summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2020-03-23Use the libctx and properties when constructing an EVP_PKEY_CTXMatt Caswell
2020-03-13Code to thread-safety in ChangeCipherStateBenjamin Kaduk
2020-03-13Don't write to the session when computing TLS 1.3 keysBenjamin Kaduk
2020-02-20Deprecate the low level Diffie-Hellman functions.Pauli
2020-02-06Use the OPENSSL_CTX and property query string in EVP_PKEY_CTXMatt Caswell
2020-02-06Explicitly fetch ciphers and digests in libsslMatt Caswell
2020-01-30Don't acknowledge a servername following warning alert in servername cbMatt Caswell
2020-01-30Fix SSL_get_servername() and SNI behaviourMatt Caswell
2020-01-29TLS: use EVP for HMAC throughout libssl.Pauli
2020-01-24Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libsslMatt Caswell
2020-01-19libssl: Eliminate as much use of EVP_PKEY_size() as possibleMatt Caswell
2019-12-13Parse large GOST ClientKeyExchange messagesDmitry Belyavskiy
2019-12-05Move constant time RSA code out of libsslMatt Caswell
2019-11-21Fix a race condition in SNI handlingBenjamin Kaduk
2019-11-11Fix misspelled resumption_label for CHARSET_EBCDICIdo Ben-Natan
2019-10-10ssl/statem/statem_lib.c: make servercontext/clientcontext arrays of chars ins...Artiom Vaskov
2019-10-09Explicitly test against NULL; do not use !p or similarRich Salz
2019-10-03'init_buf' memory can be freed when DTLS is used over SCTP (not over UDP).NaveenShivanna86
2019-09-28Reorganize local header filesDr. Matthias St. Pierre
2019-09-06Don't send a status_request extension in a CertificateRequest messageMatt Caswell
2019-08-14Add missing EBCDIC stringsopensslonzos-github
2019-08-01Use allow_early_data_cb from SSL instead of SSL_CTXraja-ashok
2019-07-31Avoid using ERR_put_error() directly in OpenSSL codeRichard Levitte
2019-07-25Don't generate an unnecessary Diffie-Hellman key in TLS 1.3 clients.David Benjamin
2019-07-16Remove tab characters from C source files.Pauli
2019-07-16Remove function name from errorsRich Salz
2019-06-26Revert "Delay setting the sig algs until after the cert_cb has been called"Benjamin Kaduk
2019-06-18Following the previous 2 commits also move ecpointformats out of sessionMatt Caswell
2019-06-18Fix a race condition in ciphers handlingMatt Caswell
2019-06-18Fix a race condition in supported groups handlingMatt Caswell
2019-06-17Fix no-ec with no-dhMatt Caswell
2019-06-17Allow TLSv1.3 in a no-ec buildMatt Caswell
2019-06-12TLS1.3 FFDHE Supportraja-ashok
2019-06-11Make EVP_MD_CTX_ctrl() work for legacy use cases (ssl3).Shane Lontis
2019-06-04Move digests to providersShane Lontis
2019-06-03Defer sending a KeyUpdate until after pending writes are completeMatt Caswell
2019-04-29Collapse ssl3_state_st (s3) into ssl_stTodd Short
2019-03-28conn_is_closed should return 1 if get_last_sys_error is WSAECONNRESETPaul Monson
2019-03-06Adapt CIPHER_DEBUG to the new generic trace APIRichard Levitte
2019-03-06Adapt SSL_DEBUG to the new generic trace APIRichard Levitte
2019-03-05Don't write the tick_identity to the sessionMatt Caswell
2019-02-22Don't restrict the number of KeyUpdate messages we can processMatt Caswell
2019-02-15Add option to disable Extended Master SecretTodd Short
2019-02-14Don't signal SSL_CB_HANDSHAKE_START for TLSv1.3 post-handshake messagesMatt Caswell
2019-02-01Fix end-point shared secret for DTLS/SCTPMichael Tuexen
2019-01-24Revert "Keep the DTLS timer running after the end of the handshake if appropr...Matt Caswell
2019-01-08Don't artificially limit the size of the ClientHelloMatt Caswell
2019-01-07Don't complain if we receive the cryptopro extension in the ClientHelloMatt Caswell
2019-01-06Restore compatibility with GOST2001 implementations.Dmitry Belyavskiy
2018-12-15Use (D)TLS_MAX_VERSION_INTERNAL internallyKurt Roeckx