| progs.patch: |
| |
| Fixup sources under the apps/ directory that are not built under the android environment. |
| |
| |
| handshake_cutthrough.patch |
| |
| Enables SSL3+ clients to send application data immediately following the |
| Finished message even when negotiating full-handshakes. With this patch, |
| clients can negotiate SSL connections in 1-RTT even when performing |
| full-handshakes. |
| |
| jsse.patch |
| |
| Support for JSSE implementation based on OpenSSL. |
| |
| channelid.patch |
| |
| Implements TLS Channel ID support as both a client and a server. |
| See http://tools.ietf.org/html/draft-balfanz-tls-channelid-00. |
| |
| eng_dyn_dirs.patch |
| |
| Fixes the case of having multiple DIR_ADD commands sent to eng_dyn |
| |
| fix_clang_build.patch |
| |
| Fixes the Clang based build. |
| |
| tls12_digests.patch |
| |
| Fixes a bug with handling TLS 1.2 and digest functions for DSA and ECDSA |
| keys. |
| |
| alpn.patch |
| |
| This change adds support for ALPN in OpenSSL. ALPN is the IETF |
| blessed version of NPN and we'll be supporting both ALPN and NPN for |
| some time yet. |
| |
| cbc_record_splitting.patch |
| |
| BEAST attack client-side mitigation. Removes 0/n record splitting, adds 1/n-1 |
| record splitting. Record splitting is disabled by default. |
| |
| dsa_nonce.patch |
| |
| Adds an option to mix in hash of message and private key into (EC)DSA nonces to |
| make (EC)DSA more resilient to weaknesses in RNGs used for nonces. The feature |
| is disabled by default. |
| |
| ecdhe_psk.patch |
| |
| Adds support for ECDHE Pre-Shared Key (PSK) TLS cipher suites. |
| |
| ecdhe_psk_part2.patch |
| |
| Removes ECHDE-PSK cipher suites with SHA-2 because they cannot be used with |
| SSLv3 (and there's no way to express that in OpenSSL's configuration). Adds |
| SHA-1 based ECDHE-PSK AES-CBC cipher suites instead. |
| |
| arm_asm.patch |
| |
| Adds newer ARM assembly pack with BSAES for ARMv7 and acceleration for ARMv8 |
| Based on branch available at: |
| https://git.linaro.org/people/ard.biesheuvel/openssl.git/shortlog/refs/heads/openssl-1.0.1f-with-arm-patches |
| c7b582ef23eb6f4386664e841e6e406d984c38d3^..cb8b1ab03e5c179a719afe83f03fecb1c2c78730 |
| |
| tls_psk_hint.patch |
| |
| Fixes issues with TLS-PSK identity hint implementation where |
| per-connection/session and per-context hints were being mixed up. |
| |
| psk_client_callback_128_byte_id_bug.patch |
| |
| Fixes the issue where it was impossible to return a 128 byte long PSK identity |
| (the maximum supported length) from psk_client_callback. |
| |
| tls_fallback_scsv.patch |
| |
| Adds the signalling cipher suite value (SCSV) from |
| https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00 |
