summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2017-07-07Update the early_secret generation to use the new ticket_nonce fieldMatt Caswell
2017-07-07Update tls13_hkdf_expand() to take the length of the dataMatt Caswell
2017-07-07Send and receive the ticket_nonce field in a NewSessionTicketMatt Caswell
2017-07-03Fix potential crash in tls_construct_finished.Bernd Edlinger
2017-07-03Fix a crash in tls_construct_client_certificate.Bernd Edlinger
2017-06-23Fix another EVP_DigestVerify() instanceMatt Caswell
2017-06-23Treat all failures from EVP_DigestVerify() as a bad signatureMatt Caswell
2017-06-21Avoid compiler complainingPaul Yang
2017-06-21Fix DTLS failure when used in a build which has SCTP enabledMatt Caswell
2017-06-21PSK related tweaks based on review feedbackMatt Caswell
2017-06-21Fix some bugs in the TLSv1.3 PSK codeMatt Caswell
2017-06-21Add TLSv1.3 client side external PSK supportMatt Caswell
2017-06-21Add TLSv1.3 server side external PSK supportMatt Caswell
2017-06-21Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.Dr. Stephen Henson
2017-06-21Allow Ed25519 in TLS 1.2Dr. Stephen Henson
2017-06-21Convert key exchange to one shot callDr. Stephen Henson
2017-06-21Handle signature algorithms with no associated digestDr. Stephen Henson
2017-06-21Add index for ED25519Dr. Stephen Henson
2017-06-21Merge Nokia copyright notice into standardRich Salz
2017-06-20Modify Sun copyright to follow OpenSSL styleRich Salz
2017-06-16Tweak the check that a ciphersuite has not changed since the HRRMatt Caswell
2017-06-16Fix an uninitialised variable warningMatt Caswell
2017-06-16Move ciphersuite selection before session resumption in TLSv1.3Matt Caswell
2017-06-16Allow the server to change the ciphersuite on resumeMatt Caswell
2017-06-12Add SSL_early_get1_extensions_present()Benjamin Kaduk
2017-06-11If-guard to avoid null ptr deref in statem_srvr.cRich Salz
2017-06-09fix check of broken implementations of GOST ciphersuitesPichulin Dmitrii
2017-06-09Fix a bundle of trailing spaces in several filesPaul Yang
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short
2017-05-23Don't use one shot API for SSLv3.Dr. Stephen Henson
2017-05-22Convert existing usage of assert() to ossl_assert() in libsslMatt Caswell
2017-05-22Replace instances of OPENSSL_assert() with soft asserts in libsslMatt Caswell
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell
2017-05-18Fix EXT_RETURN usage for add_key_share()Matt Caswell
2017-05-17Allow a missing sig algs extension if resumingMatt Caswell
2017-05-17Add a new unsolicited extension error code and add enum tagMatt Caswell
2017-05-17Fail if we receive a response to an extension that we didn't requestMatt Caswell
2017-05-11Fix gcc-7 warnings.Bernd Edlinger
2017-05-11Add some extra comments following alert changesMatt Caswell
2017-05-11Add some checks for trailing data after extension blocksMatt Caswell
2017-05-11Send a missing_extension alert if key_share/supported groups not presentMatt Caswell
2017-05-11Send an illegal parameter alert if the update type in a KeyUpdate is wrongMatt Caswell
2017-05-11Ensure we fail with a decode error alert if the server sends and empty CertMatt Caswell
2017-05-11Fix more alert codesMatt Caswell
2017-05-11Verify that there is no trailing data after the extensions blockMatt Caswell
2017-05-11Fix some alert codesMatt Caswell
2017-05-11Add EVP_DigestSign and EVP_DigesVerifyDr. Stephen Henson
2017-05-10Copy custom extension flags in a call to SSL_set_SSL_CTX()Matt Caswell
2017-05-10Fix 'no-ec'Richard Levitte
2017-05-09Verify that if we have an HRR then something will changeMatt Caswell