summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_clnt.c
AgeCommit message (Expand)Author
2017-04-07Move the extensions context codes into the public APIMatt Caswell
2017-03-29More typo fixesFdaSilvaYY
2017-03-28Fix a few more typosFdaSilvaYY
2017-03-24Add client side support for TLSv1.3 downgrade mechanismMatt Caswell
2017-03-24Add server side support for TLSv1.3 downgrade mechanismMatt Caswell
2017-03-17Implement certificate_authorities extensionDr. Stephen Henson
2017-03-17Support draft-19 TLS certificate request formatDr. Stephen Henson
2017-03-17Move parsing and construction of CA names to separate functionsDr. Stephen Henson
2017-03-16HelloRetryRequest updates for draft-19Matt Caswell
2017-03-16Update end of early data processing for draft-19Matt Caswell
2017-03-07Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundaryMatt Caswell
2017-03-02Various fixes required to allow SSL_write/SSL_read during early dataMatt Caswell
2017-03-02Enable the server to call SSL_write() without stopping the ability to call SS...Matt Caswell
2017-03-02Enable the client to call SSL_read() without stopping the ability to call SSL...Matt Caswell
2017-03-02Introduce a new early_data state in the state machineMatt Caswell
2017-03-02Remove some TLSv1.3 TODOs that are no longer relevantMatt Caswell
2017-03-02Construct the server side early_data extensionMatt Caswell
2017-03-02Provide an SSL_read_early() function for reading early dataMatt Caswell
2017-03-02Change the cipher state when sending early dataMatt Caswell
2017-03-02Provide functions to write early dataMatt Caswell
2017-03-02Ensure that we never select compression in TLSv1.3Matt Caswell
2017-03-01Remove some obsolete/obscure internal define switches:Emilia Kasper
2017-02-28Remove some commented out code in libsslMatt Caswell
2017-02-27Initial incomplete TLS 1.3 certificate request support.Dr. Stephen Henson
2017-02-24Tidy up certificate type handling.Dr. Stephen Henson
2017-02-23Let ssl_get_cipher_by_char yield not-valid ciphersBenjamin Kaduk
2017-02-23output number of exts from tls_collect_extensions()Benjamin Kaduk
2017-02-21remove md array: it is not used any more.Dr. Stephen Henson
2017-02-17Updates following review feedbackMatt Caswell
2017-02-17Actually update the keys when a KeyUpdate message is sent or receivedMatt Caswell
2017-02-17If we receive an "update_requested" KeyUpdate then respond with a KeyUpdateMatt Caswell
2017-02-17Add the ability for a client to send a KeyUpdate messageMatt Caswell
2017-02-17Add the ability for a client to receive a KeyUpdate messageMatt Caswell
2017-02-16Use tls_choose_sigalg for client auth.Dr. Stephen Henson
2017-02-15Use cert_index and sigalgDr. Stephen Henson
2017-02-14Various style fixes following review feedbackMatt Caswell
2017-02-14Add client side support for parsing Hello Retry RequestMatt Caswell
2017-01-31Remove peer_md and use peer_sigalg instead.Dr. Stephen Henson
2017-01-31Don't check certificate type against ciphersuite for TLS 1.3Dr. Stephen Henson
2017-01-30Free up the memory for the NewSessionTicket extensionsMatt Caswell
2017-01-30fix style issuesDr. Stephen Henson
2017-01-30Store peer signature type.Dr. Stephen Henson
2017-01-30use RSA_PSS_SALTLEN_DIGEST constantDr. Stephen Henson
2017-01-30Expand comment in tls_process_hello_req()Matt Caswell
2017-01-30Miscellaneous style tweaks based on feedback receivedMatt Caswell
2017-01-30Ensure the al variable is properly ininitialised in all code pathsMatt Caswell
2017-01-30Ensure the age_add variable is properly initialisedMatt Caswell
2017-01-30Add support for client side parsing of the PSK extensionMatt Caswell
2017-01-30Add support for the age_add fieldMatt Caswell
2017-01-30Never send a session id in TLS1.3Matt Caswell