summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_locl.h
AgeCommit message (Expand)Author
2013-10-20Do not include a timestamp in the Client/ServerHello Random field.Nick Mathewson
2013-09-18Suite B support for DTLS 1.2Dr. Stephen Henson
2013-09-18Enable TLS 1.2 ciphers in DTLS 1.2.Dr. Stephen Henson
2013-09-18Provisional DTLS 1.2 support.Dr. Stephen Henson
2013-09-18Extend DTLS method macros.Dr. Stephen Henson
2013-09-18Use enc_flags when deciding protocol variations.Dr. Stephen Henson
2013-09-18Use appropriate versions of SSL3_ENC_METHODDr. Stephen Henson
2013-09-18DTLS revision.Dr. Stephen Henson
2013-07-03Trying cherrypick:Trevor
2013-02-06ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov
2013-02-06Timing fix mitigation for FIPS mode.Dr. Stephen Henson
2013-02-06Make CBC decoding constant time.Ben Laurie
2012-12-26Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-12-26perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-12-26Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson
2012-12-26check EC tmp key matches preferencesDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26Function tls1_check_ec_server_key is now redundant as we makeDr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-12-26Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson
2012-12-20oops, revertDr. Stephen Henson
2012-12-20apps/ocsp.cDr. Stephen Henson
2012-09-11Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie
2012-05-29RFC 5878 support.Ben Laurie
2012-04-24Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson
2012-04-06Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson
2012-04-06Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson
2012-04-06Tidy up EC parameter check code: instead of accessing internal structuresDr. Stephen Henson
2012-04-06Initial revision of ECC extension handling.Dr. Stephen Henson
2012-04-06New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson
2012-04-06Add support for distinct certificate chains per key type and per SSLDr. Stephen Henson
2012-04-06Backport: Revise ssl code to use CERT_PKEY structure when outputting a certif...Dr. Stephen Henson
2012-04-06Backport: tidy/enhance certificate chain output code (from HEAD)Dr. Stephen Henson
2012-04-06Backport support for fixed DH ciphersuites (from HEAD)Dr. Stephen Henson
2012-03-09PR: 2756Dr. Stephen Henson
2011-12-31PR: 2658Dr. Stephen Henson
2011-12-25PR: 2535Dr. Stephen Henson
2011-12-13SSL export fixes (from Adam Langley).Ben Laurie
2011-11-24Indent.Ben Laurie
2011-11-21move internal functions to ssl_locl.hDr. Stephen Henson
2011-11-15Add TLS exporter.Ben Laurie
2011-11-13Add Next Protocol Negotiation.Ben Laurie