summaryrefslogtreecommitdiffstats
path: root/ssl/s3_lib.c
AgeCommit message (Expand)Author
2013-11-06Enable PSK in FIPS mode.Dr. Stephen Henson
2013-10-01Merge remote-tracking branch 'agl/1.0.2alpn' into agl-alpnBen Laurie
2013-09-18Enable TLS 1.2 ciphers in DTLS 1.2.Dr. Stephen Henson
2013-09-18Use enc_flags when deciding protocol variations.Dr. Stephen Henson
2013-09-18DTLS revision.Dr. Stephen Henson
2013-09-16Tidy up comments.Rob Stradling
2013-09-16Fix compilation with no-ec and/or no-tlsext.Rob Stradling
2013-09-16Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling
2013-09-13Support ALPN.Adam Langley
2013-08-19Make no-ec compilation work.Dr. Stephen Henson
2013-08-18Return 1 when setting ECDH auto mode.Dr. Stephen Henson
2013-07-03Trying cherrypick:Trevor
2013-01-15Add support for broken protocol tests (backport from master branch)Dr. Stephen Henson
2012-12-26handle point format list retrieval for clients too (from HEAD)Dr. Stephen Henson
2012-12-26Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-12-26Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-12-26new ctrl to retrive value of received temporary key in server key exchange me...Dr. Stephen Henson
2012-12-26store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Function tls1_check_ec_server_key is now redundant as we makeDr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-06-11Fix memory leak.Ben Laurie
2012-06-06Fix memory leak.Ben Laurie
2012-05-29RFC 5878 support.Ben Laurie
2012-05-10PR: 2806Dr. Stephen Henson
2012-04-17Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller
2012-04-06Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson
2012-04-06Tidy up EC parameter check code: instead of accessing internal structuresDr. Stephen Henson
2012-04-06Initial revision of ECC extension handling.Dr. Stephen Henson
2012-04-06New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson
2012-04-06Add support for distinct certificate chains per key type and per SSLDr. Stephen Henson
2012-04-06Backport support for fixed DH ciphersuites (from HEAD)Dr. Stephen Henson
2012-02-10PR: 2704Dr. Stephen Henson
2011-12-31PR: 2658Dr. Stephen Henson
2011-12-22New ctrl values to clear or retrieve extra chain certs from an SSL_CTX.Dr. Stephen Henson
2011-12-14PR: 1794Dr. Stephen Henson
2011-12-13SSL export fixes (from Adam Langley).Ben Laurie
2011-11-15Add TLS exporter.Ben Laurie
2011-11-13Add Next Protocol Negotiation.Ben Laurie
2011-10-13In ssl3_clear, preserve s3->init_extra along with s3->rbuf.Bodo Möller
2011-09-05(EC)DH memory handling fixes.Bodo Möller
2011-08-04Backport GCM support from HEAD.Dr. Stephen Henson
2011-07-25Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support andDr. Stephen Henson
2011-06-06Set SSL_FIPS flag in ECC ciphersuites.Dr. Stephen Henson
2011-05-25use TLS1_get_version macro to check version so TLS v1.2 changes don't interfe...Dr. Stephen Henson
2011-05-11Backport TLS v1.2 support from HEAD.Dr. Stephen Henson