summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_lib.c
AgeCommit message (Expand)Author
2018-04-20Make sure SSL_in_init() returns 0 at SSL_CB_HANDSHAKE_DONEMatt Caswell
2018-04-17Call the info callback on all handshake done eventsMatt Caswell
2018-03-28Rewrite the X509->alert mapping codeRich Salz
2018-03-21Don't wait for dry at the end of a handshakeMatt Caswell
2018-03-15Only update the server session cache when the session is readyMatt Caswell
2018-02-09Don't calculate the Finished MAC twiceMatt Caswell
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-01-30Move decisions about whether to accept reneg into the state machineMatt Caswell
2018-01-24Don't send unexpected_message if we receive CCS while statelessMatt Caswell
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2017-12-28Don't flush the ClientHello if we're going to send early dataMatt Caswell
2017-12-14Update state machine to send CCS based on whether we did an HRRMatt Caswell
2017-12-14Fix an HRR bugMatt Caswell
2017-12-14Merge HRR into ServerHelloMatt Caswell
2017-12-14Update ServerHello to new draft-22 formatMatt Caswell
2017-12-04Add some more cleanupsMatt Caswell
2017-12-04Convert more functions in ssl/statem/statem.c to use SSLfatal()Matt Caswell
2017-12-04Convert remaining functions in statem_clnt.c to use SSLfatal()Matt Caswell
2017-12-04Convert the state machine code to use SSLfatal()Matt Caswell
2017-12-04Replace some usage of SSLerr with SSLfatal()Matt Caswell
2017-11-13Resolve warnings in VC-WIN32 build, which allows to add /WX.Andy Polyakov
2017-10-30Normalize on session_ctx for stats where possibleBenjamin Kaduk
2017-10-30Use atomics for SSL_CTX statisticsBenjamin Kaduk
2017-10-18Remove parentheses of return.KaoruToda
2017-10-09Since return is inconsistent, I removed unnecessary parentheses andKaoruToda
2017-09-22Store groups as uint16_tDr. Stephen Henson
2017-09-01ssl/statem/*.c: address "enum mixed with another type" warnings.Andy Polyakov
2017-08-03Move ossl_assertMatt Caswell
2017-08-01Fix new_session_cb calls in TLSv1.3Matt Caswell
2017-07-13Use cert tables instead of X509_certificate_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cert_typeDr. Stephen Henson
2017-07-03Fix potential crash in tls_construct_finished.Bernd Edlinger
2017-06-23Fix another EVP_DigestVerify() instanceMatt Caswell
2017-06-21Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.Dr. Stephen Henson
2017-06-21Convert key exchange to one shot callDr. Stephen Henson
2017-06-21Handle signature algorithms with no associated digestDr. Stephen Henson
2017-06-21Add index for ED25519Dr. Stephen Henson
2017-06-20Modify Sun copyright to follow OpenSSL styleRich Salz
2017-06-09fix check of broken implementations of GOST ciphersuitesPichulin Dmitrii
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short
2017-05-23Don't use one shot API for SSLv3.Dr. Stephen Henson
2017-05-22Convert existing usage of assert() to ossl_assert() in libsslMatt Caswell
2017-05-22Replace instances of OPENSSL_assert() with soft asserts in libsslMatt Caswell
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell
2017-05-17Fail if we receive a response to an extension that we didn't requestMatt Caswell
2017-05-11Fix gcc-7 warnings.Bernd Edlinger
2017-05-11Add some extra comments following alert changesMatt Caswell
2017-05-11Send an illegal parameter alert if the update type in a KeyUpdate is wrongMatt Caswell
2017-05-11Add EVP_DigestSign and EVP_DigesVerifyDr. Stephen Henson
2017-05-08Send the supported_groups extension in EE where applicableMatt Caswell