David Woodhouse 9fe4603b82 Check DTLS_BAD_VER for version number. ...

The version check for DTLS1_VERSION was redundant as
DTLS1_VERSION > TLS1_1_VERSION, however we do need to
check for DTLS1_BAD_VER for compatibility.

PR:2984
(cherry picked from commit d980abb22e22661e98e5cee33d760ab0c7584ecc)

2013-02-12 15:16:05 +00:00

..

.cvsignore

…

bio_ssl.c

OPENSSL_NO_SOCK fixes [from HEAD].

2012-04-16 17:43:15 +00:00

d1_both.c

PR: 2755

2012-03-06 13:47:27 +00:00

d1_clnt.c

PR: 2748

2012-03-06 13:24:16 +00:00

d1_enc.c

Update DTLS code to match CBC decoding in TLS.

2013-01-28 17:34:33 +00:00

d1_lib.c

correct error code

2012-04-18 14:53:48 +00:00

d1_meth.c

…

d1_pkt.c

ssl/[d1|s3]_pkt.c: harmomize orig_len handling.

2013-02-07 22:47:05 +01:00

d1_srtp.c

ssl/*: fix linking errors with no-srtp.

2013-02-09 19:52:07 +01:00

d1_srvr.c

PR: 2778(part)

2012-03-31 18:02:43 +00:00

dtls1.h

Reduce version skew.

2012-06-08 09:18:47 +00:00

install-ssl.com

Don't forget to install srtp.h as well

2012-05-10 15:01:22 +00:00

kssl_lcl.h

…

kssl.c

…

kssl.h

…

Makefile

make update

2013-02-04 21:29:41 +00:00

s2_clnt.c

Add and use a constant-time memcmp.

2013-01-28 17:30:38 +00:00

s2_enc.c

…

s2_lib.c

…

s2_meth.c

…

s2_pkt.c

Add and use a constant-time memcmp.

2013-01-28 17:30:38 +00:00

s2_srvr.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

s3_both.c

Add and use a constant-time memcmp.

2013-01-28 17:30:38 +00:00

s3_cbc.c

Check DTLS_BAD_VER for version number.

2013-02-12 15:16:05 +00:00

s3_clnt.c

ssl/s3_[clnt|srvr].c: fix warnings.

2013-02-09 19:50:34 +01:00

s3_enc.c

ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.

2013-02-01 15:34:09 +01:00

s3_lib.c

PR: 2806

2012-05-10 18:24:32 +00:00

s3_meth.c

…

s3_pkt.c

ssl/[d1|s3]_pkt.c: harmomize orig_len handling.

2013-02-07 22:47:05 +01:00

s3_srvr.c

ssl/s3_[clnt|srvr].c: fix warnings.

2013-02-09 19:50:34 +01:00

s23_clnt.c

s23_clnt.c: ensure interoperability by maitaining client "version capability"

2012-04-25 22:07:23 +00:00

s23_lib.c

…

s23_meth.c

…

s23_pkt.c

…

s23_srvr.c

…

srtp.h

…

ssl2.h

…

ssl3.h

ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.

2013-02-01 15:34:09 +01:00

ssl23.h

…

ssl_algs.c

e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.

2013-02-02 19:35:09 +01:00

ssl_asn1.c

…

ssl_cert.c

don't use pseudo digests for default values of keys

2012-06-27 14:11:40 +00:00

ssl_ciph.c

add "missing" TLSv1.2 cipher alias

2012-11-15 19:15:20 +00:00

ssl_err2.c

…

ssl_err.c

Fix error codes.

2013-02-04 21:13:18 +00:00

ssl_lib.c

Fix for SSL_get_certificate

2013-02-11 18:24:03 +00:00

ssl_locl.h

ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.

2013-02-01 15:34:09 +01:00

ssl_rsa.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

ssl_sess.c

New ctrl values to clear or retrieve extra chain certs from an SSL_CTX.

2011-12-22 15:01:16 +00:00

ssl_stat.c

…

ssl_task.c

…

ssl_txt.c

…

ssl-lib.com

PR: 2652

2012-01-05 14:30:08 +00:00

ssl.h

Fix error codes.

2013-02-04 21:13:18 +00:00

ssltest.c

Fix in ssltest is no-ssl2 configured

2013-02-11 18:17:50 +00:00

t1_clnt.c

…

t1_enc.c

ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.

2013-02-01 15:34:09 +01:00

t1_lib.c

ssl/*: fix linking errors with no-srtp.

2013-02-09 19:52:07 +01:00

t1_meth.c

…

t1_reneg.c

…

t1_srvr.c

…

tls1.h

Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>

2012-03-09 18:37:41 +00:00

tls_srp.c

Reduce version skew.

2012-06-08 09:18:47 +00:00