summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_clnt.c
AgeCommit message (Expand)Author
2020-01-24Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libsslMatt Caswell
2020-01-19libssl: Eliminate as much use of EVP_PKEY_size() as possibleMatt Caswell
2019-10-09Explicitly test against NULL; do not use !p or similarRich Salz
2019-09-28Reorganize local header filesDr. Matthias St. Pierre
2019-06-03Defer sending a KeyUpdate until after pending writes are completeMatt Caswell
2019-04-29Collapse ssl3_state_st (s3) into ssl_stTodd Short
2019-03-06Adapt SSL_DEBUG to the new generic trace APIRichard Levitte
2019-03-05Don't write the tick_identity to the sessionMatt Caswell
2019-02-01Fix end-point shared secret for DTLS/SCTPMichael Tuexen
2019-01-08Don't artificially limit the size of the ClientHelloMatt Caswell
2018-12-15Use (D)TLS_MAX_VERSION_INTERNAL internallyKurt Roeckx
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte
2018-12-05Fix some SSL_export_keying_material() issuesMatt Caswell
2018-11-27Fix access zero memory if SSL_DEBUG is enabledPaul Yang
2018-10-30Don't call the client_cert_cb immediately in TLSv1.3Matt Caswell
2018-09-07Process KeyUpdate and NewSessionTicket messages after a close_notifyMatt Caswell
2018-08-07ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.Andy Polyakov
2018-08-06Ensure we send an alert on error when processing a ticketMatt Caswell
2018-07-13Use ssl_version_supported() when choosing server versionMatt Caswell
2018-07-03Remove TLSv1.3 tickets from the client cache as we use themMatt Caswell
2018-07-03Restore behaviour from commit 36ff232cf that was incorrectly removedMatt Caswell
2018-06-07Reformulate the if condition in tls_process_new_session_ticketMatt Caswell
2018-06-07Don't store the ticket nonce in the sessionMatt Caswell
2018-06-07Fix TLSv1.3 ticket noncesMatt Caswell
2018-05-17Change the default number of NewSessionTickets we send to 2Matt Caswell
2018-05-08Don't fail on an out-of-order CCS in DTLSMatt Caswell
2018-03-28Rewrite the X509->alert mapping codeRich Salz
2018-03-28Tolerate a Certificate using a non-supported group on server sideMatt Caswell
2018-03-27statem/statem_clnt.c: omit redundant check in tls_construct_client_hello.Philippe Antoine
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell
2018-02-01Fix some minor code nitsTodd Short
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-02-01Fix some instances of the wrong alert type being sentMatt Caswell
2018-01-25Add support for the TLS 1.3 signature_algorithms_cert extensionBenjamin Kaduk
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2018-01-22Move fprintf after assignment to avoid crash.Rich Salz
2017-12-28Don't flush the ClientHello if we're going to send early dataMatt Caswell
2017-12-14Issue a CCS from the client if we received an HRRMatt Caswell
2017-12-14Delay flush until after CCS with early_dataMatt Caswell
2017-12-14Update state machine to send CCS based on whether we did an HRRMatt Caswell
2017-12-14Merge HRR into ServerHelloMatt Caswell
2017-12-14Send a CCS from a client in an early_data handshakeMatt Caswell
2017-12-14Send a CCS from the client in a non-early_data handshakeMatt Caswell
2017-12-14Remove TLSv1.3 specific write transition for ClientHelloMatt Caswell
2017-12-14Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell
2017-12-14Update ServerHello to new draft-22 formatMatt Caswell
2017-12-07Consistent formatting for sizeof(foo)Rich Salz
2017-12-04Fix some formatting nitsMatt Caswell
2017-12-04Add some more cleanupsMatt Caswell