summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_clnt.c
AgeCommit message (Expand)Author
2017-12-07Consistent formatting for sizeof(foo)Rich Salz
2017-12-04Fix some formatting nitsMatt Caswell
2017-12-04Add some more cleanupsMatt Caswell
2017-12-04Assert that SSLfatal() only gets called onceMatt Caswell
2017-12-04Fix up a few places in the state machine that got missed with SSLfatal()Matt Caswell
2017-12-04Convert remaining functions in statem_clnt.c to use SSLfatal()Matt Caswell
2017-12-04Convert the state machine code to use SSLfatal()Matt Caswell
2017-10-30Normalize on session_ctx for stats where possibleBenjamin Kaduk
2017-10-30Use atomics for SSL_CTX statisticsBenjamin Kaduk
2017-10-18Remove parentheses of return.KaoruToda
2017-10-16Sanity check the HRR version fieldMatt Caswell
2017-10-16Don't do version neg on an HRRMatt Caswell
2017-10-10Don't change client random in Client Hello in its second flightTatsuhiro Tsujikawa
2017-10-06Merge tls1_check_curve into tls1_check_group_idDr. Stephen Henson
2017-10-04Remove an incorrect commentMatt Caswell
2017-09-26New function ssl_generate_param_groupDr. Stephen Henson
2017-09-26Replace tls1_ec_curve_id2nid.Dr. Stephen Henson
2017-09-14Fix no-ec no-dh buildBenjamin Kaduk
2017-09-01ssl/statem/*.c: address "enum mixed with another type" warnings.Andy Polyakov
2017-08-03Add a DRBG to each SSL objectRich Salz
2017-08-01Fix new_session_cb calls in TLSv1.3Matt Caswell
2017-07-21Support converting cipher name to RFC name and vice versaPaul Yang
2017-07-18Tolerate a zero length ticket nonceMatt Caswell
2017-07-18Fix early_data with an HRRMatt Caswell
2017-07-13Use cert tables instead of X509_certificate_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cipher_get_cert_index.Dr. Stephen Henson
2017-07-07Send and receive the ticket_nonce field in a NewSessionTicketMatt Caswell
2017-07-03Fix a crash in tls_construct_client_certificate.Bernd Edlinger
2017-06-23Treat all failures from EVP_DigestVerify() as a bad signatureMatt Caswell
2017-06-21Allow Ed25519 in TLS 1.2Dr. Stephen Henson
2017-06-21Convert key exchange to one shot callDr. Stephen Henson
2017-06-21Merge Nokia copyright notice into standardRich Salz
2017-06-20Modify Sun copyright to follow OpenSSL styleRich Salz
2017-06-16Allow the server to change the ciphersuite on resumeMatt Caswell
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell
2017-05-11Fix gcc-7 warnings.Bernd Edlinger
2017-05-11Add some checks for trailing data after extension blocksMatt Caswell
2017-05-11Ensure we fail with a decode error alert if the server sends and empty CertMatt Caswell
2017-05-11Fix more alert codesMatt Caswell
2017-05-09Verify that if we have an HRR then something will changeMatt Caswell
2017-04-26Don't treat PACKET_remaining() as booleanTatsuhiro Tsujikawa
2017-04-26Call init and finalization functions per extension messageTatsuhiro Tsujikawa
2017-04-26Always duplicate the session on NewSessionTicket in TLSv1.3Matt Caswell
2017-04-26Add support for SSL_SESSION_is_resumable()Matt Caswell
2017-04-26Remove TLS1.3 TODO around testing for session id lengthMatt Caswell
2017-04-26Add a ciphersuite config sanity check for clientsMatt Caswell
2017-04-25Remove special case code for SCTP reneg handlingMatt Caswell
2017-04-24Don't fail the connection in SSLv3 if server selects ECDHEMatt Caswell
2017-04-24if log fails, avoid pms getting double freeRich Salz