summaryrefslogtreecommitdiffstats
path: root/ssl/statem/extensions_clnt.c
AgeCommit message (Expand)Author
2024-06-27Add ALPN validation in the clientMatt Caswell
2024-06-27More correctly handle a selected_len of 0 when processing NPNMatt Caswell
2022-10-19Ensure that the key share group is allowed for our protocol versionMatt Caswell
2022-08-19Coverity 1508534 & 1508540: misuses of time_tPauli
2022-03-15Update copyright yearMatt Caswell
2022-03-03Add back check for the DH public key sizeTomas Mraz
2021-11-29No EtM for GOST ciphers in TLS 1.2Dmitry Belyavskiy
2021-11-04Fix a memory leak in tls_parse_stoc_key_shareBernd Edlinger
2021-06-02tls: remove TODOsPauli
2021-06-01Rename all getters to use get/get0 in nameTomas Mraz
2021-05-15Promote SSL_get_negotiated_group() for non-TLSv1.3Benjamin Kaduk
2021-03-25Ensure buffer/length pairs are always in syncMatt Caswell
2021-03-08Fix the check for suitable groups and TLSv1.3Matt Caswell
2021-02-18Update copyright yearMatt Caswell
2021-02-05Remove OPENSSL_NO_EC guards from libsslMatt Caswell
2021-02-05Make supported_groups code independent of EC and DHMatt Caswell
2021-02-05Ensure default supported groups works even with no-ec and no-dhMatt Caswell
2020-12-03tag unused function arguments as ossl_unusedPauli
2020-11-11SSL: refactor all SSLfatal() callsRichard Levitte
2020-10-20Rename EVP_PKEY_set1_tls_encodedpoint to EVP_PKEY_set1_encoded_public_keyMatt Caswell
2020-10-14[ssl] Support ssl_decapsulate on client sideNicola Tuveri
2020-09-13Fix safestack issues in ocsp.hMatt Caswell
2020-09-13Fix safestack issues in ssl.hMatt Caswell
2020-06-19Don't send supported groups if no-ec and we're doing DTLSMatt Caswell
2020-06-19Provider a better error message if we fail to copy parametersMatt Caswell
2020-06-19Modify libssl to discover supported groups based on available providersMatt Caswell
2020-06-05Don't downgrade keys in libsslMatt Caswell
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2020-04-23Update copyright yearMatt Caswell
2020-04-08TLS: Temporarly downgrade newly generated EVP_PKEYs to legacyRichard Levitte
2020-02-06Explicitly fetch ciphers and digests in libsslMatt Caswell
2019-09-28Reorganize local header filesDr. Matthias St. Pierre
2019-07-25Don't generate an unnecessary Diffie-Hellman key in TLS 1.3 clients.David Benjamin
2019-06-18Following the previous 2 commits also move ecpointformats out of sessionMatt Caswell
2019-06-17Allow TLSv1.3 in a no-ec buildMatt Caswell
2019-06-12TLS1.3 FFDHE Supportraja-ashok
2019-04-29Collapse ssl3_state_st (s3) into ssl_stTodd Short
2019-03-05Don't write the tick_identity to the sessionMatt Caswell
2019-02-15Add option to disable Extended Master SecretTodd Short
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte
2018-11-08Ignore disabled ciphers when deciding if we are using ECCMatt Caswell
2018-08-22Use the same min-max version range on the client consistentlyMatt Caswell
2018-08-20Change Post Handshake auth so that it is opt-inMatt Caswell
2018-08-15Update code for the final RFC version of TLSv1.3 (RFC8446)Matt Caswell
2018-05-15Suport TLSv1.3 draft 28Matt Caswell
2018-03-27Assert that alpn_selected is NULL before we assign itMatt Caswell
2018-03-21Fix stack-use-after-scopePeter Wu
2018-03-19Fix no-pskMatt Caswell
2018-03-14Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell
2018-03-09Fallback on old style PSK callbacks if the new style ones aren't presentMatt Caswell