1. 158fc33 Merge remote-tracking branch 'upstream-public/pr/1296' into HEAD by Gilles Peskine · 7 years ago
  2. 3f9cff2 Merge branch 'prr_424' into mbedtls-2.7-proposed by Gilles Peskine · 7 years ago
  3. 784de59 Merge remote-tracking branch 'upstream-restricted/pr/410' into development-restricted by Jaeden Amero · 8 years ago
  4. 66954e1 Merge branch 'development' into development-restricted by Jaeden Amero · 8 years ago
  5. 5e9f14d Set correct minimal versions in default conf by Ron Eldor · 8 years ago
  6. 9e4f77c New MD API: rename functions from _ext to _ret by Gilles Peskine · 8 years ago
  7. d91f2a2 Merge branch 'development' into iotssl-1251-2.7 by Gilles Peskine · 8 years ago
  8. 82d607e Merge remote-tracking branch 'upstream-restricted/pr/433' into development-restricted by Gilles Peskine · 8 years ago
  9. d04c623 Merge remote-tracking branch 'restricted/pr/403' into development-restricted by Manuel Pégourié-Gonnard · 8 years ago
  10. b053efb Fix magic constant in previous commit by Manuel Pégourié-Gonnard · 8 years ago
  11. 464147c Fix SSLv3 MAC computation by Manuel Pégourié-Gonnard · 8 years ago
  12. 02e28fe Merge remote-tracking branch 'upstream-restricted/pr/425' into development-restricted by Gilles Peskine · 8 years ago
  13. 0960f06 Merge branch 'development' into development-restricted by Gilles Peskine · 8 years ago
  14. 0884f48 Merge remote-tracking branch 'upstream-public/pr/1141' into development by Gilles Peskine · 8 years ago
  15. 1df4923 Remove compile-time deprecation warning for TRUNCATED_HMAC_COMPAT by Hanno Becker · 8 years ago
  16. c753f5d Merge remote-tracking branch 'upstream-restricted/pr/369' into development-restricted by Gilles Peskine · 8 years ago
  17. 68306ed Merge remote-tracking branch 'upstream-public/pr/1094' into development by Gilles Peskine · 8 years ago
  18. 4c2ac7e Deprecate MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT by Hanno Becker · 8 years ago
  19. 563423f Improve documentation of MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT option by Hanno Becker · 8 years ago
  20. e89353a Add fallback to non-compliant truncated HMAC for compatibiltiy by Hanno Becker · 8 years ago
  21. 81c7b18 Don't truncate MAC key when truncated HMAC is negotiated by Hanno Becker · 8 years ago
  22. 992b687 Fix heap corruption in ssl_decrypt_buf by Hanno Becker · 8 years ago
  23. 888fede Merge branch 'development' into development-restricted by Manuel Pégourié-Gonnard · 8 years ago
  24. 21df7f9 Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused by Hanno Becker · 8 years ago
  25. b4ff0aa Swap branches accepting/refusing renegotiation in in ssl_read by Hanno Becker · 8 years ago
  26. 1a9a51c Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog. by Hanno Becker · 8 years ago
  27. 947194e Make mbedtls_ssl_set_hostname safe to be called multiple times by Hanno Becker · 8 years ago
  28. a90658f Add ssl_conf_dh_param_bin superseding ssl_conf_dh_param by Hanno Becker · 8 years ago
  29. 470a8c4 Deprecate mbedtls_ssl_conf_dh_param by Hanno Becker · 8 years ago
  30. 184f675 Improve debugging output by Hanno Becker · 8 years ago
  31. 00d0a68 Adapt code setting default DHM parameters by Hanno Becker · 8 years ago
  32. 2f38a43 Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog. by Hanno Becker · 8 years ago
  33. 39f5d35 Make mbedtls_ssl_set_hostname safe to be called multiple times by Hanno Becker · 8 years ago
  34. 8c8b0ab Change default Diffie-Hellman parameters from RFC 5114 to RFC 7919 by Hanno Becker · 8 years ago
  35. 0b7b83f Fixed SIGSEGV problem when writing with ssl_write_real a buffer that is over MBEDTLS_SSL_MAX_CONTENT_LEN bytes by Florin · 8 years ago
  36. 2b187c4 Correct typo by Hanno Becker · 8 years ago
  37. 9648f8b Add run-time check for handshake message size in ssl_write_record by Hanno Becker · 8 years ago
  38. d33f1ca Add run-time check for record content size in ssl_encrypt_buf by Hanno Becker · 8 years ago
  39. 0169253 Document code silently discarding invalid records by Andres Amaya Garcia · 8 years ago
  40. 2fad94b Dont send alert on invalid DTLS record type by Andres Amaya Garcia · 8 years ago
  41. 3395250 Fix use of uninitialised ret ssl_tls.c by Andres Amaya Garcia · 8 years ago
  42. 46f5a3e Check return codes from MD in ssl code by Andres Amaya Garcia · 8 years ago
  43. bbafd34 Set len var to 0 when buf is freed in ssl_tls.c by Andres Amaya Garcia · 8 years ago
  44. 1a607a1 Change ssl_tls to use new MD API and check ret code by Andres Amaya Garcia · 8 years ago
  45. a004988 Zeroize old psk buf when changing value in ssl_tls by Andres Amaya Garcia · 8 years ago
  46. bdf3905 Ensure application data records are not kept when fully processed by Hanno Becker · 8 years ago
  47. bb9dd0c Add hard assertion to mbedtls_ssl_read_record_layer by Hanno Becker · 8 years ago
  48. 4a810fb Fix mbedtls_ssl_read by Hanno Becker · 8 years ago
  49. af0665d Simplify retaining of messages for future processing by Hanno Becker · 8 years ago
  50. e6706e6 Add tests for missing CA chains and bad curves. by Hanno Becker · 8 years ago
  51. 39ae8cd Fix implementation of VERIFY_OPTIONAL verification mode by Hanno Becker · 8 years ago
  52. 383a118 Merge remote-tracking branch 'gilles/IOTSSL-1330/development' into development by Manuel Pégourié-Gonnard · 8 years ago
  53. 5d2511c SHA-1 deprecation: allow it in key exchange by Gilles Peskine · 8 years ago
  54. 5e79cb3 Remove SHA-1 in TLS by default by Gilles Peskine · 8 years ago
  55. 23b33f8 Merge remote-tracking branch 'hanno/sig_hash_compatibility' into development by Manuel Pégourié-Gonnard · 8 years ago
  56. 088ce43 Implement optional CA list suppression in Certificate Request by Janos Follath · 8 years ago
  57. 7e5437a Remember suitable hash function for any signature algorithm. by Hanno Becker · 8 years ago
  58. 92e4426 SSLv3: when refusing renegotiation, stop processing by Gilles Peskine · 8 years ago
  59. c94f735 Ignore failures when sending fatal alerts by Gilles Peskine · 8 years ago
  60. 8498cb3 Cleaned up double variable declaration by Gilles Peskine · 8 years ago
  61. 064a85c Code portability fix by Gilles Peskine · 8 years ago
  62. 1cc8e34 Send TLS alerts in many more cases by Gilles Peskine · 8 years ago
  63. f982852 Balanced braces across preprocessor conditionals by Gilles Peskine · 8 years ago
  64. 182013f Prevent SLOTH attacks by Janos Follath · 9 years ago
  65. 2196c7f Fix renegotiation at incorrect times in DTLS by Andres AG · 9 years ago
  66. 1903fb3 Clarify Comments and Fix Typos (#651) by Brian J Murray · 9 years ago
  67. 8e00410 Merge fix for AEAD Random IVs by Simon Butcher · 9 years ago
  68. 9900014 Merge fix for IE Certificate Compatibility by Simon Butcher · 9 years ago
  69. 23bdca0 Fix an x509 compatibility issue by Janos Follath · 9 years ago
  70. b5b6af2 Puts platform time abstraction into its own header by Simon Butcher · 9 years ago
  71. 8eb6413 Address issues find by manual coverity scan. by Janos Follath · 9 years ago
  72. f002164 Refactor slightly to silence a clang-analyze warning by Nicholas Wilson · 9 years ago
  73. d5800b7 Abstracts away time()/stdlib.h into platform by SimonB · 9 years ago
  74. e846b51 Use the SSL IO and time callback typedefs consistently by Simon Butcher · 9 years ago
  75. 214a848 Update note about hardcoded verify_data_length by Manuel Pégourié-Gonnard · 9 years ago
  76. 967994a Remove unused code. by Manuel Pégourié-Gonnard · 9 years ago
  77. 4ae5c29 Add Changelog entry and improve coding style by Janos Follath · 9 years ago
  78. ca214b9 Updated relevant #ifdef by Janos Follath · 9 years ago
  79. c97b697 Fix for unused variable warning by Simon Butcher · 10 years ago
  80. 4c2bfdb Merge 'iotssl-558-md5-tls-sigs-restricted' by Simon Butcher · 10 years ago
  81. 207990d Added description of change to the Changelog by Simon Butcher · 10 years ago
  82. 47229c7 Disable MD5 in handshake signatures by default by Manuel Pégourié-Gonnard · 10 years ago
  83. e2e25e7 DTLS: avoid dropping too many records by Manuel Pégourié-Gonnard · 10 years ago
  84. bd36398 Merge branch 'iotssl-519-asn1write-overflows-restricted' into development-restricted by Manuel Pégourié-Gonnard · 10 years ago
  85. f8b2442 Merge branch 'iotssl-517-double-free-restricted' into development-restricted by Manuel Pégourié-Gonnard · 10 years ago
  86. 2046062 Merge branch 'development' into misc by Simon Butcher · 10 years ago
  87. 459a950 Fixed typo in comment by Simon Butcher · 10 years ago
  88. 62aab15 Merge branch 'development' into iotssl-513-alerts by Simon Butcher · 10 years ago
  89. e357a64 Merge pull request #328 from ARMmbed/iotssl-461-ecjpake-finalization by Simon Butcher · 10 years ago
  90. fbdf06c Fix handling of non-fatal alerts by Manuel Pégourié-Gonnard · 10 years ago
  91. e5f3072 Fix #ifdef inconsistency by Manuel Pégourié-Gonnard · 10 years ago
  92. bc5e508 Fix other int casts in bounds checking by Manuel Pégourié-Gonnard · 10 years ago
  93. cdea97c Remove useless code by Manuel Pégourié-Gonnard · 10 years ago
  94. 173c790 Fix potential double-free in ssl_conf_psk() by Manuel Pégourié-Gonnard · 10 years ago
  95. fadacb9 Merge branch 'development' into iotssl-461-ecjpake-finalization by Manuel Pégourié-Gonnard · 10 years ago
  96. 5674a97 Fix compilers warnings in reduced configs by Manuel Pégourié-Gonnard · 10 years ago
  97. 024b6df Improve key export API and documentation by Manuel Pégourié-Gonnard · 10 years ago
  98. fec73a8 Merge of fix for IOTSSL-481 - Double free by Simon Butcher · 10 years ago
  99. 5b8d1d6 Fix for IOTSSL-473 Double free error by Simon Butcher · 10 years ago
  100. 4feb7ae Added key export API by Robert Cragie · 10 years ago