summaryrefslogtreecommitdiffstats
path: root/ssl/s3_lib.c
AgeCommit message (Expand)Author
2013-11-06Enable PSK in FIPS mode.Dr. Stephen Henson
2013-09-13Tidy up comments.Rob Stradling
2013-09-13Fix compilation with no-ec and/or no-tlsext.Rob Stradling
2013-09-06Add callbacks supporting generation and retrieval of supplemental data entrie...Scott Deboy
2013-09-05Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling
2013-08-17Make no-ec compilation work.Dr. Stephen Henson
2013-08-17Return 1 when setting ECDH auto mode.Dr. Stephen Henson
2013-07-22Support ALPN.Adam Langley
2013-06-12Add support for arbitrary TLS extensions.Trevor
2013-03-28Enable TLS 1.2 ciphers in DTLS 1.2.Dr. Stephen Henson
2013-03-18Use enc_flags when deciding protocol variations.Dr. Stephen Henson
2013-03-18DTLS revision.Dr. Stephen Henson
2012-11-26Print out point format list for clients too.Dr. Stephen Henson
2012-11-22Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-09-30If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" asDr. Stephen Henson
2012-09-12Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-09-08new ctrl to retrive value of received temporary key in server key exchange me...Dr. Stephen Henson
2012-09-07store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson
2012-08-15Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-07-23Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-07-08Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-07-03Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-06-28Function tls1_check_ec_server_key is now redundant as we makeDr. Stephen Henson
2012-06-28Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-06-22Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-06-11Fix memory leak.Ben Laurie
2012-06-06Fix memory leak.Ben Laurie
2012-05-30RFC 5878 support.Ben Laurie
2012-05-10PR: 2806Dr. Stephen Henson
2012-04-17Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller
2012-04-05Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson
2012-04-04Tidy up EC parameter check code: instead of accessing internal structuresDr. Stephen Henson
2012-03-28Initial revision of ECC extension handling.Dr. Stephen Henson
2012-03-14oops, revert unrelated patchesDr. Stephen Henson
2012-03-14update FAQ, NEWSDr. Stephen Henson
2012-03-06New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson
2012-02-22SSL export fixes (from Adam Langley) [original from 1.0.1]Dr. Stephen Henson
2012-02-10PR: 2704Dr. Stephen Henson
2012-01-31Add support for distinct certificate chains per key type and per SSLDr. Stephen Henson
2012-01-16Support for fixed DH ciphersuites.Dr. Stephen Henson
2011-12-31PR: 2658Dr. Stephen Henson
2011-12-22New ctrl values to clear or retrieve extra chain certs from an SSL_CTX.Dr. Stephen Henson
2011-12-14PR: 1794Dr. Stephen Henson
2011-11-15Add TLS exporter.Ben Laurie
2011-10-13In ssl3_clear, preserve s3->init_extra along with s3->rbuf.Bodo Möller
2011-09-05(EC)DH memory handling fixes.Bodo Möller
2011-08-03Expand range of ctrls for AES GCM to support retrieval and setting ofDr. Stephen Henson
2011-07-25oops, remove debug optionDr. Stephen Henson
2011-07-25Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support andDr. Stephen Henson
2011-06-06Set SSL_FIPS flag in ECC ciphersuites.Dr. Stephen Henson