pair of packets getting switched around would
cause one of them to be 'dropped'.

Secondly, it wasn't even _dropping_ the offending packets, in the
non-blocking case. It was just returning garbage instead.
PR: #1752
Submitted by: David Woodhouse <dwmw2@infradead.org>

2008-10-13 06:43:06 +00:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

bio_ssl.c

Fix various incorrect error function codes.

2005-04-26 18:53:22 +00:00

d1_both.c

Don't let DTLS ChangeCipherSpec increment handshake sequence number. From

2007-10-17 21:17:49 +00:00

d1_clnt.c

Backport more ENGINE SSL client auth code to 0.9.8.

2008-06-04 18:35:27 +00:00

d1_enc.c

backport recent changes from the cvs head

2006-02-08 19:16:33 +00:00

d1_lib.c

Firstly, the bitmap we use for replay protection was ending up with zero

2008-10-13 06:43:06 +00:00

d1_meth.c

Initialize SSL_METHOD structures at compile time. This removes the need

2005-08-05 23:52:08 +00:00

d1_pkt.c

Firstly, the bitmap we use for replay protection was ending up with zero

2008-10-13 06:43:06 +00:00

d1_srvr.c

Fix SSL state transitions.

2008-09-14 14:02:01 +00:00

dtls1.h

DTLS didn't handle alerts correctly [from HEAD].

2008-09-13 18:25:36 +00:00

install.com

Synchronise more with the Unix build

2005-05-31 20:28:55 +00:00

kssl_lcl.h

To avoid commit wars over dependencies, let's make it so things that

2001-10-10 07:55:02 +00:00

kssl.c

Avoid "initializer not constant" errors when compiling in pedantic mode.

2008-04-02 11:15:05 +00:00

kssl.h

Make kerberos ciphersuite code work with newer header files

2005-04-09 23:55:55 +00:00

Makefile

Make update: delete duplicate error code.

2008-09-17 17:11:09 +00:00

s2_clnt.c

gcc 4.2 fixes to avoid use or function pointer casts in OpenSSL.

2007-09-06 12:43:54 +00:00

s2_enc.c

ensure that the EVP_CIPHER_CTX object is initialized

2007-02-16 20:40:07 +00:00

s2_lib.c

Update from HEAD.

2007-01-21 16:07:25 +00:00

s2_meth.c

Initialize SSL_METHOD structures at compile time. This removes the need

2005-08-05 23:52:08 +00:00

s2_pkt.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:10:30 +00:00

s2_srvr.c

gcc 4.2 fixes to avoid use or function pointer casts in OpenSSL.

2007-09-06 12:43:54 +00:00

s3_both.c

Add DTLS support.

2005-04-26 16:02:40 +00:00

s3_clnt.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

s3_enc.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

s3_lib.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

s3_meth.c

Initialize SSL_METHOD structures at compile time. This removes the need

2005-08-05 23:52:08 +00:00

s3_pkt.c

When the underlying BIO_write() fails to send a datagram, we leave the

2008-10-10 10:41:32 +00:00

s3_srvr.c

Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can't

2008-09-22 21:22:51 +00:00

s23_clnt.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

s23_lib.c

Initialize SSL_METHOD structures at compile time. This removes the need

2005-08-05 23:52:08 +00:00

s23_meth.c

make "./configure no-ssl2" work again

2006-01-15 16:57:01 +00:00

s23_pkt.c

Reorder inclusion of header files:

2002-07-10 07:01:54 +00:00

s23_srvr.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

ssl2.h

Implement msg_callback for SSL 2.0.

2001-11-10 01:16:28 +00:00

ssl3.h

Backport certificate status request TLS extension support to 0.9.8.

2007-10-12 00:00:36 +00:00

ssl23.h

Import of old SSLeay release: SSLeay 0.9.0b

1998-12-21 10:56:39 +00:00

ssl_algs.c

Add SEED encryption algorithm.

2007-04-23 23:50:26 +00:00

ssl_asn1.c

Some precautions to avoid potential security-relevant problems.

2008-09-14 13:42:40 +00:00

ssl_cert.c

gcc 4.2 fixes to avoid use or function pointer casts in OpenSSL.

2007-09-06 12:43:54 +00:00

ssl_ciph.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

ssl_err2.c

Use new-style system-id macros everywhere possible. I hope I haven't

2001-02-20 08:13:47 +00:00

ssl_err.c

sanity check

2008-08-13 19:44:44 +00:00

ssl_lib.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

ssl_locl.h

update comment

2008-09-14 19:50:53 +00:00

ssl_rsa.c

Reword comment to be much shorter to stop other people from complaining

2008-05-26 06:21:10 +00:00

ssl_sess.c

Backport more ENGINE SSL client auth code to 0.9.8.

2008-06-04 18:35:27 +00:00

ssl_stat.c

Status strings for ticket states.

2008-04-29 16:38:26 +00:00

ssl_task.c

Security fixes brought forward from 0.9.7.

2002-11-13 15:43:43 +00:00

ssl_txt.c

Backport of TLS extension code to OpenSSL 0.9.8.

2007-08-12 18:59:03 +00:00

ssl-lib.com

Synchronise more with the Unix build

2005-05-31 20:28:55 +00:00

ssl.h

sanity check

2008-08-13 19:44:44 +00:00

ssltest.c

Make ssl code consistent with FIPS branch. The new code has no effect

2008-06-16 16:56:43 +00:00

t1_clnt.c

Initialize SSL_METHOD structures at compile time. This removes the need

2005-08-05 23:52:08 +00:00

t1_enc.c

DTLS didn't handle alerts correctly [from HEAD].

2008-09-13 18:25:36 +00:00

t1_lib.c

If tickets disabled behave as if no ticket received to support

2008-09-03 22:13:04 +00:00

t1_meth.c

Initialize SSL_METHOD structures at compile time. This removes the need

2005-08-05 23:52:08 +00:00

t1_srvr.c

Initialize SSL_METHOD structures at compile time. This removes the need

2005-08-05 23:52:08 +00:00

tls1.h

TLS ticket key setting callback: this allows and application to set

2008-04-30 16:11:33 +00:00