| Commit message (Expand) | Author | Age | Files | Lines |
* | Fixup protocol version handling in OpenSSL 1.0.X. | Matthias Andree | 2016-12-12 | 1 | -0/+4 |
* | Support for Debian/Ubuntu mutilated SSLv3 support. | Matthias Andree | 2016-12-12 | 1 | -0/+4 |
* | OpenSSL 1.1.0 API support. | Matthias Andree | 2016-12-12 | 1 | -4/+76 |
* | Refactor OpenSSL protocol version selection logic. | Matthias Andree | 2016-12-12 | 1 | -44/+54 |
* | Bump OpenSSL requirement to v1.0.2. | Matthias Andree | 2016-12-11 | 1 | -2/+2 |
* | Really try to continue if OpenSSL lib newer than headers used at compile-time. | Matthias Andree | 2016-04-24 | 1 | -1/+0 |
* | Enable TLS 1.1/1.2 options on LibreSSL. | Matthias Andree | 2016-04-24 | 1 | -2/+2 |
* | Avoid another C99-style comment. | Matthias Andree | 2016-01-30 | 1 | -3/+2 |
* | Avoid C99-style comment. | Matthias Andree | 2016-01-30 | 1 | -2/+1 |
* | Add OpenSSL version sanity checking. | Matthias Andree | 2016-01-30 | 1 | -1/+24 |
* | Support ssl3+ tls1.1, tls1.2 in --sslproto. Report TLS1.1/1.2 if unsupported ... | Matthias Andree | 2015-04-11 | 1 | -2/+19 |
* | Fix typo regarding SSL_OP_NO_SSLv3, and carry over one basic block from maste... | Matthias Andree | 2015-04-11 | 1 | -2/+7 |
* | Detect/report server hang-up in SSL_connect(). | Matthias Andree | 2015-04-08 | 1 | -1/+12 |
* | TLS overhaul, bumping version to 6.4 | Matthias Andree | 2015-01-26 | 1 | -11/+17 |
* | Also report SSL/TLS protocol version in verbose mode. | Matthias Andree | 2015-01-16 | 1 | -2/+6 |
* | Report SSL/TLS cipher, in verbose mode. | Matthias Andree | 2015-01-16 | 1 | -0/+14 |
* | Also recognize OPENSSL_NO_SSLx. | Matthias Andree | 2015-01-16 | 1 | -2/+2 |
* | Permit build on SSLv3-disabled OpenSSL, | Matthias Andree | 2015-01-16 | 1 | -1/+6 |
* | Minor bug fixes for socket.c | John Beck | 2013-02-18 | 1 | -0/+3 |
* | Improve X.509 certificate validation reporting. | Matthias Andree | 2013-02-06 | 1 | -13/+42 |
* | Plug a memory leak in OpenSSL's certificate verification callback. | Matthias Andree | 2012-12-13 | 1 | -1/+1 |
* | Clear SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS without SSL_CTX_clear_options() | Earl Chew | 2012-09-03 | 1 | -3/+4 |
* | Fix CVE-2011-3389 by clearing SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS... | Matthias Andree | 2012-05-03 | 1 | -0/+6 |
* | Fix build on SSLv2-disabled OpenSSL setups | Matthias Andree | 2011-10-26 | 1 | -0/+5 |
* | Print Server certificate: banner on stdout rather than stderr. | Matthias Andree | 2011-08-30 | 1 | -1/+1 |
* | Revert SO_???TIMEO-based STARTTLS timeout handling. | Matthias Andree | 2011-05-26 | 1 | -28/+1 |
* | Fix error string. | Matthias Andree | 2011-05-23 | 1 | -1/+1 |
* | Fix socket timeout handling. | Matthias Andree | 2011-05-22 | 1 | -1/+2 |
* | Reindent. | Matthias Andree | 2011-05-22 | 1 | -9/+9 |
* | Reinstate SSLv2 support on legacy_63 branch. | Matthias Andree | 2011-05-17 | 1 | -3/+5 |
* | Drop broken test code. | Matthias Andree | 2011-05-17 | 1 | -18/+0 |
* | SockOpen(): set SO_KEEPALIVE. | Matthias Andree | 2011-05-13 | 1 | -0/+9 |
* | Add a SockTimeout(int socket, int seconds) function. | Matthias Andree | 2011-04-29 | 1 | -0/+25 |
* | In the plugin child, call _exit, not exit. | Matthias Andree | 2011-04-29 | 1 | -2/+2 |
* | Properly report EXIT_FAILURE if the plugin/plugout execvp() fails. | Matthias Andree | 2011-04-29 | 1 | -2/+2 |
* | Remove unused code. | Matthias Andree | 2011-04-29 | 1 | -48/+0 |
* | Fix typo in comment. | Matthias Andree | 2011-04-28 | 1 | -1/+1 |
* | Remove support for SSLv2 (fixes Debian Bug #622054). | Matthias Andree | 2011-04-11 | 1 | -5/+3 |
* | Fix compiler warnings. | Matthias Andree | 2010-12-12 | 1 | -1/+1 |
* | Fix Intel C++ var shadowing warnings. | Matthias Andree | 2010-10-09 | 1 | -5/+5 |
* | X.509 matching split out; disallow TLD wildcards. | Matthias Andree | 2010-08-27 | 1 | -36/+0 |
* | Disallow X.509 wildcard matches in domain literals. | Matthias Andree | 2010-08-27 | 1 | -1/+17 |
* | Require that X.509 wildcards start with "*.", | Matthias Andree | 2010-08-27 | 1 | -1/+1 |
* | Factor out name/wildcard matching code. | Matthias Andree | 2010-08-27 | 1 | -17/+23 |
* | Only report connection failures in verbose mode or if all addresses fail. | Matthias Andree | 2010-05-19 | 1 | -7/+18 |
* | Omit warning of insecure connection if --sslfingerprint matches. | Matthias Andree | 2010-05-09 | 1 | -2/+2 |
* | Hack types for cygwin_read(). | Matthias Andree | 2010-04-29 | 1 | -4/+4 |
* | --sslcert{file|path} overrides default store, add environment var... | Matthias Andree | 2010-04-23 | 1 | -9/+18 |
* | Add --sslcertfile option and FETCHMAIL_NO_DEFAULT_X509_PATHS env var, | Matthias Andree | 2010-04-18 | 1 | -5/+12 |
* | Improve SSL error messages for common issues | Matthias Andree | 2010-04-18 | 1 | -27/+77 |