summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2018-03-14Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell
2018-03-12Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cbBenjamin Saunders
2018-03-12Session Ticket app dataTodd Short
2018-03-09Reuse extension_is_relevant() in should_add_extension()Benjamin Kaduk
2018-03-09Give more information in the SSL_stateless return codeMatt Caswell
2018-03-09Fallback on old style PSK callbacks if the new style ones aren't presentMatt Caswell
2018-03-09Tolerate TLSv1.3 PSKs that are a different size to the hash sizeMatt Caswell
2018-03-05If not sending key_share (no TLSv1.3), return appropriately.Todd Short
2018-03-05Fix status_request and SCT extensionsMatt Caswell
2018-02-28Tell the ciphers which DRBG to use for generating random bytes.Kurt Roeckx
2018-02-26Export keying material using early exporter master secretTatsuhiro Tsujikawa
2018-02-23Remove unreachable statement.Pauli
2018-02-15If s->ctx is NULL then this is an internal errorMatt Caswell
2018-02-14Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitableMatt Caswell
2018-02-13Update copyright yearMatt Caswell
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell
2018-02-12Don't overestimate the ticket ageMatt Caswell
2018-02-09Don't calculate the Finished MAC twiceMatt Caswell
2018-02-02Make sure that exporting keying material is allowedTatsuhiro Tsujikawa
2018-02-01Fix some minor code nitsTodd Short
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-02-01Fix some instances of the wrong alert type being sentMatt Caswell
2018-01-30Move decisions about whether to accept reneg into the state machineMatt Caswell
2018-01-25Add support for the TLS 1.3 signature_algorithms_cert extensionBenjamin Kaduk
2018-01-24Updates following review of SSL_stateless() codeMatt Caswell
2018-01-24Add a timestamp to the cookieMatt Caswell
2018-01-24Don't send unexpected_message if we receive CCS while statelessMatt Caswell
2018-01-24Fix the cookie/key_share extensions for use with SSL_stateless()Matt Caswell
2018-01-24Fix interaction between SSL_stateless() and SSL_clear()Matt Caswell
2018-01-24Fix logic around when to send an HRR based on cookiesMatt Caswell
2018-01-24Add support for sending TLSv1.3 cookiesMatt Caswell
2018-01-22Move fprintf after assignment to avoid crash.Rich Salz
2018-01-09Update copyright years on all files merged since Jan 1st 2018Richard Levitte
2018-01-03Permit the "supported_groups" extension in ServerHellosBenjamin Kaduk
2017-12-28Don't flush the ClientHello if we're going to send early dataMatt Caswell
2017-12-26Remove outdated commentsPaul Yang
2017-12-17Remove spaces at end of line in ssl/statemPaul Yang
2017-12-14Issue a CCS from the client if we received an HRRMatt Caswell
2017-12-14Fix server side HRR flushingMatt Caswell
2017-12-14Delay flush until after CCS with early_dataMatt Caswell
2017-12-14Send supported_versions in an HRRMatt Caswell
2017-12-14Make sure supported_versions appears in an HRR tooMatt Caswell
2017-12-14Update state machine to send CCS based on whether we did an HRRMatt Caswell
2017-12-14Fix an HRR bugMatt Caswell
2017-12-14Merge HRR into ServerHelloMatt Caswell
2017-12-14Send a CCS after ServerHello in TLSv1.3 if using middlebox compat modeMatt Caswell
2017-12-14Send a CCS from a client in an early_data handshakeMatt Caswell
2017-12-14Send a CCS from the client in a non-early_data handshakeMatt Caswell
2017-12-14Remove TLSv1.3 specific write transition for ClientHelloMatt Caswell
2017-12-14Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell