| Nagendra Modadugu | 1fada29 | 2009-10-01 11:02:45 -0700 | [diff] [blame] | 1 | progs.patch: |
| 2 | |
| 3 | Fixup sources under the apps/ directory that are not built under the android environment. |
| 4 | |
| 5 | |
| Nagendra Modadugu | 1fada29 | 2009-10-01 11:02:45 -0700 | [diff] [blame] | 6 | handshake_cutthrough.patch |
| 7 | |
| 8 | Enables SSL3+ clients to send application data immediately following the |
| 9 | Finished message even when negotiating full-handshakes. With this patch, |
| 10 | clients can negotiate SSL connections in 1-RTT even when performing |
| 11 | full-handshakes. |
| Brian Carlstrom | fd113c0 | 2010-04-23 15:24:16 -0700 | [diff] [blame] | 12 | |
| 13 | jsse.patch |
| 14 | |
| 15 | Support for JSSE implementation based on OpenSSL. |
| 16 | |
| Adam Langley | 45bcfbc | 2013-01-16 13:43:53 -0800 | [diff] [blame] | 17 | channelid.patch |
| 18 | |
| 19 | Implements TLS Channel ID support as both a client and a server. |
| 20 | See http://tools.ietf.org/html/draft-balfanz-tls-channelid-00. |
| Kenny Root | d38060a | 2013-02-08 11:22:25 -0800 | [diff] [blame] | 21 | |
| 22 | eng_dyn_dirs.patch |
| 23 | |
| 24 | Fixes the case of having multiple DIR_ADD commands sent to eng_dyn |
| David 'Digit' Turner | 365d7e8 | 2013-03-05 19:52:51 +0100 | [diff] [blame] | 25 | |
| 26 | fix_clang_build.patch |
| 27 | |
| 28 | Fixes the Clang based build. |
| Kenny Root | 9296b4b | 2013-06-24 12:03:19 -0700 | [diff] [blame] | 29 | |
| 30 | tls12_digests.patch |
| 31 | |
| 32 | Fixes a bug with handling TLS 1.2 and digest functions for DSA and ECDSA |
| 33 | keys. |
| Kenny Root | ee53ab1 | 2013-06-24 12:07:13 -0700 | [diff] [blame] | 34 | |
| 35 | alpn.patch |
| 36 | |
| 37 | This change adds support for ALPN in OpenSSL. ALPN is the IETF |
| 38 | blessed version of NPN and we'll be supporting both ALPN and NPN for |
| 39 | some time yet. |
| Adam Langley | e6443cd | 2013-11-04 16:01:27 -0800 | [diff] [blame] | 40 | |
| 41 | cbc_record_splitting.patch |
| 42 | |
| 43 | BEAST attack client-side mitigation. Removes 0/n record splitting, adds 1/n-1 |
| 44 | record splitting. Record splitting is disabled by default. |
| Adam Langley | 5df7c8e | 2014-01-23 09:40:22 -0800 | [diff] [blame] | 45 | |
| Adam Langley | 23b9568 | 2014-01-28 13:29:39 -0800 | [diff] [blame] | 46 | dsa_nonce.patch |
| 47 | |
| 48 | Adds an option to mix in hash of message and private key into (EC)DSA nonces to |
| 49 | make (EC)DSA more resilient to weaknesses in RNGs used for nonces. The feature |
| 50 | is disabled by default. |
| Alex Klyubin | de9675d | 2014-04-28 15:57:15 -0700 | [diff] [blame] | 51 | |
| 52 | ecdhe_psk.patch |
| 53 | |
| 54 | Adds support for ECDHE Pre-Shared Key (PSK) TLS cipher suites. |
| Alex Klyubin | 3355e0f | 2014-05-05 10:15:30 -0700 | [diff] [blame] | 55 | |
| Alex Klyubin | 37da3e8 | 2014-06-04 11:37:59 -0700 | [diff] [blame] | 56 | ecdhe_psk_part2.patch |
| 57 | |
| 58 | Removes ECHDE-PSK cipher suites with SHA-2 because they cannot be used with |
| 59 | SSLv3 (and there's no way to express that in OpenSSL's configuration). Adds |
| 60 | SHA-1 based ECDHE-PSK AES-CBC cipher suites instead. |
| 61 | |
| Kenny Root | 3f9e6ad | 2014-06-19 00:10:12 -0700 | [diff] [blame] | 62 | arm_asm.patch |
| 63 | |
| 64 | Adds newer ARM assembly pack with BSAES for ARMv7 and acceleration for ARMv8 |
| 65 | Based on branch available at: |
| 66 | https://git.linaro.org/people/ard.biesheuvel/openssl.git/shortlog/refs/heads/openssl-1.0.1f-with-arm-patches |
| 67 | c7b582ef23eb6f4386664e841e6e406d984c38d3^..cb8b1ab03e5c179a719afe83f03fecb1c2c78730 |
| 68 | |
| Alex Klyubin | 3355e0f | 2014-05-05 10:15:30 -0700 | [diff] [blame] | 69 | tls_psk_hint.patch |
| 70 | |
| 71 | Fixes issues with TLS-PSK identity hint implementation where |
| 72 | per-connection/session and per-context hints were being mixed up. |
| Alex Klyubin | 9b5f19e | 2014-05-28 12:21:14 -0700 | [diff] [blame] | 73 | |
| 74 | psk_client_callback_128_byte_id_bug.patch |
| 75 | |
| 76 | Fixes the issue where it was impossible to return a 128 byte long PSK identity |
| 77 | (the maximum supported length) from psk_client_callback. |
| Bodo Moeller | 9a68a8f | 2014-10-03 03:12:15 -0700 | [diff] [blame] | 78 | |
| 79 | tls_fallback_scsv.patch |
| 80 | |
| 81 | Adds the signalling cipher suite value (SCSV) from |
| 82 | https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00 |