summaryrefslogtreecommitdiffstats
path: root/ssl/ssl.h
AgeCommit message (Expand)Author
2013-11-02Extend SSL_CONFDr. Stephen Henson
2013-10-20Do not include a timestamp in the Client/ServerHello Random field.Nick Mathewson
2013-10-01Merge remote-tracking branch 'agl/1.0.2alpn' into agl-alpnBen Laurie
2013-09-24Show useful errors.Ben Laurie
2013-09-18Suite B support for DTLS 1.2Dr. Stephen Henson
2013-09-18Dual DTLS version methods.Dr. Stephen Henson
2013-09-18Provisional DTLS 1.2 support.Dr. Stephen Henson
2013-09-16Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling
2013-09-13Support ALPN.Adam Langley
2013-07-03Trying cherrypick:Trevor
2013-06-04Fix missing/incorrect prototype.Ben Laurie
2013-05-15RFC6689 support: add missing commit (git noob alert).Andy Polyakov
2013-01-15Add support for broken protocol tests (backport from master branch)Dr. Stephen Henson
2012-12-29add SSL_CONF functions and documentation (backport from HEAD)Dr. Stephen Henson
2012-12-26SSL/TLS record tracing code (backport from HEAD).Dr. Stephen Henson
2012-12-26Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-12-26return error if Suite B mode is selected and TLS 1.2 can't be used.Dr. Stephen Henson
2012-12-26Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-12-26new ctrl to retrive value of received temporary key in server key exchange me...Dr. Stephen Henson
2012-12-26store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson
2012-12-26perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson
2012-12-26give more meaningful error if presented with wrong certificate type by serverDr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-12-26Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson
2012-12-26check EC tmp key matches preferencesDr. Stephen Henson
2012-12-26typoDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26new function SSL_is_server to which returns 1 is the corresponding SSL contex...Dr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-12-26Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson
2012-06-07Rearrange and test authz extension.Ben Laurie
2012-06-03Reduce version skew: trivia (I hope).Ben Laurie
2012-05-29Don't insert in the middle.Ben Laurie
2012-05-29RFC 5878 support.Ben Laurie
2012-04-25Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL andDr. Stephen Henson
2012-04-24Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson
2012-04-18correct error codeDr. Stephen Henson
2012-04-06Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson
2012-04-06Initial revision of ECC extension handling.Dr. Stephen Henson
2012-04-06New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson
2012-04-06Add support for distinct certificate chains per key type and per SSLDr. Stephen Henson
2012-04-06Backport: tidy/enhance certificate chain output code (from HEAD)Dr. Stephen Henson
2012-04-06Backport support for fixed DH ciphersuites (from HEAD)Dr. Stephen Henson
2012-02-22ABI compliance fixes.Dr. Stephen Henson