summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_lib.c
AgeCommit message (Expand)Author
2020-08-13Avoid segfault in SSL_export_keying_material if there is no sessionTomas Mraz
2020-07-01Free pre_proc_exts in SSL_free()MiƂosz Kaniewski
2020-06-30Don't attempt to duplicate the BIO state in SSL_dupMatt Caswell
2020-06-30Ensure that SSL_dup copies the min/max protocol versionMatt Caswell
2020-03-17Update copyright yearMatt Caswell
2020-01-30Fix SSL_get_servername() and SNI behaviourMatt Caswell
2019-09-27Reorganize local header filesDr. Matthias St. Pierre
2019-07-16Fix SSL_CTX_set_session_id_context() docsTodd Short
2019-06-26Move 'shared_sigalgs' from cert_st to ssl_stBenjamin Kaduk
2019-06-18Following the previous 2 commits also move ecpointformats out of sessionMatt Caswell
2019-06-18Fix a race condition in ciphers handlingMatt Caswell
2019-06-18Fix a race condition in supported groups handlingMatt Caswell
2019-05-21Change SSL parameter SSL_session_reused constArne Schwabe
2019-04-19Check if num is 0 before trying to malloc memory. Otherwise for client hellos...dyrock
2019-02-26Update copyright yearMatt Caswell
2019-02-14Ignore cipher suites when setting cipher listSam Roberts
2019-02-05Make some simple getters take const SSL/SSL_CTXSam Roberts
2018-11-12Separate ca_names handling for client and serverMatt Caswell
2018-11-06Fix return formatting.Pauli
2018-11-06Cleanse the key log buffer.Pauli
2018-09-19Reset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()Benjamin Kaduk
2018-09-07Do not reset SNI data in SSL_do_handshake()Matt Caswell
2018-09-07Simplify SSL_get_servername() to avoid session referencesBen Kaduk
2018-08-20Add support for SSL_CTX_set_post_handshake_auth()Matt Caswell
2018-08-20Change Post Handshake auth so that it is opt-inMatt Caswell
2018-08-07ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.Andy Polyakov
2018-07-26Improve backwards compat for SSL_get_servername()Benjamin Kaduk
2018-07-20Normalize SNI hostname handling for SSL and SSL_SESSIONBenjamin Kaduk
2018-07-06Introduce the recv_max_early_data settingMatt Caswell
2018-07-02Add setters to set the early_data callbackMatt Caswell
2018-07-02Make the anti-replay feature optionalMatt Caswell
2018-06-26Respect SSL_OP_NO_TICKET in TLSv1.3Matt Caswell
2018-05-22Enable SSL_MODE_AUTO_RETRY by defaultKurt Roeckx
2018-05-21Don't cache stateless tickets in TLSv1.3Matt Caswell
2018-05-17Change the default number of NewSessionTickets we send to 2Matt Caswell
2018-05-17Enable the ability to set the number of TLSv1.3 session tickets sentMatt Caswell
2018-05-11Flush server side unauthenticated writesMatt Caswell
2018-05-02Fix SSL_get_shared_ciphers()Matt Caswell
2018-05-01Fix regression with session cache use by clientsBenjamin Kaduk
2018-04-17Fix assertion failure in SSL_set_bio()Matt Caswell
2018-04-04Fix configuration of TLSv1.3 ciphersuitesMatt Caswell
2018-04-03Set error code on alloc failuresRich Salz
2018-04-02Use the private RNG for data that is not publicKurt Roeckx
2018-03-27Allow NULL for some _free routines.Rich Salz
2018-03-27Remove some code for a contributor that we cannot findMatt Caswell
2018-03-20Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEERBenjamin Kaduk
2018-03-19Place ticket keys into secure memoryTodd Short
2018-03-19Apply system_default configuration on SSL_CTX_new().Tomas Mraz
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-03-16RAND_DRBG: add a function for setting the default DRBG type and flagsDr. Matthias St. Pierre