summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2017-09-01ssl/statem/*.c: address "enum mixed with another type" warnings.Andy Polyakov
2017-08-31Avoid possible uninitialized variable.Rich Salz
2017-08-31Various review fixes for PSK early_data supportMatt Caswell
2017-08-31Client side sanity check of ALPN after server has accepted early_dataMatt Caswell
2017-08-31Add some fixes for Travis failuresMatt Caswell
2017-08-31Add server side sanity checks of SNI/ALPN for use with early_dataMatt Caswell
2017-08-31Make sure we save ALPN data in the sessionMatt Caswell
2017-08-31Complain if we are writing early data but SNI or ALPN is incorrectMatt Caswell
2017-08-31Enable the ability to use an external PSK for sending early_dataMatt Caswell
2017-08-30Move OPENSSL_CONF from e_os.h to cryptlib.hPauli
2017-08-30Move e_os.h to be the very first include.Pauli
2017-08-30e_os.h removal from other headers and source files.Pauli
2017-08-18Reorder extensions to put SigAlgs lastTodd Short
2017-08-15Move ALPN handling from finalizer to delayed callBenjamin Kaduk
2017-08-11Fix some Typos and indentsFdaSilvaYY
2017-08-09Don't modify resumed session objectsBenjamin Kaduk
2017-08-03Add a DRBG to each SSL objectRich Salz
2017-08-03Switch from ossl_rand to DRBG randRich Salz
2017-08-03Move ossl_assertMatt Caswell
2017-08-01Fix new_session_cb calls in TLSv1.3Matt Caswell
2017-07-31Fix SSL_set_tlsext_debug_callback/-tlsextdebugTodd Short
2017-07-21Support converting cipher name to RFC name and vice versaPaul Yang
2017-07-18Tolerate a zero length ticket nonceMatt Caswell
2017-07-18Fix early_data with an HRRMatt Caswell
2017-07-13Use cert tables instead of X509_certificate_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cert_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cipher_get_cert_index.Dr. Stephen Henson
2017-07-07Do not allow non-dhe kex_modes by defaultMatt Caswell
2017-07-07Updates following review feedback of TLSv1.3 draft-21 codeMatt Caswell
2017-07-07Update the early_secret generation to use the new ticket_nonce fieldMatt Caswell
2017-07-07Update tls13_hkdf_expand() to take the length of the dataMatt Caswell
2017-07-07Send and receive the ticket_nonce field in a NewSessionTicketMatt Caswell
2017-07-03Fix potential crash in tls_construct_finished.Bernd Edlinger
2017-07-03Fix a crash in tls_construct_client_certificate.Bernd Edlinger
2017-06-23Fix another EVP_DigestVerify() instanceMatt Caswell
2017-06-23Treat all failures from EVP_DigestVerify() as a bad signatureMatt Caswell
2017-06-21Avoid compiler complainingPaul Yang
2017-06-21Fix DTLS failure when used in a build which has SCTP enabledMatt Caswell
2017-06-21PSK related tweaks based on review feedbackMatt Caswell
2017-06-21Fix some bugs in the TLSv1.3 PSK codeMatt Caswell
2017-06-21Add TLSv1.3 client side external PSK supportMatt Caswell
2017-06-21Add TLSv1.3 server side external PSK supportMatt Caswell
2017-06-21Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.Dr. Stephen Henson
2017-06-21Allow Ed25519 in TLS 1.2Dr. Stephen Henson
2017-06-21Convert key exchange to one shot callDr. Stephen Henson
2017-06-21Handle signature algorithms with no associated digestDr. Stephen Henson
2017-06-21Add index for ED25519Dr. Stephen Henson
2017-06-21Merge Nokia copyright notice into standardRich Salz
2017-06-20Modify Sun copyright to follow OpenSSL styleRich Salz
2017-06-16Tweak the check that a ciphersuite has not changed since the HRRMatt Caswell