summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_srvr.c
AgeCommit message (Expand)Author
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte
2018-12-05Fix some SSL_export_keying_material() issuesMatt Caswell
2018-11-12Separate ca_names handling for client and serverMatt Caswell
2018-10-19Fix a DTLS memory leakMatt Caswell
2018-10-17Add a missing check on s->s3->tmp.pkeyMansour Ahmadi
2018-09-21Delay setting the sig algs until after the cert_cb has been calledMatt Caswell
2018-09-04Ignore EPIPE when sending NewSessionTickets in TLSv1.3Matt Caswell
2018-08-08Tolerate encrypted or plaintext alertsMatt Caswell
2018-08-08Fix a missing call to SSLfatalMatt Caswell
2018-07-17Don't remove sessions from the cache during PHA in TLSv1.3Matt Caswell
2018-07-02Make the anti-replay feature optionalMatt Caswell
2018-07-02Fix a NULL ptr deref in error path in tls_process_cke_dhe()Matt Caswell
2018-06-26Use stateful tickets if we are doing anti-replayMatt Caswell
2018-06-26Respect SSL_OP_NO_TICKET in TLSv1.3Matt Caswell
2018-06-26Restructure the ticket construction codeMatt Caswell
2018-06-25Don't change a session once its in the cacheMatt Caswell
2018-06-07Don't store the ticket nonce in the sessionMatt Caswell
2018-06-07Fix TLSv1.3 ticket noncesMatt Caswell
2018-05-17Change the default number of NewSessionTickets we send to 2Matt Caswell
2018-05-17Enable the ability to set the number of TLSv1.3 session tickets sentMatt Caswell
2018-05-11Rework the decrypt ticket callbackMatt Caswell
2018-05-11Fix ticket callbacks in TLSv1.3Matt Caswell
2018-05-08Don't fail on an out-of-order CCS in DTLSMatt Caswell
2018-04-17Check the return from EVP_PKEY_get0_DH()Matt Caswell
2018-04-17Make sure info callback knows about all handshake start eventsMatt Caswell
2018-04-02Use the private RNG for data that is not publicKurt Roeckx
2018-03-30Revert commit 4a56d9a2Matt Caswell
2018-03-28Rewrite the X509->alert mapping codeRich Salz
2018-03-27Assert that alpn_selected is NULL before we assign itMatt Caswell
2018-03-19Place ticket keys into secure memoryTodd Short
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-03-19Don't update the session cache when processing a client certificate in TLSv1.3Matt Caswell
2018-03-19Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3Matt Caswell
2018-03-15Only update the server session cache when the session is readyMatt Caswell
2018-03-12Session Ticket app dataTodd Short
2018-02-28Tell the ciphers which DRBG to use for generating random bytes.Kurt Roeckx
2018-02-23Remove unreachable statement.Pauli
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-01-30Move decisions about whether to accept reneg into the state machineMatt Caswell
2018-01-24Fix logic around when to send an HRR based on cookiesMatt Caswell
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2017-12-28Don't flush the ClientHello if we're going to send early dataMatt Caswell
2017-12-26Remove outdated commentsPaul Yang
2017-12-17Remove spaces at end of line in ssl/statemPaul Yang
2017-12-14Fix server side HRR flushingMatt Caswell
2017-12-14Send supported_versions in an HRRMatt Caswell
2017-12-14Update state machine to send CCS based on whether we did an HRRMatt Caswell
2017-12-14Merge HRR into ServerHelloMatt Caswell
2017-12-14Send a CCS after ServerHello in TLSv1.3 if using middlebox compat modeMatt Caswell
2017-12-14Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell