summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2022-11-14Remove references to read_mac_secret and write_mac_secretMatt Caswell
2022-11-14Remove remaining refs to enc_(write|read)_ctx/(read|write)_hashMatt Caswell
2022-11-08Fix CertificateCompressionAlgorithm to be read as 2-octet-wideAlexander Sosedkin
2022-11-07Assert that we do not exceed the DTLS MTUMatt Caswell
2022-11-07Add zlib oneshot compressionTodd Short
2022-10-21stack: Do not add error if pop/shift/value accesses outside of the stackTomas Mraz
2022-10-21Fix coverity 1516094 uninitTodd Short
2022-10-20Remove some redundant codeMatt Caswell
2022-10-20Remove the old buffer management codeMatt Caswell
2022-10-20Ensure the record layer is responsible for calculating record overheadsMatt Caswell
2022-10-20Convert dtls_write_records to use standard record layer functionsMatt Caswell
2022-10-18Add `for_comp` flag when retrieving certs for compressionTodd Short
2022-10-18Update COMP_METHODTodd Short
2022-10-18Add support for compressed certificates (RFC8879)Todd Short
2022-10-18Fix sctp compile errorsslontis
2022-10-12Ensure that the key share group is allowed for our protocol versionMatt Caswell
2022-10-12Use the configured max_send_fragment value in the write record layerMatt Caswell
2022-10-12Remove enc_write_stateMatt Caswell
2022-10-12Convert the TLSv1.3 crypto code to the new write record layerMatt Caswell
2022-10-07Partial revert and reimplement "Enable brainpool curves for TLS1.3"Matt Caswell
2022-10-05Stop raising ERR_R_MALLOC_FAILURE in most placesRichard Levitte
2022-09-28Test TLS extension orderingTodd Short
2022-09-23Move logic for figuring out the record version out of record layerMatt Caswell
2022-09-22Correctly handle a retransmitted ClientHelloMatt Caswell
2022-09-20Use an enum for the return value from a construction functionMatt Caswell
2022-09-20If a ticket key callback returns 0 in TLSv1.3 don't send a ticketMatt Caswell
2022-09-16stack.c: add missing direct error reporting and improve coding styleDr. David von Oheimb
2022-09-13ssl: modify libssl so that it uses OSSL_TIMEPauli
2022-09-09Cleanup EBCDIC string defintionsTodd Short
2022-08-19Coverity: misuses of time_tPauli
2022-08-18Remove redefinition of SSL_AD_NO_ALERTMatt Caswell
2022-08-18Remove some redundant codeMatt Caswell
2022-08-18Move some fields out of the SSL object and into the record layer objectMatt Caswell
2022-08-18Remove some remaining SSL object references from DTLS record layerMatt Caswell
2022-08-18Remove reliance on the SSL object from the DTLS read record layer codeMatt Caswell
2022-08-18Move some DTLS read code into the read record layerMatt Caswell
2022-08-18Remove some use of SSL object from record layerMatt Caswell
2022-08-18Remove unneccesary KTLS code from non-KTLS specific filesMatt Caswell
2022-08-18Convert ssl3_get_record to tls_read_recordMatt Caswell
2022-08-01Check that IV length is not less than zeroDmitry Belyavskiy
2022-07-28SSL object refactoring using SSL_CONNECTION objectTomas Mraz
2022-07-13Check for EVP_MD being NULL inside ssl.slontis
2022-05-24Use safe pattern for buffer size determining in case of GOST key exchangeDmitry Belyavskiy
2022-05-04Remove duplicated #include headersJHH20
2022-05-03Update copyright yearMatt Caswell
2022-04-14Fix an assertion in the DTLS server codeBernd Edlinger
2022-03-30tls_process_server_hello: Disallow repeated HRRTomas Mraz
2022-03-25ticket_lifetime_hint may exceed 1 week in TLSv1.3Todd Short
2022-03-14Replace handling of negative verification result with SSL_set_retry_verify()Tomas Mraz
2022-02-17Add back check for the DH public key sizeTomas Mraz