summaryrefslogtreecommitdiffstats
path: root/ssl/s3_lib.c
AgeCommit message (Expand)Author
2023-02-24first cut at sigalg loadingMichael Baentsch
2022-11-14Resolve a TODO in ssl3_dispatch_alertMatt Caswell
2022-10-20Remove some redundant codeMatt Caswell
2022-10-07Partial revert and reimplement "Enable brainpool curves for TLS1.3"Matt Caswell
2022-10-05Move the SSLv3 crypto code into the new record layerMatt Caswell
2022-10-05Stop raising ERR_R_MALLOC_FAILURE in most placesRichard Levitte
2022-09-13ssl: modify libssl so that it uses OSSL_TIMEPauli
2022-07-28SSL object refactoring using SSL_CONNECTION objectTomas Mraz
2022-07-13Check for EVP_MD being NULL inside ssl.slontis
2022-06-02Fix the erroneous checks of EVP_PKEY_CTX_set_group_namePeiwei Hu
2022-05-03Update copyright yearMatt Caswell
2022-04-06Add SSL_(CTX_)?get0_(verify|chain)_cert_store functionsHugo Landau
2022-03-01[ssl] Prefer SSL_k(EC)?DHE to the SSL_kE(EC)?DH aliasNicola Tuveri
2022-02-03add SSL_get0_iana_groups() & SSL_client_hello_get_extension_order()Phus Lu
2021-12-21add OSSL_STACK_OF_X509_free() for commonly used patternDr. David von Oheimb
2021-12-07Don't free the EVP_PKEY on error in set0_tmp_dh_pkey() functionsMatt Caswell
2021-11-26Enable brainpool curves for TLS1.3Bernd Edlinger
2021-09-24tls/ccm8: reduce the cipher strength for CCM8 ciphers to 64 bitsPauli
2021-09-24doc: document the change to the security level of CCM8 cipher suitesPauli
2021-09-24tls: reduce the strength of CCM_8 ciphers due to their short IV.Pauli
2021-09-23Change TLS RC4 cipher strength check to be data driven.slontis
2021-05-29ssl: add zero strenght arguments to BN and RAND RNG callsPauli
2021-05-15Promote SSL_get_negotiated_group() for non-TLSv1.3Benjamin Kaduk
2021-04-01OBJ_nid2sn(NID_sha256) is completely equivalent to OSSL_DIGEST_NAME_SHA2_256Tomas Mraz
2021-03-25Ensure buffer/length pairs are always in syncMatt Caswell
2021-03-12ssl: support params arguments to init functionsPauli
2021-02-12Deprecate the libssl level SRP APIsMatt Caswell
2021-02-05Remove all OPENSSL_NO_XXX from libssl where XXX is a crypto algMatt Caswell
2021-02-05Remove OPENSSL_NO_EC guards from libsslMatt Caswell
2021-02-05Remove compile time guard checking from ssl3_get_req_cert_typeMatt Caswell
2021-02-05Remove OPENSSL_NO_DH guards from libsslMatt Caswell
2021-02-04Remove some TODO(OpenSSL1.2) referencesMatt Caswell
2021-01-28Update copyright yearRichard Levitte
2021-01-26Avoid using OSSL_PKEY_PARAM_GROUP_NAME when the key might be legacyTomas Mraz
2021-01-26Deprecate EC_KEY + Update ec apps to use EVP_PKEYShane Lontis
2021-01-08Adding TLS group name retrievalMichael Baentsch
2020-12-20Drop OPENSSL_NO_RSA everywhereRichard Levitte
2020-11-18Return sensible values for some SSL ctrlsMatt Caswell
2020-11-18Only disabled what we need to in a no-dh buildMatt Caswell
2020-11-18Implement a replacement for SSL_set_tmp_dh()Matt Caswell
2020-11-18Deprecate SSL_CTRL_SET_TMP_DH and other related ctrlsMatt Caswell
2020-11-11SSL: refactor all SSLfatal() callsRichard Levitte
2020-11-11Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() callRichard Levitte
2020-10-29Unify ssl3_get_cipher_by_std_name() implementationBenjamin Kaduk
2020-10-14[ssl] Support ssl_encapsulate on server sideNicola Tuveri
2020-10-14[ssl] Support ssl_decapsulate on client sideNicola Tuveri
2020-09-27optimise ssl3_get_cipher_by_std_name()hklaas
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-09-13Fix safestack issues in ssl.hMatt Caswell
2020-07-24Add X509 related libctx changes.Shane Lontis