summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2021-07-21tls_process_{client,server}_certificate(): allow verify_callback return > 1Dr. David von Oheimb
2021-07-06Avoid "excessive message size" for session ticketsMatt Caswell
2021-06-19ssl: fix indentationPauli
2021-06-19ssl: replace tabs with spacesPauli
2021-06-10Optimize session cache flushingTodd Short
2021-06-02tls: remove TODOsPauli
2021-06-01Rename all getters to use get/get0 in nameTomas Mraz
2021-06-01ssl: ass size_t to RAND_bytes_ex()Pauli
2021-05-29ssl: add zero strenght arguments to BN and RAND RNG callsPauli
2021-05-27Call SSLfatal when the generate_ticket_cb returns 0Todd Short
2021-05-27Use "" for include internal/xxxRich Salz
2021-05-21Cleanup the peer point formats on regotiationDmitry Belyavskiy
2021-05-17Add SSL_OP_ALLOW_CLIENT_RENEGOTIATIONRich Salz
2021-05-15Promote SSL_get_negotiated_group() for non-TLSv1.3Benjamin Kaduk
2021-05-12Don't send key_share for PSK-only key exchangeBenjamin Kaduk
2021-05-12Improve RFC 8446 PSK key exchange mode complianceBenjamin Kaduk
2021-05-01Use OCSP-specific error code for clarityDmitry Belyavskiy
2021-04-28Defer Finished MAC handling until after state transitionMatt Caswell
2021-04-22Update copyright yearMatt Caswell
2021-04-18Add "origin" field to EVP_CIPHER, EVP_MDRich Salz
2021-04-12Replace OSSL_PARAM_BLD_free_params() with OSSL_PARAM_free().Shane Lontis
2021-04-09Fix typo in statem_clnt.cNan Xiao
2021-04-01Corrected missing definitions from NonStop SPT build.Randall S. Becker
2021-03-25Ensure buffer/length pairs are always in syncMatt Caswell
2021-03-25ssl sigalg extension: fix NULL pointer dereferencePeter Kaestle
2021-03-18ssl: fix coverity 1451515: out of bounds memory accessPauli
2021-03-18Add ossl_gost symbolsShane Lontis
2021-03-12ssl: support params arguments to init functionsPauli
2021-03-08Fix the check for suitable groups and TLSv1.3Matt Caswell
2021-03-03statem_lib.c: Remove TODOs that are unnecessaryTomas Mraz
2021-02-18Update copyright yearMatt Caswell
2021-02-15Implement EVP_PKEY_param_check_quick() and use it in libsslMatt Caswell
2021-02-12Deprecate the libssl level SRP APIsMatt Caswell
2021-02-09Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk
2021-02-08Simplify the EVP_PKEY_XXX_fromdata_XX methods.Shane Lontis
2021-02-05Remove OPENSSL_NO_EC guards from libsslMatt Caswell
2021-02-05Make supported_groups code independent of EC and DHMatt Caswell
2021-02-05Ensure default supported groups works even with no-ec and no-dhMatt Caswell
2021-02-05Remove OPENSSL_NO_DH guards from libsslMatt Caswell
2021-01-28Update copyright yearRichard Levitte
2021-01-26TLS client: allow cert verify callback return -1 for SSL_ERROR_WANT_RETRY_VERIFYDr. David von Oheimb
2021-01-18Update SERVER_HELLO_MAX_LENGTHMichael Baentsch
2021-01-12Clean away extraneous library specific FETCH_FAILED reason codesRichard Levitte
2021-01-09Fix for negative return value from `SSL_CTX_sess_accept()`anupamam13
2020-12-20Drop OPENSSL_NO_RSA everywhereRichard Levitte
2020-12-09Modify is_tls13_capable() to take account of the servername cbMatt Caswell
2020-12-08TLS: Use EVP_PKEY_get_group_name() to get the group nameRichard Levitte
2020-12-03tag unused function arguments as ossl_unusedPauli
2020-11-26Update copyright yearMatt Caswell
2020-11-18Deprecate RSA harderRichard Levitte