summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_conf.c
AgeCommit message (Expand)Author
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-07-24Add X509 related libctx changes.Shane Lontis
2020-07-21Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2019-11-03X509_LOOKUP_store: new X509_LOOKUP_METHOD that works by OSSL_STORE URIRichard Levitte
2019-10-09Explicitly test against NULL; do not use !p or similarRich Salz
2019-09-28Reorganize local header filesDr. Matthias St. Pierre
2019-02-15Add option to disable Extended Master SecretTodd Short
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte
2018-11-30Fix usage of deprecated SSL_set_tmp_ecdh()Antoine Salon
2018-07-02Add the ability to configure anti-replay via SSL_CONFMatt Caswell
2018-05-17Allow configuation of the number of TLSv1.3 session tickets via SSL_CONFMatt Caswell
2018-04-24Improve backwards compat with 1.0.2 for ECDHParametersMatt Caswell
2018-03-14Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell
2018-02-13Update copyright yearMatt Caswell
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2017-12-14Send a CCS after ServerHello in TLSv1.3 if using middlebox compat modeMatt Caswell
2017-12-14Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell
2017-11-30Use ChaCha only if prioritized by clntTodd Short
2017-08-30e_os.h removal from other headers and source files.Pauli
2017-07-07Do not allow non-dhe kex_modes by defaultMatt Caswell
2017-06-08Ignore -named_curve auto value to improve backwards compatibilityTomas Mraz
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short
2017-05-02TLS1.3 PaddingTodd Short
2017-04-03SSL_CONF support for certificate_authoritiesDr. Stephen Henson
2016-11-28Test mac-then-encryptEmilia Kasper
2016-11-10Rename the Elliptic Curves extension to supported_groupsMatt Caswell
2016-11-02Add the SSL_METHOD for TLSv1.3 and all other base changes requiredMatt Caswell
2016-08-18Indent ssl/Emilia Kasper
2016-06-22Spelling... and more spellingFdaSilvaYY
2016-05-17Copyright consolidation 01/10Rich Salz
2016-04-05New SSL test frameworkEmilia Kasper
2016-03-20Remove #error from include files.Rich Salz
2016-02-18Remove outdated DEBUG flags.Rich Salz
2016-02-11Move to REF_DEBUG, for consistency.Rich Salz
2016-02-05Restore -no_comp switch for backwards compatible behaviourViktor Dukhovni
2016-02-03RT3234: disable compressionEmilia Kasper
2016-01-10Allow disabling the min and max versionKurt Roeckx
2016-01-02Protocol version selection and negotiation rewriteViktor Dukhovni
2016-01-02Add support for minimum and maximum protocol versionKurt Roeckx
2015-12-16Rename some BUF_xxx to OPENSSL_xxxRich Salz
2015-12-04Remove SSL_{CTX_}set_ecdh_auto() and always enable ECDHKurt Roeckx
2015-11-09Standardise our style for checking malloc failuresMatt Caswell
2015-10-02Remove BIO_s_file_internal macro.Rich Salz
2015-09-03remove 0 assignments.Rich Salz
2015-07-21free names before contextDr. Stephen Henson
2015-07-21typoDr. Stephen Henson
2015-07-21SSL_CONF additions.Dr. Stephen Henson
2015-07-18Use uint32_t consistently for flags.Dr. Stephen Henson