summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_clnt.c
AgeCommit message (Expand)Author
2021-07-12Avoid "excessive message size" for session ticketsMatt Caswell
2021-05-04Use OCSP-specific error code for clarityDmitry Belyavskiy
2021-03-25Ensure buffer/length pairs are always in syncMatt Caswell
2021-03-18ssl: fix coverity 1451515: out of bounds memory accessPauli
2021-02-16Update copyright yearMatt Caswell
2021-02-09Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk
2020-12-08Update copyright yearMatt Caswell
2020-10-20Avoid potential doublefree on dh object assigned to EVP_PKEYTomas Mraz
2020-10-16Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callbackMatt Caswell
2019-09-27Reorganize local header filesDr. Matthias St. Pierre
2019-06-03Defer sending a KeyUpdate until after pending writes are completeMatt Caswell
2019-03-05Don't write the tick_identity to the sessionMatt Caswell
2019-02-26Update copyright yearMatt Caswell
2019-02-01Fix end-point shared secret for DTLS/SCTPMichael Tuexen
2019-01-08Don't artificially limit the size of the ClientHelloMatt Caswell
2018-12-05Fix some SSL_export_keying_material() issuesMatt Caswell
2018-11-27Fix access zero memory if SSL_DEBUG is enabledPaul Yang
2018-10-30Don't call the client_cert_cb immediately in TLSv1.3Matt Caswell
2018-09-07Process KeyUpdate and NewSessionTicket messages after a close_notifyMatt Caswell
2018-08-07ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.Andy Polyakov
2018-08-06Ensure we send an alert on error when processing a ticketMatt Caswell
2018-07-13Use ssl_version_supported() when choosing server versionMatt Caswell
2018-07-03Remove TLSv1.3 tickets from the client cache as we use themMatt Caswell
2018-07-03Restore behaviour from commit 36ff232cf that was incorrectly removedMatt Caswell
2018-06-07Reformulate the if condition in tls_process_new_session_ticketMatt Caswell
2018-06-07Don't store the ticket nonce in the sessionMatt Caswell
2018-06-07Fix TLSv1.3 ticket noncesMatt Caswell
2018-05-17Change the default number of NewSessionTickets we send to 2Matt Caswell
2018-05-08Don't fail on an out-of-order CCS in DTLSMatt Caswell
2018-03-28Rewrite the X509->alert mapping codeRich Salz
2018-03-28Tolerate a Certificate using a non-supported group on server sideMatt Caswell
2018-03-27statem/statem_clnt.c: omit redundant check in tls_construct_client_hello.Philippe Antoine
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell
2018-02-01Fix some minor code nitsTodd Short
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-02-01Fix some instances of the wrong alert type being sentMatt Caswell
2018-01-25Add support for the TLS 1.3 signature_algorithms_cert extensionBenjamin Kaduk
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2018-01-22Move fprintf after assignment to avoid crash.Rich Salz
2017-12-28Don't flush the ClientHello if we're going to send early dataMatt Caswell
2017-12-14Issue a CCS from the client if we received an HRRMatt Caswell
2017-12-14Delay flush until after CCS with early_dataMatt Caswell
2017-12-14Update state machine to send CCS based on whether we did an HRRMatt Caswell
2017-12-14Merge HRR into ServerHelloMatt Caswell
2017-12-14Send a CCS from a client in an early_data handshakeMatt Caswell
2017-12-14Send a CCS from the client in a non-early_data handshakeMatt Caswell
2017-12-14Remove TLSv1.3 specific write transition for ClientHelloMatt Caswell
2017-12-14Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell
2017-12-14Update ServerHello to new draft-22 formatMatt Caswell