summaryrefslogtreecommitdiffstats
path: root/ssl/statem
AgeCommit message (Expand)Author
2018-07-03Remove TLSv1.3 tickets from the client cache as we use themMatt Caswell
2018-07-03Restore behaviour from commit 36ff232cf that was incorrectly removedMatt Caswell
2018-07-02Add setters to set the early_data callbackMatt Caswell
2018-07-02Make the anti-replay feature optionalMatt Caswell
2018-07-02Fix a NULL ptr deref in error path in tls_process_cke_dhe()Matt Caswell
2018-06-26Use stateful tickets if we are doing anti-replayMatt Caswell
2018-06-26Respect SSL_OP_NO_TICKET in TLSv1.3Matt Caswell
2018-06-26Restructure the ticket construction codeMatt Caswell
2018-06-25Don't change a session once its in the cacheMatt Caswell
2018-06-11Don't send a warning alert in TLSv1.3Matt Caswell
2018-06-07Reformulate the if condition in tls_process_new_session_ticketMatt Caswell
2018-06-07Don't store the ticket nonce in the sessionMatt Caswell
2018-06-07Fix TLSv1.3 ticket noncesMatt Caswell
2018-05-31EVP_MD_size() can return an errorMatt Caswell
2018-05-22Fix no-ec in combination with no-dhMatt Caswell
2018-05-17Change the default number of NewSessionTickets we send to 2Matt Caswell
2018-05-17Enable the ability to set the number of TLSv1.3 session tickets sentMatt Caswell
2018-05-15Suport TLSv1.3 draft 28Matt Caswell
2018-05-12Don't memcpy the contents of an empty fragmentMatt Caswell
2018-05-11Rework the decrypt ticket callbackMatt Caswell
2018-05-11Fix ticket callbacks in TLSv1.3Matt Caswell
2018-05-08Keep the DTLS timer running after the end of the handshake if appropriateMatt Caswell
2018-05-08Don't fail on an out-of-order CCS in DTLSMatt Caswell
2018-04-24In a reneg use the same client_version we used last timeMatt Caswell
2018-04-24Remove some logically dead codeMatt Caswell
2018-04-20Make sure SSL_in_init() returns 0 at SSL_CB_HANDSHAKE_DONEMatt Caswell
2018-04-17Check the return from EVP_PKEY_get0_DH()Matt Caswell
2018-04-17Make sure info callback knows about all handshake start eventsMatt Caswell
2018-04-17Call the info callback on all handshake done eventsMatt Caswell
2018-04-17Ignore the status_request extension in a resumption handshakeMatt Caswell
2018-04-03Set error code on alloc failuresRich Salz
2018-04-02Use the private RNG for data that is not publicKurt Roeckx
2018-03-30Revert commit 4a56d9a2Matt Caswell
2018-03-28Rewrite the X509->alert mapping codeRich Salz
2018-03-28Tolerate a Certificate using a non-supported group on server sideMatt Caswell
2018-03-27statem/statem_clnt.c: omit redundant check in tls_construct_client_hello.Philippe Antoine
2018-03-27Assert that alpn_selected is NULL before we assign itMatt Caswell
2018-03-21Don't wait for dry at the end of a handshakeMatt Caswell
2018-03-21Check for alerts while waiting for a dry eventMatt Caswell
2018-03-21Fix stack-use-after-scopePeter Wu
2018-03-19Place ticket keys into secure memoryTodd Short
2018-03-19Fix no-pskMatt Caswell
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-03-19Fix a crash in SSLfatal due to invalid enc_write_ctxBernd Edlinger
2018-03-19Add an anti-replay mechanismMatt Caswell
2018-03-19Don't update the session cache when processing a client certificate in TLSv1.3Matt Caswell
2018-03-19Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3Matt Caswell
2018-03-15Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()Matt Caswell
2018-03-15Add support for setting raw private HMAC keysMatt Caswell
2018-03-15Only update the server session cache when the session is readyMatt Caswell