summaryrefslogtreecommitdiffstats
path: root/ssl/statem/extensions_srvr.c
AgeCommit message (Expand)Author
2018-03-19Fix no-pskMatt Caswell
2018-03-19Add an anti-replay mechanismMatt Caswell
2018-03-15Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()Matt Caswell
2018-03-15Add support for setting raw private HMAC keysMatt Caswell
2018-03-14Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell
2018-03-12Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cbBenjamin Saunders
2018-03-12Session Ticket app dataTodd Short
2018-03-09Give more information in the SSL_stateless return codeMatt Caswell
2018-03-09Fallback on old style PSK callbacks if the new style ones aren't presentMatt Caswell
2018-02-13Update copyright yearMatt Caswell
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-01-25Add support for the TLS 1.3 signature_algorithms_cert extensionBenjamin Kaduk
2018-01-24Updates following review of SSL_stateless() codeMatt Caswell
2018-01-24Add a timestamp to the cookieMatt Caswell
2018-01-24Fix the cookie/key_share extensions for use with SSL_stateless()Matt Caswell
2018-01-24Fix logic around when to send an HRR based on cookiesMatt Caswell
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2017-12-17Remove spaces at end of line in ssl/statemPaul Yang
2017-12-14Update state machine to send CCS based on whether we did an HRRMatt Caswell
2017-12-14Update ServerHello to new draft-22 formatMatt Caswell
2017-12-06Fix bug in TLSv1.3 PSK processingMatt Caswell
2017-12-04Add some more cleanupsMatt Caswell
2017-12-04Fix up a few places in the state machine that got missed with SSLfatal()Matt Caswell
2017-12-04Convert remaining functions in statem_srvr.c to use SSLfatal()Matt Caswell
2017-12-04Convert the state machine code to use SSLfatal()Matt Caswell
2017-11-05Implement Maximum Fragment Length TLS extension.FdaSilvaYY
2017-10-06Change curves to groups where relevantDr. Stephen Henson
2017-10-06Use separate functions for supported and peer groups listsDr. Stephen Henson
2017-09-26Rename tls1_get_curvelist.Dr. Stephen Henson
2017-09-26New function ssl_generate_param_groupDr. Stephen Henson
2017-09-26Replace tls1_ec_curve_id2nid.Dr. Stephen Henson
2017-09-22Store groups as uint16_tDr. Stephen Henson
2017-08-31Add server side sanity checks of SNI/ALPN for use with early_dataMatt Caswell
2017-08-31Enable the ability to use an external PSK for sending early_dataMatt Caswell
2017-08-11Fix some Typos and indentsFdaSilvaYY
2017-08-09Don't modify resumed session objectsBenjamin Kaduk
2017-07-18Fix early_data with an HRRMatt Caswell
2017-07-07Do not allow non-dhe kex_modes by defaultMatt Caswell
2017-06-21Fix some bugs in the TLSv1.3 PSK codeMatt Caswell
2017-06-21Add TLSv1.3 server side external PSK supportMatt Caswell
2017-06-16Move ciphersuite selection before session resumption in TLSv1.3Matt Caswell
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell
2017-05-17Fail if we receive a response to an extension that we didn't requestMatt Caswell
2017-05-11Send a missing_extension alert if key_share/supported groups not presentMatt Caswell
2017-05-11Fix some alert codesMatt Caswell
2017-05-10Fix 'no-ec'Richard Levitte
2017-05-08Updates to supported_groups following review feedbackMatt Caswell
2017-05-08Send the supported_groups extension in EE where applicableMatt Caswell
2017-04-19Fix minor compiler issues.Todd Short