summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_conf.c
AgeCommit message (Expand)Author
2024-04-09Copyright year updatesRichard Levitte
2024-01-25replace strstr() with strchr() for single charactersrilysh
2023-12-19Consolidate raising errors in SSL_CONF_cmd()Tomas Mraz
2023-11-24Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the server to prefer non-dhe ...Markus Minichmayr
2023-09-11"foo * bar" should be "foo *bar"Dimitri Papadopoulos
2023-09-07Copyright year updatesMatt Caswell
2023-01-30SSL_conf_cmd: add support for IgnoreUnexpectedEOFSteffen Nurpmeso
2023-01-24Create the SSL object for QUIC-TLSMatt Caswell
2022-11-24Add support for KTLS zerocopy sendfile on LinuxMaxim Mikityanskiy
2022-10-18Add support for compressed certificates (RFC8879)Todd Short
2022-07-28SSL object refactoring using SSL_CONNECTION objectTomas Mraz
2022-06-03Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl configTomas Mraz
2022-05-27The -no_legacy_server_connect option applies to clientTomas Mraz
2022-05-27Actually implement UnsafeLegacyServerConnect as documentedTomas Mraz
2022-05-03Update copyright yearMatt Caswell
2022-04-22str[n]casecmp => OPENSSL_strncasecmpDmitry Belyavskiy
2022-04-12SSL_conf_cmd: Allow DH Parameters at any position.Daniel Fiala
2022-01-28apps: Add option -no_ems to s_client/s_server appsyangyangtiantianlonglong
2021-06-15Disabling Encrypt-then-MAC extension in s_client/s_serverDmitry Belyavskiy
2021-05-17Add SSL_OP_ALLOW_CLIENT_RENEGOTIATIONRich Salz
2021-05-14Slightly reformat ssl.h.inRich Salz
2021-05-14Convert SSL_{CTX}_[gs]et_options to 64Rich Salz
2021-05-05Correct ssl_conf logic for "legacy_server_connect"Benjamin Kaduk
2021-04-12Only enable KTLS if it is explicitly configuredMatt Caswell
2021-02-18Update copyright yearMatt Caswell
2021-02-17Rename OSSL_ENCODER_CTX_new_by_EVP_PKEY and OSSL_DECODER_CTX_new_by_EVP_PKEYTomas Mraz
2021-02-05Remove OPENSSL_NO_EC guards from libsslMatt Caswell
2021-02-05Add the nist group names as aliases for the normal TLS group namesMatt Caswell
2020-11-18Implement a replacement for SSL_set_tmp_dh()Matt Caswell
2020-11-18Disable the DHParameters config option in a no-deprecated buildMatt Caswell
2020-11-11SSL: refactor all SSLfatal() callsRichard Levitte
2020-11-11Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() callRichard Levitte
2020-10-15Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre
2020-10-01Run the withlibctx.pl scriptMatt Caswell
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-07-24Add X509 related libctx changes.Shane Lontis
2020-07-21Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2019-11-03X509_LOOKUP_store: new X509_LOOKUP_METHOD that works by OSSL_STORE URIRichard Levitte
2019-10-09Explicitly test against NULL; do not use !p or similarRich Salz
2019-09-28Reorganize local header filesDr. Matthias St. Pierre
2019-02-15Add option to disable Extended Master SecretTodd Short
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte
2018-11-30Fix usage of deprecated SSL_set_tmp_ecdh()Antoine Salon
2018-07-02Add the ability to configure anti-replay via SSL_CONFMatt Caswell
2018-05-17Allow configuation of the number of TLSv1.3 session tickets via SSL_CONFMatt Caswell
2018-04-24Improve backwards compat with 1.0.2 for ECDHParametersMatt Caswell
2018-03-14Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell
2018-02-13Update copyright yearMatt Caswell