summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_srvr.c
AgeCommit message (Expand)Author
2018-08-14Update copyright yearMatt Caswell
2018-07-03Don't create an invalid CertificateRequestMatt Caswell
2018-07-02Fix a NULL ptr deref in error path in tls_process_cke_dhe()Matt Caswell
2018-05-11Don't fail on an out-of-order CCS in DTLSMatt Caswell
2018-04-18Check the return from EVP_PKEY_get0_DH()Matt Caswell
2017-06-09fix broken implementations of GOST ciphersuitesRich Salz
2017-04-25Remove special case code for SCTP reneg handlingMatt Caswell
2017-03-30More typo fixesFdaSilvaYY
2017-02-05Combined patch against OpenSSL_1_1_0-stable branch for the following issues:Bernd Edlinger
2017-02-05Majority rules, use session_ctx vs initial_ctxTodd Short
2017-01-28Correct pointer to be freedRichard Levitte
2017-01-26Use correct signature algorithm list when sending or checking.Dr. Stephen Henson
2017-01-24Do not overallocate for tmp.ciphers_rawBenjamin Kaduk
2017-01-24Fix SSL_get0_raw_cipherlist()Matt Caswell
2017-01-23Fix SSL_VERIFY_CLIENT_ONCEMatt Caswell
2016-11-09When no SRP identity is found, no error was reported server sideEasySec
2016-09-29Fix missing NULL checks in NewSessionTicket constructionMatt Caswell
2016-08-30Ensure the CertStatus message adds a DTLS message header where neededMatt Caswell
2016-08-22Fix DTLS buffered message DoS attackMatt Caswell
2016-08-18Indent ssl/Emilia Kasper
2016-08-15Fix no-ecDr. Stephen Henson
2016-08-13Modify TLS support for new X25519 API.Dr. Stephen Henson
2016-08-05spelling fixes, just comments and readme.klemens
2016-07-25zero pad DHE public key in ServerKeyExchange message for interoprussor
2016-07-22Send alert for bad DH CKEDr. Stephen Henson
2016-07-20Fix a few if(, for(, while( inside code.FdaSilvaYY
2016-07-20Send alert on CKE error.Dr. Stephen Henson
2016-07-19Fix two bugs in clienthello processingEmilia Kasper
2016-07-19Fixup a few SSLerr calls in ssl/statem/Richard Levitte
2016-07-18Refactor Identity Hint handlingMatt Caswell
2016-07-18Errors fix up following break up of CKE processingMatt Caswell
2016-07-18Remove the f_err lable from tls_process_client_key_exchange()Matt Caswell
2016-07-18Split out GOST from process CKE codeMatt Caswell
2016-07-18Split out ECDHE from process CKE codeMatt Caswell
2016-07-18Split out DHE from process CKE codeMatt Caswell
2016-07-18Split out PSK preamble and RSA from process CKE codeMatt Caswell
2016-07-18Reduce the scope of some variables in tls_process_client_key_exchange()Matt Caswell
2016-07-18Fix formatting in statem_srvr.c based on review feedbackMatt Caswell
2016-07-18Try and make the transition tests for CKE message clearerMatt Caswell
2016-07-18Make sure we call ssl3_digest_cached_records() when necessaryMatt Caswell
2016-07-18Fix SSLv3 alert if no Client Ceritifcate sent after a request for oneMatt Caswell
2016-07-01Avoid an overflow in constructing the ServerKeyExchange messageMatt Caswell
2016-06-21Make RSA key exchange code actually constant-time.David Benjamin
2016-06-15Deal with the consequences of constifying gettersRichard Levitte
2016-06-09Fix session ticket and SNITodd Short
2016-06-03Handle a memory allocation failure in ssl3_init_finished_mac()Matt Caswell
2016-05-17Copyright consolidation 01/10Rich Salz
2016-05-17Fix some out of date commentsMatt Caswell
2016-05-16session tickets: use more sizeofKurt Roeckx
2016-05-16Use AES256 for the default encryption algoritm for TLS session ticketsTJ Saunders