Lutz Jänicke 7e7af0bc51 When the underlying BIO_write() fails to send a datagram, we leave the ...

offending record queued as 'pending'. The DTLS code doesn't expect this,
and we end up hitting an OPENSSL_assert() in do_dtls1_write().

The simple fix is just _not_ to leave it queued. In DTLS, dropping
packets is perfectly acceptable -- and even preferable. If we wanted a
service with retries and guaranteed delivery, we'd be using TCP.
PR: #1703
Submitted by: David Woodhouse <dwmw2@infradead.org>

2008-10-10 10:41:35 +00:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

bio_ssl.c

fix problems found by coverity: remove useless code

2006-03-15 17:45:43 +00:00

d1_both.c

Don't let DTLS ChangeCipherSpec increment handshake sequence number.

2007-10-17 21:15:48 +00:00

d1_clnt.c

Add client cert engine to SSL routines.

2008-06-01 22:33:24 +00:00

d1_enc.c

1. Changes for s_client.c to make it return non-zero exit code in case

2007-10-26 12:06:36 +00:00

d1_lib.c

Prohibit RC4 in DTLS.

2007-10-05 21:04:56 +00:00

d1_meth.c

Let the TLSv1_method() etc. functions return a const SSL_METHOD

2005-08-14 21:48:33 +00:00

d1_pkt.c

dtls1_write_bytes consumers expect amount of bytes written per call, not

2008-09-14 17:56:15 +00:00

d1_srvr.c

Fix SSL state transitions.

2008-09-14 14:02:07 +00:00

dtls1.h

DTLS didn't handle alerts correctly.

2008-09-13 18:24:38 +00:00

install.com

Synchronise more with the Unix build.

2005-05-31 20:28:41 +00:00

kssl_lcl.h

To avoid commit wars over dependencies, let's make it so things that

2001-10-10 07:55:02 +00:00

kssl.c

use user-supplied malloc functions for persistent kssl objects

2007-02-10 10:42:48 +00:00

kssl.h

Make kerberos ciphersuite code work with newer header files

2005-04-09 23:55:55 +00:00

Makefile

More type-checking.

2008-06-04 11:01:43 +00:00

s2_clnt.c

Change safestack reimplementation to match 0.9.8.

2007-09-07 13:25:15 +00:00

s2_enc.c

Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.

2007-06-04 17:04:40 +00:00

s2_lib.c

fix warnings/inconsistencies caused by the recent changes to the

2007-02-19 14:53:18 +00:00

s2_meth.c

Let the TLSv1_method() etc. functions return a const SSL_METHOD

2005-08-14 21:48:33 +00:00

s2_pkt.c

Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.

2007-06-04 17:04:40 +00:00

s2_srvr.c

Change safestack reimplementation to match 0.9.8.

2007-09-07 13:25:15 +00:00

s3_both.c

Fix signed/unsigned warning.

2008-08-05 17:48:02 +00:00

s3_clnt.c

Allow ENGINE client cert callback to specify a set of other certs, for

2008-06-01 22:45:08 +00:00

s3_enc.c

Fix warnings: computed value not use, incompatible pointer initialization

2007-09-07 13:03:25 +00:00

s3_lib.c

Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a new

2008-09-10 16:02:09 +00:00

s3_meth.c

Let the TLSv1_method() etc. functions return a const SSL_METHOD

2005-08-14 21:48:33 +00:00

s3_pkt.c

When the underlying BIO_write() fails to send a datagram, we leave the

2008-10-10 10:41:35 +00:00

s3_srvr.c

Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can't

2008-09-22 21:22:47 +00:00

s23_clnt.c

Make no-tlsext compile.

2008-09-03 12:29:57 +00:00

s23_lib.c

remove unused internal foo_base_method functions

2005-08-08 19:04:37 +00:00

s23_meth.c

recent changes from 0.9.8: fix cipher list order in s3_lib.c,

2006-01-15 17:35:28 +00:00

s23_pkt.c

Reorder inclusion of header files:

2002-07-10 07:01:54 +00:00

s23_srvr.c

Memory saving patch.

2008-06-03 02:48:34 +00:00

ssl2.h

Implement msg_callback for SSL 2.0.

2001-11-10 01:16:28 +00:00

ssl3.h

Support for certificate status TLS extension.

2007-09-26 21:56:59 +00:00

ssl23.h

Import of old SSLeay release: SSLeay 0.9.0b

1998-12-21 10:56:39 +00:00

ssl_algs.c

Add SEED encryption algorithm.

2007-04-23 23:48:59 +00:00

ssl_asn1.c

Some precautions to avoid potential security-relevant problems.

2008-09-14 13:42:34 +00:00

ssl_cert.c

Change safestack reimplementation to match 0.9.8.

2007-09-07 13:25:15 +00:00

ssl_ciph.c

Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a new

2008-09-10 16:02:09 +00:00

ssl_err2.c

Use new-style system-id macros everywhere possible. I hope I haven't

2001-02-20 08:13:47 +00:00

ssl_err.c

sanity check

2008-08-13 19:45:06 +00:00

ssl_lib.c

Fix error codes for memory-saving patch.

2008-08-04 22:10:38 +00:00

ssl_locl.h

update comment

2008-09-14 19:50:55 +00:00

ssl_rsa.c

Reword comment to be much shorter to stop other people from complaining

2008-05-26 06:21:13 +00:00

ssl_sess.c

Fix from stable branch.

2008-09-03 22:17:11 +00:00

ssl_stat.c

Update from stable branch.

2008-04-29 16:39:03 +00:00

ssl_task.c

Security fixes brought forward from 0.9.7.

2002-11-13 15:43:43 +00:00

ssl_txt.c

RFC4507 (including RFC4507bis) TLS stateless session resumption support

2007-08-11 23:18:29 +00:00

ssl-lib.com

Synchronise more with the Unix build.

2005-05-31 20:28:41 +00:00

ssl.h

Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a new

2008-09-10 16:02:09 +00:00

ssltest.c

Remove the dual-callback scheme for numeric and pointer thread IDs,

2008-08-06 15:54:15 +00:00

t1_clnt.c

Let the TLSv1_method() etc. functions return a const SSL_METHOD

2005-08-14 21:48:33 +00:00

t1_enc.c

Fix unsigned/signed warnings in ssl.

2008-01-05 21:35:34 +00:00

t1_lib.c

Fix from stable branch.

2008-09-03 22:17:11 +00:00

t1_meth.c

Let the TLSv1_method() etc. functions return a const SSL_METHOD

2005-08-14 21:48:33 +00:00

t1_srvr.c

Let the TLSv1_method() etc. functions return a const SSL_METHOD

2005-08-14 21:48:33 +00:00

tls1.h

Update from stable branch.

2008-04-30 16:14:02 +00:00