1. 1b08bd9 Fix WSAStartup return value check. by Peter Vaskovic · 11 years ago
  2. 02388c9 Fix minor format string inconsistency. by Peter Vaskovic · 11 years ago
  3. 75ee010 Stricter check on SSL ClientHello internal sizes compared to actual packet size by Paul Bakker · 11 years ago
  4. 55bdbc1 Make compilation on DragonFly work by Markus Pfeiffer · 11 years ago
  5. 358d325 Fix bug with mpi_fill_random() on big-endian by Paul Bakker · 11 years ago
  6. 95a11f8 On OpenBSD, use arc4random_buf() instead of rand() to prevent warnings by Paul Bakker · 11 years ago
  7. ccebf6e Sanity length checks in ssl_read_record() and ssl_fetch_input() by Paul Bakker · 11 years ago
  8. b0af563 rsa_check_pubkey() now allows an E up to N by Paul Bakker · 11 years ago
  9. 838ed3c Improve interop by not writing ext_len in ClientHello when 0 by Paul Bakker · 11 years ago
  10. 676093e Check setsockopt() return value in net_bind() by Paul Bakker · 11 years ago
  11. 7890e62 Added missing MPI_CHK around mpi functions by Paul Bakker · 11 years ago
  12. 243d618 Reject certificates with times not in UTC by Paul Bakker · 11 years ago
  13. f48de95 Use UTC to heck certificate validity by Paul Bakker · 11 years ago
  14. dedce0c Prevent potential NULL pointer dereference in ssl_read_record() by Paul Bakker · 11 years ago
  15. 6995efe Potential memory leak in mpi_exp_mod() when error occurs during by Paul Bakker · 11 years ago
  16. 358a841 x509_get_current_time() uses localtime_r() to prevent thread issues by Paul Bakker · 11 years ago
  17. 24aaf44 Make sure no random pointer occur during failed malloc()'s by Paul Bakker · 11 years ago
  18. c2262b5 Tune debug_print_ret format by Manuel Pégourié-Gonnard · 11 years ago
  19. ef3cf70 Provide no info from entropy_func() on future entropy by Paul Bakker · 11 years ago
  20. 1e94237 Support for seed file writing and reading in Entropy by Paul Bakker · 11 years ago
  21. 22a0ce0 Fix warning on MinGW and MSVC12 by Paul Bakker · 11 years ago
  22. 8cb7320 MinGW32 static build should link to windows libs and libz by Paul Bakker · 11 years ago
  23. b000f82 ssl_init() left a dirty in_ctr pointer on failed allocation of out_ctr by Paul Bakker · 11 years ago
  24. a9f86e0 Make the compiler work-around more specific by Manuel Pégourié-Gonnard · 11 years ago
  25. 57291a7 Work around a compiler bug on OS X. by Manuel Pégourié-Gonnard · 11 years ago
  26. 97a11c1 CMake: allow to build both shared and static at once by hasufell · 11 years ago
  27. be04673 Forbid sequence number wrapping by Manuel Pégourié-Gonnard · 11 years ago
  28. 50a5c53 Reject certs and CRLs from the future by Paul Bakker · 11 years ago
  29. 0d844dd Add x509parse_time_future() by Paul Bakker · 11 years ago
  30. 963918b Countermeasure against "triple handshake" attack by Manuel Pégourié-Gonnard · 11 years ago
  31. 397858b Avoid "unreachable code" warning by Manuel Pégourié-Gonnard · 11 years ago
  32. 6d841c2 Fix verion-major intolerance by Manuel Pégourié-Gonnard · 11 years ago
  33. c675e4b Fix bug in RSA PKCS#1 v1.5 "reversed" operations by Manuel Pégourié-Gonnard · 12 years ago
  34. 1e7c3d2 net_is_block() renamed to net_would_block() and corrected behaviour on by Paul Bakker · 11 years ago
  35. 1dc45f1 Added MPI_CHK around unguarded mpi calls by Paul Bakker · 12 years ago
  36. 7837026 Remove a few dead stores by Paul Bakker · 11 years ago
  37. d220f8b Fix potential memory leak in bignum selftest by Manuel Pégourié-Gonnard · 12 years ago
  38. 7fd620b Fix misplaced initialisation. by Manuel Pégourié-Gonnard · 12 years ago
  39. b55f578 Fix missing error checking in gcm by Manuel Pégourié-Gonnard · 12 years ago
  40. 4091141 Add a length check in ssl_derive_keys() by Paul Bakker · 11 years ago
  41. d83584e Fixed potential overflow in certificate size in ssl_write_certificate() by Paul Bakker · 12 years ago
  42. 78e8196 Added missing MPI_CHK() around some statements by Paul Bakker · 12 years ago
  43. 40cc914 Fixed x509_crt_parse_path() bug on Windows platforms by Paul Bakker · 11 years ago
  44. 9975c5d Check PKCS 1.5 padding in a more constant-time way by Manuel Pégourié-Gonnard · 12 years ago
  45. d237d26 Check OAEP padding in a more constant-time way by Manuel Pégourié-Gonnard · 12 years ago
  46. 3411464 RSA-OAEP decrypt: reorganise code by Manuel Pégourié-Gonnard · 12 years ago
  47. a1caf6e SSL now gracefully handles missing RNG by Paul Bakker · 12 years ago
  48. c941adb Fixed X.509 hostname comparison (with non-regular characters) by Paul Bakker · 11 years ago
  49. 8354819 Makefile now produces a .so.X with SOVERSION in it by Paul Bakker · 12 years ago
  50. 5c8434c Safer buffer comparisons in the SSL modules by Manuel Pégourié-Gonnard · 12 years ago
  51. c3ec63d Minor change that makes life easier for static analyzers / compilers by Paul Bakker · 12 years ago
