summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2020-10-14[ssl] Support ssl_encapsulate on server sideNicola Tuveri
2020-10-14[ssl] Support ssl_decapsulate on client sideNicola Tuveri
2020-10-01Run the withlibctx.pl scriptMatt Caswell
2020-09-17Disallow certs with explicit curve in verification chainTomas Mraz
2020-09-16DTLS: free allocated memory on error pathsPauli
2020-09-13Fix safestack issues in ocsp.hMatt Caswell
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-09-13Fix safestack issues in ssl.hMatt Caswell
2020-09-01also zero pad DHE public key in ClientKeyExchange message for interopFelix Monninger
2020-08-29Check whether we have MD5-SHA1 and whether we need itMatt Caswell
2020-08-29Improve some error messages if a digest is not availableMatt Caswell
2020-08-29Ensure libssl creates libctx aware MAC keysMatt Caswell
2020-08-09Add EVP signature with libctx methods.Shane Lontis
2020-07-24Add X509 related libctx changes.Shane Lontis
2020-07-21Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni
2020-07-16deprecate engines in SSLPauli
2020-07-16Add SSL_get[01]_peer_certificate()Todd Short
2020-07-05Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md filesDr. David von Oheimb
2020-07-05Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txtDr. David von Oheimb
2020-06-19Fix the DTLS1_COOKIE_LENGTH valueMatt Caswell
2020-06-19Don't send supported groups if no-ec and we're doing DTLSMatt Caswell
2020-06-19Provider a better error message if we fail to copy parametersMatt Caswell
2020-06-19Modify libssl to discover supported groups based on available providersMatt Caswell
2020-06-09Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz
2020-06-05Don't downgrade keys in libsslMatt Caswell
2020-06-04Update copyright yearMatt Caswell
2020-05-19New Russian TLS 1.2 implementationDmitry Belyavskiy
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov
2020-05-01Add SSL_new_session_ticket() APIBenjamin Kaduk
2020-05-01Fix whitespace nit in ossl_statem_server_pre_workBenjamin Kaduk
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2020-04-23Update copyright yearMatt Caswell
2020-04-15Make sure we always send an alert in libssl if we hit a fatal errorMatt Caswell
2020-04-08Use X509_STORE_CTX_new_with_libctx() in libsslMatt Caswell
2020-04-08TLS: Temporarly downgrade newly generated EVP_PKEYs to legacyRichard Levitte
2020-04-08EVP & TLS: Add necessary EC_KEY data extraction functions, and use themRichard Levitte
2020-04-01Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libsslMatt Caswell
2020-04-01Don't double free a DH objectMatt Caswell
2020-03-24Make sure we use a fetched cipher when encrypting stateless ticketsMatt Caswell
2020-03-24Use a fetched version of SHA256 in tls_process_new_session_ticket()Matt Caswell
2020-03-23Use the libctx and properties when constructing an EVP_PKEY_CTXMatt Caswell
2020-03-13Code to thread-safety in ChangeCipherStateBenjamin Kaduk
2020-03-13Don't write to the session when computing TLS 1.3 keysBenjamin Kaduk
2020-02-20Deprecate the low level Diffie-Hellman functions.Pauli
2020-02-06Use the OPENSSL_CTX and property query string in EVP_PKEY_CTXMatt Caswell
2020-02-06Explicitly fetch ciphers and digests in libsslMatt Caswell
2020-01-30Don't acknowledge a servername following warning alert in servername cbMatt Caswell
2020-01-30Fix SSL_get_servername() and SNI behaviourMatt Caswell
2020-01-29TLS: use EVP for HMAC throughout libssl.Pauli
2020-01-24Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libsslMatt Caswell