summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2017-08-18Reorder extensions to put SigAlgs lastTodd Short
2017-08-15Move ALPN handling from finalizer to delayed callBenjamin Kaduk
2017-08-11Fix some Typos and indentsFdaSilvaYY
2017-08-09Don't modify resumed session objectsBenjamin Kaduk
2017-08-03Add a DRBG to each SSL objectRich Salz
2017-08-03Switch from ossl_rand to DRBG randRich Salz
2017-08-03Move ossl_assertMatt Caswell
2017-08-01Fix new_session_cb calls in TLSv1.3Matt Caswell
2017-07-31Fix SSL_set_tlsext_debug_callback/-tlsextdebugTodd Short
2017-07-21Support converting cipher name to RFC name and vice versaPaul Yang
2017-07-18Tolerate a zero length ticket nonceMatt Caswell
2017-07-18Fix early_data with an HRRMatt Caswell
2017-07-13Use cert tables instead of X509_certificate_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cert_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cipher_get_cert_index.Dr. Stephen Henson
2017-07-07Do not allow non-dhe kex_modes by defaultMatt Caswell
2017-07-07Updates following review feedback of TLSv1.3 draft-21 codeMatt Caswell
2017-07-07Update the early_secret generation to use the new ticket_nonce fieldMatt Caswell
2017-07-07Update tls13_hkdf_expand() to take the length of the dataMatt Caswell
2017-07-07Send and receive the ticket_nonce field in a NewSessionTicketMatt Caswell
2017-07-03Fix potential crash in tls_construct_finished.Bernd Edlinger
2017-07-03Fix a crash in tls_construct_client_certificate.Bernd Edlinger
2017-06-23Fix another EVP_DigestVerify() instanceMatt Caswell
2017-06-23Treat all failures from EVP_DigestVerify() as a bad signatureMatt Caswell
2017-06-21Avoid compiler complainingPaul Yang
2017-06-21Fix DTLS failure when used in a build which has SCTP enabledMatt Caswell
2017-06-21PSK related tweaks based on review feedbackMatt Caswell
2017-06-21Fix some bugs in the TLSv1.3 PSK codeMatt Caswell
2017-06-21Add TLSv1.3 client side external PSK supportMatt Caswell
2017-06-21Add TLSv1.3 server side external PSK supportMatt Caswell
2017-06-21Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.Dr. Stephen Henson
2017-06-21Allow Ed25519 in TLS 1.2Dr. Stephen Henson
2017-06-21Convert key exchange to one shot callDr. Stephen Henson
2017-06-21Handle signature algorithms with no associated digestDr. Stephen Henson
2017-06-21Add index for ED25519Dr. Stephen Henson
2017-06-21Merge Nokia copyright notice into standardRich Salz
2017-06-20Modify Sun copyright to follow OpenSSL styleRich Salz
2017-06-16Tweak the check that a ciphersuite has not changed since the HRRMatt Caswell
2017-06-16Fix an uninitialised variable warningMatt Caswell
2017-06-16Move ciphersuite selection before session resumption in TLSv1.3Matt Caswell
2017-06-16Allow the server to change the ciphersuite on resumeMatt Caswell
2017-06-12Add SSL_early_get1_extensions_present()Benjamin Kaduk
2017-06-11If-guard to avoid null ptr deref in statem_srvr.cRich Salz
2017-06-09fix check of broken implementations of GOST ciphersuitesPichulin Dmitrii
2017-06-09Fix a bundle of trailing spaces in several filesPaul Yang
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short
2017-05-23Don't use one shot API for SSLv3.Dr. Stephen Henson
2017-05-22Convert existing usage of assert() to ossl_assert() in libsslMatt Caswell
2017-05-22Replace instances of OPENSSL_assert() with soft asserts in libsslMatt Caswell
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell