summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_lib.c
AgeCommit message (Expand)Author
2018-03-19Place ticket keys into secure memoryTodd Short
2018-03-19Apply system_default configuration on SSL_CTX_new().Tomas Mraz
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-03-16RAND_DRBG: add a function for setting the default DRBG type and flagsDr. Matthias St. Pierre
2018-03-15Publish the RAND_DRBG APIDr. Matthias St. Pierre
2018-03-14Put the default set of TLSv1.3 ciphersuites in a header fileMatt Caswell
2018-03-14Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell
2018-03-12Session Ticket app dataTodd Short
2018-03-09Give more information in the SSL_stateless return codeMatt Caswell
2018-03-05Add X448/Ed448 support to libsslMatt Caswell
2018-02-28Do not set a nonzero default max_early_dataBenjamin Kaduk
2018-02-26Export keying material using early exporter master secretTatsuhiro Tsujikawa
2018-02-13DRBG: make the derivation function the default for ctr_drbgDr. Matthias St. Pierre
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell
2018-02-01Free pha_dgst in SSL_clear()Todd Short
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-01-29Add RAND_DRBG_bytesKurt Roeckx
2018-01-24Fix the SSL_stateless() return codeMatt Caswell
2018-01-24Fix interaction between SSL_stateless() and SSL_clear()Matt Caswell
2018-01-24Fix logic around when to send an HRR based on cookiesMatt Caswell
2018-01-24Add the SSL_stateless() functionMatt Caswell
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2018-01-19Copyright update of more files that have changed this yearRichard Levitte
2018-01-10Make data argument const in SSL_dane_tlsa_addPatrick Schlangen
2017-12-28Disable partial writes for early dataMatt Caswell
2017-12-28Don't flush the ClientHello if we're going to send early dataMatt Caswell
2017-12-17Add master DRBG for reseedingDr. Matthias St. Pierre
2017-12-15Fix invalid function type casts.Bernd Edlinger
2017-12-14Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell
2017-12-07Consistent formatting for sizeof(foo)Rich Salz
2017-12-04Fix some formatting nitsMatt Caswell
2017-12-04Convert the state machine code to use SSLfatal()Matt Caswell
2017-11-05Implement Maximum Fragment Length TLS extension.FdaSilvaYY
2017-10-30Use atomics for SSL_CTX statisticsBenjamin Kaduk
2017-10-26Simplify the stack reservationPaul Yang
2017-10-25Fix error handling in SSL_newBernd Edlinger
2017-10-18Remove parentheses of return.KaoruToda
2017-10-18Add missing RAND_DRBG lockingBenjamin Kaduk
2017-10-18Fix reseeding issues of the public RAND_DRBGDr. Matthias St. Pierre
2017-10-09Since return is inconsistent, I removed unnecessary parentheses andKaoruToda
2017-09-29Remove unnecessary #include <openssl/lhash.h> directives.Pauli
2017-09-28Add stack space reservations.Pauli
2017-09-23Use size of entries, not size of the pointer.Kurt Roeckx
2017-09-22Store groups as uint16_tDr. Stephen Henson
2017-09-21Cleanup whitespace in ssl_lib.c (tabs to spaces)Dr. Matthias St. Pierre
2017-09-20Allow use of RSA-PSS certificates in TLS 1.2Dr. Stephen Henson
2017-09-15Provide getters for min/max proto versionChristian Heimes
2017-09-14Revert "GH614: Use memcpy()/strdup() when possible"Pauli
2017-09-08Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.David Benjamin
2017-08-31Enable the ability to use an external PSK for sending early_dataMatt Caswell