summaryrefslogtreecommitdiffstats
path: root/ssl/statem/statem_srvr.c
AgeCommit message (Expand)Author
2020-01-24Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libsslMatt Caswell
2020-01-19libssl: Eliminate as much use of EVP_PKEY_size() as possibleMatt Caswell
2019-12-13Parse large GOST ClientKeyExchange messagesDmitry Belyavskiy
2019-12-05Move constant time RSA code out of libsslMatt Caswell
2019-09-28Reorganize local header filesDr. Matthias St. Pierre
2019-06-26Revert "Delay setting the sig algs until after the cert_cb has been called"Benjamin Kaduk
2019-06-18Fix a race condition in ciphers handlingMatt Caswell
2019-06-03Defer sending a KeyUpdate until after pending writes are completeMatt Caswell
2019-04-29Collapse ssl3_state_st (s3) into ssl_stTodd Short
2019-03-28conn_is_closed should return 1 if get_last_sys_error is WSAECONNRESETPaul Monson
2019-03-06Adapt CIPHER_DEBUG to the new generic trace APIRichard Levitte
2019-02-14Don't signal SSL_CB_HANDSHAKE_START for TLSv1.3 post-handshake messagesMatt Caswell
2019-02-01Fix end-point shared secret for DTLS/SCTPMichael Tuexen
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte
2018-12-05Fix some SSL_export_keying_material() issuesMatt Caswell
2018-11-12Separate ca_names handling for client and serverMatt Caswell
2018-10-19Fix a DTLS memory leakMatt Caswell
2018-10-17Add a missing check on s->s3->tmp.pkeyMansour Ahmadi
2018-09-21Delay setting the sig algs until after the cert_cb has been calledMatt Caswell
2018-09-04Ignore EPIPE when sending NewSessionTickets in TLSv1.3Matt Caswell
2018-08-08Tolerate encrypted or plaintext alertsMatt Caswell
2018-08-08Fix a missing call to SSLfatalMatt Caswell
2018-07-17Don't remove sessions from the cache during PHA in TLSv1.3Matt Caswell
2018-07-02Make the anti-replay feature optionalMatt Caswell
2018-07-02Fix a NULL ptr deref in error path in tls_process_cke_dhe()Matt Caswell
2018-06-26Use stateful tickets if we are doing anti-replayMatt Caswell
2018-06-26Respect SSL_OP_NO_TICKET in TLSv1.3Matt Caswell
2018-06-26Restructure the ticket construction codeMatt Caswell
2018-06-25Don't change a session once its in the cacheMatt Caswell
2018-06-07Don't store the ticket nonce in the sessionMatt Caswell
2018-06-07Fix TLSv1.3 ticket noncesMatt Caswell
2018-05-17Change the default number of NewSessionTickets we send to 2Matt Caswell
2018-05-17Enable the ability to set the number of TLSv1.3 session tickets sentMatt Caswell
2018-05-11Rework the decrypt ticket callbackMatt Caswell
2018-05-11Fix ticket callbacks in TLSv1.3Matt Caswell
2018-05-08Don't fail on an out-of-order CCS in DTLSMatt Caswell
2018-04-17Check the return from EVP_PKEY_get0_DH()Matt Caswell
2018-04-17Make sure info callback knows about all handshake start eventsMatt Caswell
2018-04-02Use the private RNG for data that is not publicKurt Roeckx
2018-03-30Revert commit 4a56d9a2Matt Caswell
2018-03-28Rewrite the X509->alert mapping codeRich Salz
2018-03-27Assert that alpn_selected is NULL before we assign itMatt Caswell
2018-03-19Place ticket keys into secure memoryTodd Short
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-03-19Don't update the session cache when processing a client certificate in TLSv1.3Matt Caswell
2018-03-19Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3Matt Caswell
2018-03-15Only update the server session cache when the session is readyMatt Caswell
2018-03-12Session Ticket app dataTodd Short
2018-02-28Tell the ciphers which DRBG to use for generating random bytes.Kurt Roeckx
2018-02-23Remove unreachable statement.Pauli