1. f48de95 Use UTC to heck certificate validity by Paul Bakker · 11 years ago
  2. dedce0c Prevent potential NULL pointer dereference in ssl_read_record() by Paul Bakker · 11 years ago
  3. 6995efe Potential memory leak in mpi_exp_mod() when error occurs during by Paul Bakker · 11 years ago
  4. 358a841 x509_get_current_time() uses localtime_r() to prevent thread issues by Paul Bakker · 11 years ago
  5. 24aaf44 Make sure no random pointer occur during failed malloc()'s by Paul Bakker · 11 years ago
  6. c2262b5 Tune debug_print_ret format by Manuel Pégourié-Gonnard · 11 years ago
  7. ef3cf70 Provide no info from entropy_func() on future entropy by Paul Bakker · 11 years ago
  8. 1e94237 Support for seed file writing and reading in Entropy by Paul Bakker · 11 years ago
  9. 22a0ce0 Fix warning on MinGW and MSVC12 by Paul Bakker · 11 years ago
  10. 8cb7320 MinGW32 static build should link to windows libs and libz by Paul Bakker · 11 years ago
  11. b000f82 ssl_init() left a dirty in_ctr pointer on failed allocation of out_ctr by Paul Bakker · 11 years ago
  12. a9f86e0 Make the compiler work-around more specific by Manuel Pégourié-Gonnard · 11 years ago
  13. 57291a7 Work around a compiler bug on OS X. by Manuel Pégourié-Gonnard · 11 years ago
  14. 97a11c1 CMake: allow to build both shared and static at once by hasufell · 11 years ago
  15. be04673 Forbid sequence number wrapping by Manuel Pégourié-Gonnard · 11 years ago
  16. 50a5c53 Reject certs and CRLs from the future by Paul Bakker · 11 years ago
  17. 0d844dd Add x509parse_time_future() by Paul Bakker · 11 years ago
  18. 963918b Countermeasure against "triple handshake" attack by Manuel Pégourié-Gonnard · 11 years ago
  19. 397858b Avoid "unreachable code" warning by Manuel Pégourié-Gonnard · 11 years ago
  20. 6d841c2 Fix verion-major intolerance by Manuel Pégourié-Gonnard · 11 years ago
  21. c675e4b Fix bug in RSA PKCS#1 v1.5 "reversed" operations by Manuel Pégourié-Gonnard · 12 years ago
  22. 1e7c3d2 net_is_block() renamed to net_would_block() and corrected behaviour on by Paul Bakker · 11 years ago
  23. 1dc45f1 Added MPI_CHK around unguarded mpi calls by Paul Bakker · 12 years ago
  24. 7837026 Remove a few dead stores by Paul Bakker · 11 years ago
  25. d220f8b Fix potential memory leak in bignum selftest by Manuel Pégourié-Gonnard · 12 years ago
  26. 7fd620b Fix misplaced initialisation. by Manuel Pégourié-Gonnard · 12 years ago
  27. b55f578 Fix missing error checking in gcm by Manuel Pégourié-Gonnard · 12 years ago
  28. 4091141 Add a length check in ssl_derive_keys() by Paul Bakker · 11 years ago
  29. d83584e Fixed potential overflow in certificate size in ssl_write_certificate() by Paul Bakker · 12 years ago
  30. 78e8196 Added missing MPI_CHK() around some statements by Paul Bakker · 12 years ago
  31. 40cc914 Fixed x509_crt_parse_path() bug on Windows platforms by Paul Bakker · 11 years ago
  32. 9975c5d Check PKCS 1.5 padding in a more constant-time way by Manuel Pégourié-Gonnard · 12 years ago
  33. d237d26 Check OAEP padding in a more constant-time way by Manuel Pégourié-Gonnard · 12 years ago
  34. 3411464 RSA-OAEP decrypt: reorganise code by Manuel Pégourié-Gonnard · 12 years ago
  35. a1caf6e SSL now gracefully handles missing RNG by Paul Bakker · 12 years ago
  36. c941adb Fixed X.509 hostname comparison (with non-regular characters) by Paul Bakker · 11 years ago
  37. 8354819 Makefile now produces a .so.X with SOVERSION in it by Paul Bakker · 12 years ago
  38. 5c8434c Safer buffer comparisons in the SSL modules by Manuel Pégourié-Gonnard · 12 years ago
  39. c3ec63d Minor change that makes life easier for static analyzers / compilers by Paul Bakker · 12 years ago
  40. e46b177 Make get_pkcs_padding() constant-time by Paul Bakker · 11 years ago
  41. 52cb87b Forced cast to prevent MSVC compiler warning by Paul Bakker · 11 years ago
  42. 4c9301a Convert SOCKET to int to prevent compiler warnings under MSVC. by Paul Bakker · 12 years ago
  43. 9ccb211 Introduced POLARSSL_HAVE_READDIR_R for systems without it by Paul Bakker · 11 years ago
  44. ff6e247 RSA blinding: check highly unlikely cases by Paul Bakker · 11 years ago
  45. 6b06502 Changed RSA blinding to a slower but thread-safe version by Paul Bakker · 12 years ago polarssl-1.2.10
  46. adace27 Prepped for 1.2.10 release by Paul Bakker · 12 years ago
  47. 2f1481e Additional fixed to rsa.c with regards to blinding by Paul Bakker · 12 years ago
  48. 62087ee Fixed memory leak in rsa.c introduced in 43f9799 by Paul Bakker · 12 years ago
  49. e45574e Prepped for 1.2.9 release by Paul Bakker · 12 years ago
  50. 915ee19 Do not allow SHA256/SHA384 ciphersuites in < TLS 1.2 by Paul Bakker · 12 years ago
  51. 43f9799 RSA blinding on CRT operations to counter timing attacks by Paul Bakker · 12 years ago
