summaryrefslogtreecommitdiff
path: root/app/openssl/patches/README
blob: 2ff692823980c9f08fd824e664665c7f689ed1e4 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
progs.patch:

Fixup sources under the apps/ directory that are not built under the android environment.


handshake_cutthrough.patch

Enables SSL3+ clients to send application data immediately following the
Finished message even when negotiating full-handshakes.  With this patch,
clients can negotiate SSL connections in 1-RTT even when performing
full-handshakes.

jsse.patch

Support for JSSE implementation based on OpenSSL.

channelid.patch

Implements TLS Channel ID support as both a client and a server.
See http://tools.ietf.org/html/draft-balfanz-tls-channelid-00.

eng_dyn_dirs.patch

Fixes the case of having multiple DIR_ADD commands sent to eng_dyn

fix_clang_build.patch

Fixes the Clang based build.

tls12_digests.patch

Fixes a bug with handling TLS 1.2 and digest functions for DSA and ECDSA
keys.

alpn.patch

This change adds support for ALPN in OpenSSL. ALPN is the IETF
blessed version of NPN and we'll be supporting both ALPN and NPN for
some time yet.

cbc_record_splitting.patch

BEAST attack client-side mitigation. Removes 0/n record splitting, adds 1/n-1
record splitting. Record splitting is disabled by default.

dsa_nonce.patch

Adds an option to mix in hash of message and private key into (EC)DSA nonces to
make (EC)DSA more resilient to weaknesses in RNGs used for nonces. The feature
is disabled by default.

ecdhe_psk.patch

Adds support for ECDHE Pre-Shared Key (PSK) TLS cipher suites.

tls_psk_hint.patch

Fixes issues with TLS-PSK identity hint implementation where
per-connection/session and per-context hints were being mixed up.

psk_client_callback_128_byte_id_bug.patch

Fixes the issue where it was impossible to return a 128 byte long PSK identity
(the maximum supported length) from psk_client_callback.