summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2022-10-18Add `for_comp` flag when retrieving certs for compressionTodd Short
2022-10-18Update COMP_METHODTodd Short
2022-10-18Add support for compressed certificates (RFC8879)Todd Short
2022-10-18Fix sctp compile errorsslontis
2022-10-12Ensure that the key share group is allowed for our protocol versionMatt Caswell
2022-10-12Use the configured max_send_fragment value in the write record layerMatt Caswell
2022-10-12Remove enc_write_stateMatt Caswell
2022-10-12Convert the TLSv1.3 crypto code to the new write record layerMatt Caswell
2022-10-07Partial revert and reimplement "Enable brainpool curves for TLS1.3"Matt Caswell
2022-10-05Stop raising ERR_R_MALLOC_FAILURE in most placesRichard Levitte
2022-09-28Test TLS extension orderingTodd Short
2022-09-23Move logic for figuring out the record version out of record layerMatt Caswell
2022-09-22Correctly handle a retransmitted ClientHelloMatt Caswell
2022-09-20Use an enum for the return value from a construction functionMatt Caswell
2022-09-20If a ticket key callback returns 0 in TLSv1.3 don't send a ticketMatt Caswell
2022-09-16stack.c: add missing direct error reporting and improve coding styleDr. David von Oheimb
2022-09-13ssl: modify libssl so that it uses OSSL_TIMEPauli
2022-09-09Cleanup EBCDIC string defintionsTodd Short
2022-08-19Coverity: misuses of time_tPauli
2022-08-18Remove redefinition of SSL_AD_NO_ALERTMatt Caswell
2022-08-18Remove some redundant codeMatt Caswell
2022-08-18Move some fields out of the SSL object and into the record layer objectMatt Caswell
2022-08-18Remove some remaining SSL object references from DTLS record layerMatt Caswell
2022-08-18Remove reliance on the SSL object from the DTLS read record layer codeMatt Caswell
2022-08-18Move some DTLS read code into the read record layerMatt Caswell
2022-08-18Remove some use of SSL object from record layerMatt Caswell
2022-08-18Remove unneccesary KTLS code from non-KTLS specific filesMatt Caswell
2022-08-18Convert ssl3_get_record to tls_read_recordMatt Caswell
2022-08-01Check that IV length is not less than zeroDmitry Belyavskiy
2022-07-28SSL object refactoring using SSL_CONNECTION objectTomas Mraz
2022-07-13Check for EVP_MD being NULL inside ssl.slontis
2022-05-24Use safe pattern for buffer size determining in case of GOST key exchangeDmitry Belyavskiy
2022-05-04Remove duplicated #include headersJHH20
2022-05-03Update copyright yearMatt Caswell
2022-04-14Fix an assertion in the DTLS server codeBernd Edlinger
2022-03-30tls_process_server_hello: Disallow repeated HRRTomas Mraz
2022-03-25ticket_lifetime_hint may exceed 1 week in TLSv1.3Todd Short
2022-03-14Replace handling of negative verification result with SSL_set_retry_verify()Tomas Mraz
2022-02-17Add back check for the DH public key sizeTomas Mraz
2022-01-19ssl: better support TSAN operationsPauli
2022-01-18ssl: replace ;; with ; as statement separatorPauli
2022-01-09Delete unused param about get_construct_message_fyangyangtiantianlonglong
2022-01-07Fix: some patches related to error exitingPeiwei Hu
2022-01-07fix the return check of EVP_PKEY_CTX_ctrl() in 5 spotsxkernel
2022-01-06properly free the resource from CRYPTO_mallocxkernel
2022-01-05Fix typosDimitris Apostolou
2021-12-21add OSSL_STACK_OF_X509_free() for commonly used patternDr. David von Oheimb
2021-12-14Fix invalid handling of verify errors in libsslMatt Caswell
2021-11-29No EtM for GOST ciphers in TLS 1.2Dmitry Belyavskiy
2021-11-26Enable brainpool curves for TLS1.3Bernd Edlinger