  52. 88a2264 Fixed potential file descriptor leaks by Paul Bakker · 12 years ago
  53. f65fbee x509_verify() now case insensitive for cn (RFC 6125 6.4) by Paul Bakker · 12 years ago
  54. a565ace Fixed potential memory leak when failing to resume a session by Paul Bakker · 12 years ago
  55. a13d744 Fixed potential heap buffer overflow on large hostname setting by Paul Bakker · 12 years ago
  56. fe7c24c Fixed potential negative value misinterpretation in load_file() by Paul Bakker · 12 years ago
  57. 433fad2 Removed errant printf in x509parse_self_test() by Paul Bakker · 12 years ago
  58. 21360ca ssl_write_certificate_request() can handle empty ca_chain by Paul Bakker · 12 years ago polarssl-1.2.8
  59. 1d41950 Prepared for PolarSSL release 1.2.8 by Paul Bakker · 12 years ago
  60. da7fdbd Fixed minor comment typo by Paul Bakker · 12 years ago
  61. 14a222c Moved PKCS#12 PBE functions to cipher / md layer where possible by Paul Bakker · 12 years ago
  62. 2be71fa Fixed values for 2-key Triple DES in cipher layer by Paul Bakker · 12 years ago
  63. b495d3a x509parse_crt() and x509parse_crt_der() return X509 password related codes by Paul Bakker · 12 years ago
  64. 1fc7dfe Removed redundant free()s by Paul Bakker · 12 years ago
  65. ff3a4b0 Added missing free() by Paul Bakker · 12 years ago
  66. 1fd4321 PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates by Paul Bakker · 12 years ago
  67. 19bd297 PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated by Paul Bakker · 12 years ago
  68. 52b845b Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler by Paul Bakker · 12 years ago
  69. 67812d3 Fixed location of brackets in pkcs12.c by Paul Bakker · 12 years ago
  70. cbfcaa9 x509parse_crtpath() is now reentrant and uses more portable stat() by Paul Bakker · 12 years ago
  71. d6d4109 Changed x509parse_crt_der() to support adding to chain. by Paul Bakker · 12 years ago
  72. 4087c47 Added mechanism to provide alternative cipher / hash implementations by Paul Bakker · 12 years ago
  73. cf6e95d Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis by Paul Bakker · 12 years ago
  74. 65a1909 Internally split up x509parse_key() by Paul Bakker · 12 years ago
  75. 1922a4e ssl_parse_certificate() now calls x509parse_crt_der() directly by Paul Bakker · 12 years ago
  76. 6417186 x509parse_crt() now better handles PEM error situations by Paul Bakker · 12 years ago
  77. 9255e83 pem_read_buffer() already update use_len after header and footer are read by Paul Bakker · 12 years ago
  78. eae09db Fixed const correctness issues that have no impact on the ABI by Paul Bakker · 12 years ago
  79. f922630 Fixed offset for cert_type list in ssl_parse_certificate_request() by Paul Bakker · 12 years ago
  80. 7c3c389 Secure renegotiation extension should only be sent in case client supports secure renegotiation by Paul Bakker · 12 years ago
  81. 822e958 Prepared for PolarSSL 1.2.7 release by Paul Bakker · 12 years ago polarssl-1.2.7
  82. f42e5cc Cleanup of the GCM code by Paul Bakker · 12 years ago
  83. 8a4ec44 Blowfish has default of 128-bit keysize in cipher layer by Paul Bakker · 12 years ago
  84. a627298 Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
  85. 90f042d Prepared for PolarSSL 1.2.6 release by Paul Bakker · 12 years ago polarssl-1.2.6
  86. e81beda The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) by Paul Bakker · 12 years ago
  87. 78a8c71 Re-added support for parsing and handling SSLv2 Client Hello messages by Paul Bakker · 12 years ago
  88. 37286a5 Fixed net_bind() for specified IP addresses on little endian systems by Paul Bakker · 12 years ago
  89. 926c8e4 Fixed possible NULL pointer exception in ssl_get_ciphersuite() by Paul Bakker · 12 years ago
  90. 8804f69 Removed timing differences due to bad padding from RSA decrypt for by Paul Bakker · 12 years ago
  91. a43231c Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt() by Paul Bakker · 12 years ago
  92. b386913 Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions by Paul Bakker · 12 years ago
  93. 8ddb645 Added conversion to int for a t_uint value to prevent compiler warnings by Paul Bakker · 12 years ago
  94. 3d2dc0f Corrected GCM counter incrementation to use only 32-bits instead of 128-bits by Paul Bakker · 12 years ago
  95. e47b34b Removed further timing differences during SSL message decryption in ssl_decrypt_buf() by Paul Bakker · 12 years ago
  96. 2ca8ad1 Made x509parse.c also work with missing hash header files by Paul Bakker · 12 years ago
  97. 86f04f4 Fixed comment by Paul Bakker · 12 years ago
  98. c046350 Fixed memory leak in ssl_free() and ssl_reset() for active session by Paul Bakker · 12 years ago
  99. c7a2da4 Updated for PolarSSL 1.2.5 by Paul Bakker · 13 years ago polarssl-1.2.5
  100. 40865c8 Added sending of alert messages in case of decryption failures as per RFC by Paul Bakker · 13 years ago