summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2023-05-05Be more accurate about what we accept as a valid DTLS versionMatt Caswell
2023-05-02Do not send the empty renegotiation info SCSV in QUICTomas Mraz
2023-04-12Make the data field for get_record() constMatt Caswell
2023-03-28RFC7250 (RPK) supportTodd Short
2023-03-21Added `CERTIFICATE_VERIFY_MAX_LENGTH` constantVeronikaNguyen
2023-03-01Fix early_data age calculationMatt Caswell
2023-02-24first cut at sigalg loadingMichael Baentsch
2023-02-22Add the ability to mutate TLS handshake messages before they are writtenMatt Caswell
2023-02-20fuzz: fix coverity warningsPhilippe Antoine
2023-02-08fuzz: make post handshake reachablePhilippe Antoine
2023-01-24Add the ability to add a custom extension on an SSL objectMatt Caswell
2023-01-24Extend the new_record_layer functionMatt Caswell
2023-01-24Create the SSL object for QUIC-TLSMatt Caswell
2022-12-13Make error reason for disallowed legacy sigalg more specificTomas Mraz
2022-11-14Remove references to read_mac_secret and write_mac_secretMatt Caswell
2022-11-14Remove remaining refs to enc_(write|read)_ctx/(read|write)_hashMatt Caswell
2022-11-08Fix CertificateCompressionAlgorithm to be read as 2-octet-wideAlexander Sosedkin
2022-11-07Assert that we do not exceed the DTLS MTUMatt Caswell
2022-11-07Add zlib oneshot compressionTodd Short
2022-10-21stack: Do not add error if pop/shift/value accesses outside of the stackTomas Mraz
2022-10-21Fix coverity 1516094 uninitTodd Short
2022-10-20Remove some redundant codeMatt Caswell
2022-10-20Remove the old buffer management codeMatt Caswell
2022-10-20Ensure the record layer is responsible for calculating record overheadsMatt Caswell
2022-10-20Convert dtls_write_records to use standard record layer functionsMatt Caswell
2022-10-18Add `for_comp` flag when retrieving certs for compressionTodd Short
2022-10-18Update COMP_METHODTodd Short
2022-10-18Add support for compressed certificates (RFC8879)Todd Short
2022-10-18Fix sctp compile errorsslontis
2022-10-12Ensure that the key share group is allowed for our protocol versionMatt Caswell
2022-10-12Use the configured max_send_fragment value in the write record layerMatt Caswell
2022-10-12Remove enc_write_stateMatt Caswell
2022-10-12Convert the TLSv1.3 crypto code to the new write record layerMatt Caswell
2022-10-07Partial revert and reimplement "Enable brainpool curves for TLS1.3"Matt Caswell
2022-10-05Stop raising ERR_R_MALLOC_FAILURE in most placesRichard Levitte
2022-09-28Test TLS extension orderingTodd Short
2022-09-23Move logic for figuring out the record version out of record layerMatt Caswell
2022-09-22Correctly handle a retransmitted ClientHelloMatt Caswell
2022-09-20Use an enum for the return value from a construction functionMatt Caswell
2022-09-20If a ticket key callback returns 0 in TLSv1.3 don't send a ticketMatt Caswell
2022-09-16stack.c: add missing direct error reporting and improve coding styleDr. David von Oheimb
2022-09-13ssl: modify libssl so that it uses OSSL_TIMEPauli
2022-09-09Cleanup EBCDIC string defintionsTodd Short
2022-08-19Coverity: misuses of time_tPauli
2022-08-18Remove redefinition of SSL_AD_NO_ALERTMatt Caswell
2022-08-18Remove some redundant codeMatt Caswell
2022-08-18Move some fields out of the SSL object and into the record layer objectMatt Caswell
2022-08-18Remove some remaining SSL object references from DTLS record layerMatt Caswell
2022-08-18Remove reliance on the SSL object from the DTLS read record layer codeMatt Caswell
2022-08-18Move some DTLS read code into the read record layerMatt Caswell