summaryrefslogtreecommitdiffstats
path: root/ssl/statem/extensions.c
AgeCommit message (Expand)Author
2018-03-14Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell
2018-03-09Reuse extension_is_relevant() in should_add_extension()Benjamin Kaduk
2018-03-09Tolerate TLSv1.3 PSKs that are a different size to the hash sizeMatt Caswell
2018-03-05Fix status_request and SCT extensionsMatt Caswell
2018-02-15If s->ctx is NULL then this is an internal errorMatt Caswell
2018-02-14Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitableMatt Caswell
2018-02-01Fix some minor code nitsTodd Short
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-01-25Add support for the TLS 1.3 signature_algorithms_cert extensionBenjamin Kaduk
2018-01-24Updates following review of SSL_stateless() codeMatt Caswell
2018-01-24Fix logic around when to send an HRR based on cookiesMatt Caswell
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2018-01-09Update copyright years on all files merged since Jan 1st 2018Richard Levitte
2018-01-03Permit the "supported_groups" extension in ServerHellosBenjamin Kaduk
2017-12-17Remove spaces at end of line in ssl/statemPaul Yang
2017-12-14Make sure supported_versions appears in an HRR tooMatt Caswell
2017-12-14Update state machine to send CCS based on whether we did an HRRMatt Caswell
2017-12-14Update ServerHello to new draft-22 formatMatt Caswell
2017-12-04Add some more cleanupsMatt Caswell
2017-12-04Fix up a few places in the state machine that got missed with SSLfatal()Matt Caswell
2017-12-04Convert the state machine code to use SSLfatal()Matt Caswell
2017-11-21If a server is not acknowledging SNI then don't reject early_dataMatt Caswell
2017-11-05Implement Maximum Fragment Length TLS extension.FdaSilvaYY
2017-10-30Provide SSL_CTX.stats.sess_accept for switched ctxsBenjamin Kaduk
2017-10-16Don't do version neg on an HRRMatt Caswell
2017-10-12Fix bug where early_data does not work if no SNI callback is presentMatt Caswell
2017-10-06Change curves to groups where relevantDr. Stephen Henson
2017-10-06Use separate functions for supported and peer groups listsDr. Stephen Henson
2017-10-04Session resume broken switching contextsTodd Short
2017-09-26Rename tls1_get_curvelist.Dr. Stephen Henson
2017-09-22Store groups as uint16_tDr. Stephen Henson
2017-09-07Restore historical behavior for absent ServerHello extensionsBenjamin Kaduk
2017-08-31Client side sanity check of ALPN after server has accepted early_dataMatt Caswell
2017-08-31Add server side sanity checks of SNI/ALPN for use with early_dataMatt Caswell
2017-08-31Enable the ability to use an external PSK for sending early_dataMatt Caswell
2017-08-30e_os.h removal from other headers and source files.Pauli
2017-08-18Reorder extensions to put SigAlgs lastTodd Short
2017-08-15Move ALPN handling from finalizer to delayed callBenjamin Kaduk
2017-08-11Fix some Typos and indentsFdaSilvaYY
2017-07-31Fix SSL_set_tlsext_debug_callback/-tlsextdebugTodd Short
2017-07-18Tolerate a zero length ticket nonceMatt Caswell
2017-07-07Update the early_secret generation to use the new ticket_nonce fieldMatt Caswell
2017-07-07Update tls13_hkdf_expand() to take the length of the dataMatt Caswell
2017-06-21Add TLSv1.3 client side external PSK supportMatt Caswell
2017-06-21Add TLSv1.3 server side external PSK supportMatt Caswell
2017-06-12Add SSL_early_get1_extensions_present()Benjamin Kaduk
2017-06-09Fix a bundle of trailing spaces in several filesPaul Yang
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell
2017-05-17Allow a missing sig algs extension if resumingMatt Caswell
2017-05-17Add a new unsolicited extension error code and add enum tagMatt Caswell