summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2020-11-18Convert TLS auto DH parameters to use EVP_PKEYMatt Caswell
2020-11-11SSL: refactor all SSLfatal() callsRichard Levitte
2020-11-11SSL: refactor ossl_statem_fatal() and SSLfatal()Richard Levitte
2020-11-11Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() callRichard Levitte
2020-11-02Adjust error reason for ssl_get_min_max_version() failureBenjamin Kaduk
2020-10-26Ensure we raise SSLfatal on errorMatt Caswell
2020-10-20Rename EVP_PKEY_set1_tls_encodedpoint to EVP_PKEY_set1_encoded_public_keyMatt Caswell
2020-10-16Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callbackMatt Caswell
2020-10-16Concentrate deprecated libssl API usage in one fileMatt Caswell
2020-10-15Update copyright yearMatt Caswell
2020-10-14[ssl] Support ssl_encapsulate on server sideNicola Tuveri
2020-10-14[ssl] Support ssl_decapsulate on client sideNicola Tuveri
2020-10-01Run the withlibctx.pl scriptMatt Caswell
2020-09-17Disallow certs with explicit curve in verification chainTomas Mraz
2020-09-16DTLS: free allocated memory on error pathsPauli
2020-09-13Fix safestack issues in ocsp.hMatt Caswell
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-09-13Fix safestack issues in ssl.hMatt Caswell
2020-09-01also zero pad DHE public key in ClientKeyExchange message for interopFelix Monninger
2020-08-29Check whether we have MD5-SHA1 and whether we need itMatt Caswell
2020-08-29Improve some error messages if a digest is not availableMatt Caswell
2020-08-29Ensure libssl creates libctx aware MAC keysMatt Caswell
2020-08-09Add EVP signature with libctx methods.Shane Lontis
2020-07-24Add X509 related libctx changes.Shane Lontis
2020-07-21Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni
2020-07-16deprecate engines in SSLPauli
2020-07-16Add SSL_get[01]_peer_certificate()Todd Short
2020-07-05Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md filesDr. David von Oheimb
2020-07-05Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txtDr. David von Oheimb
2020-06-19Fix the DTLS1_COOKIE_LENGTH valueMatt Caswell
2020-06-19Don't send supported groups if no-ec and we're doing DTLSMatt Caswell
2020-06-19Provider a better error message if we fail to copy parametersMatt Caswell
2020-06-19Modify libssl to discover supported groups based on available providersMatt Caswell
2020-06-09Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz
2020-06-05Don't downgrade keys in libsslMatt Caswell
2020-06-04Update copyright yearMatt Caswell
2020-05-19New Russian TLS 1.2 implementationDmitry Belyavskiy
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov
2020-05-01Add SSL_new_session_ticket() APIBenjamin Kaduk
2020-05-01Fix whitespace nit in ossl_statem_server_pre_workBenjamin Kaduk
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2020-04-23Update copyright yearMatt Caswell
2020-04-15Make sure we always send an alert in libssl if we hit a fatal errorMatt Caswell
2020-04-08Use X509_STORE_CTX_new_with_libctx() in libsslMatt Caswell
2020-04-08TLS: Temporarly downgrade newly generated EVP_PKEYs to legacyRichard Levitte
2020-04-08EVP & TLS: Add necessary EC_KEY data extraction functions, and use themRichard Levitte
2020-04-01Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libsslMatt Caswell
2020-04-01Don't double free a DH objectMatt Caswell
2020-03-24Make sure we use a fetched cipher when encrypting stateless ticketsMatt Caswell
2020-03-24Use a fetched version of SHA256 in tls_process_new_session_ticket()Matt Caswell