  52. e46b177 Make get_pkcs_padding() constant-time by Paul Bakker · 11 years ago
  53. 52cb87b Forced cast to prevent MSVC compiler warning by Paul Bakker · 11 years ago
  54. 4c9301a Convert SOCKET to int to prevent compiler warnings under MSVC. by Paul Bakker · 12 years ago
  55. 9ccb211 Introduced POLARSSL_HAVE_READDIR_R for systems without it by Paul Bakker · 11 years ago
  56. ff6e247 RSA blinding: check highly unlikely cases by Paul Bakker · 11 years ago
  57. 6b06502 Changed RSA blinding to a slower but thread-safe version by Paul Bakker · 12 years ago polarssl-1.2.10
  58. adace27 Prepped for 1.2.10 release by Paul Bakker · 12 years ago
  59. 2f1481e Additional fixed to rsa.c with regards to blinding by Paul Bakker · 12 years ago
  60. 62087ee Fixed memory leak in rsa.c introduced in 43f9799 by Paul Bakker · 12 years ago
  61. e45574e Prepped for 1.2.9 release by Paul Bakker · 12 years ago
  62. 915ee19 Do not allow SHA256/SHA384 ciphersuites in < TLS 1.2 by Paul Bakker · 12 years ago
  63. 43f9799 RSA blinding on CRT operations to counter timing attacks by Paul Bakker · 12 years ago
  64. 88a2264 Fixed potential file descriptor leaks by Paul Bakker · 12 years ago
  65. f65fbee x509_verify() now case insensitive for cn (RFC 6125 6.4) by Paul Bakker · 12 years ago
  66. a565ace Fixed potential memory leak when failing to resume a session by Paul Bakker · 12 years ago
  67. a13d744 Fixed potential heap buffer overflow on large hostname setting by Paul Bakker · 12 years ago
  68. fe7c24c Fixed potential negative value misinterpretation in load_file() by Paul Bakker · 12 years ago
  69. 433fad2 Removed errant printf in x509parse_self_test() by Paul Bakker · 12 years ago
  70. 21360ca ssl_write_certificate_request() can handle empty ca_chain by Paul Bakker · 12 years ago polarssl-1.2.8
  71. 1d41950 Prepared for PolarSSL release 1.2.8 by Paul Bakker · 12 years ago
  72. da7fdbd Fixed minor comment typo by Paul Bakker · 12 years ago
  73. 14a222c Moved PKCS#12 PBE functions to cipher / md layer where possible by Paul Bakker · 12 years ago
  74. 2be71fa Fixed values for 2-key Triple DES in cipher layer by Paul Bakker · 12 years ago
  75. b495d3a x509parse_crt() and x509parse_crt_der() return X509 password related codes by Paul Bakker · 12 years ago
  76. 1fc7dfe Removed redundant free()s by Paul Bakker · 12 years ago
  77. ff3a4b0 Added missing free() by Paul Bakker · 12 years ago
  78. 1fd4321 PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates by Paul Bakker · 12 years ago
  79. 19bd297 PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated by Paul Bakker · 12 years ago
  80. 52b845b Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler by Paul Bakker · 12 years ago
  81. 67812d3 Fixed location of brackets in pkcs12.c by Paul Bakker · 12 years ago
  82. cbfcaa9 x509parse_crtpath() is now reentrant and uses more portable stat() by Paul Bakker · 12 years ago
  83. d6d4109 Changed x509parse_crt_der() to support adding to chain. by Paul Bakker · 12 years ago
  84. 4087c47 Added mechanism to provide alternative cipher / hash implementations by Paul Bakker · 12 years ago
  85. cf6e95d Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis by Paul Bakker · 12 years ago
  86. 65a1909 Internally split up x509parse_key() by Paul Bakker · 12 years ago
  87. 1922a4e ssl_parse_certificate() now calls x509parse_crt_der() directly by Paul Bakker · 12 years ago
  88. 6417186 x509parse_crt() now better handles PEM error situations by Paul Bakker · 12 years ago
  89. 9255e83 pem_read_buffer() already update use_len after header and footer are read by Paul Bakker · 12 years ago
  90. eae09db Fixed const correctness issues that have no impact on the ABI by Paul Bakker · 12 years ago
  91. f922630 Fixed offset for cert_type list in ssl_parse_certificate_request() by Paul Bakker · 12 years ago
  92. 7c3c389 Secure renegotiation extension should only be sent in case client supports secure renegotiation by Paul Bakker · 12 years ago
  93. 822e958 Prepared for PolarSSL 1.2.7 release by Paul Bakker · 12 years ago polarssl-1.2.7
  94. f42e5cc Cleanup of the GCM code by Paul Bakker · 12 years ago
  95. 8a4ec44 Blowfish has default of 128-bit keysize in cipher layer by Paul Bakker · 12 years ago
  96. a627298 Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
  97. 90f042d Prepared for PolarSSL 1.2.6 release by Paul Bakker · 12 years ago polarssl-1.2.6
  98. e81beda The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) by Paul Bakker · 12 years ago
  99. 78a8c71 Re-added support for parsing and handling SSLv2 Client Hello messages by Paul Bakker · 12 years ago
  100. 37286a5 Fixed net_bind() for specified IP addresses on little endian systems by Paul Bakker · 12 years ago