summaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
AgeCommit message (Expand)Author
2011-09-05Fix session handling.Bodo Möller
2011-06-01typoDr. Stephen Henson
2011-05-30Output supported curves in preference order instead of numerically.Dr. Stephen Henson
2011-05-25Don't advertise or use MD5 for TLS v1.2 in FIPS modeDr. Stephen Henson
2011-05-25use TLS1_get_version macro to check version so TLS v1.2 changes don't interfe...Dr. Stephen Henson
2011-05-20PR: 2295Dr. Stephen Henson
2011-05-12Process signature algorithms during TLS v1.2 client authentication.Dr. Stephen Henson
2011-05-11Reorder signature algorithms in strongest hash first order.Dr. Stephen Henson
2011-05-09Initial TLS v1.2 client support. Include a default supported signatureDr. Stephen Henson
2011-05-06Continuing TLS v1.2 support: add support for server parsing ofDr. Stephen Henson
2011-03-12Add SRP support.Ben Laurie
2011-02-08OCSP stapling fix (OpenSSL 0.9.8r/1.0.0d)Bodo Möller
2010-11-25PR: 2240Dr. Stephen Henson
2010-11-25using_ecc doesn't just apply to TLSv1Dr. Stephen Henson
2010-11-17Don't assume a decode error if session tlsext_ecpointformatlist is not NULL: ...Dr. Stephen Henson
2010-11-16bring HEAD up to date, add CVE-2010-3864 fix, update NEWS filesDr. Stephen Henson
2010-09-05Fixes to NPN from Adam Langley.Ben Laurie
2010-08-27PR: 1833Dr. Stephen Henson
2010-07-28Add Next Protocol Negotiation.Ben Laurie
2010-06-12Fix warnings.Ben Laurie
2010-02-17Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well asDr. Stephen Henson
2010-01-07Simplify RI+SCSV logic:Dr. Stephen Henson
2009-12-17Alert to use is now defined in spec: update codeDr. Stephen Henson
2009-12-16New option to enable/disable connection to unpatched serversDr. Stephen Henson
2009-12-14Allow initial connection (but no renegoriation) to servers which don't supportDr. Stephen Henson
2009-12-08Add support for magic cipher suite value (MCSV). Make secure renegotiationDr. Stephen Henson
2009-12-08PR: 2121Dr. Stephen Henson
2009-12-07Initial experimental TLSv1.1 supportDr. Stephen Henson
2009-11-18Include a more meaningful error message when rejecting legacy renegotiationDr. Stephen Henson
2009-11-11add missing parts of reneg port, fix apps patchDr. Stephen Henson
2009-11-08If it is a new session don't send the old TLS ticket: send a zero lengthDr. Stephen Henson
2009-10-30Fix statless session resumption so it can coexist with SNIDr. Stephen Henson
2009-09-04PR: 2028Dr. Stephen Henson
2009-04-28Update from 1.0.0-stable.Dr. Stephen Henson
2008-12-29Apparently s->ctx could be NULL. (Coverity ID 147).Ben Laurie
2008-12-29Apparently s->ctx could be NULL at this point (see earlierBen Laurie
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie
2008-12-13Back out pointless change.Ben Laurie
2008-12-13*** empty log message ***Ben Laurie
2008-11-15PR: 1574Dr. Stephen Henson
2008-09-03Fix from stable branch.Dr. Stephen Henson
2008-05-28From HEAD:Bodo Möller
2008-04-30Update from stable branch.Dr. Stephen Henson
2008-04-29Oops!Dr. Stephen Henson
2008-04-29Update from stable branch.Dr. Stephen Henson
2008-04-25Disable debugging fprintf.Dr. Stephen Henson
2008-03-16Fix a variety of warnings generated by some elevated compiler-fascism,Geoff Thorpe
2007-10-261. Changes for s_client.c to make it return non-zero exit code in caseDr. Stephen Henson
2007-10-18Fix from stable branch.Dr. Stephen Henson
2007-09-28Move no status notification to ssl_check_serverhello_tlsext() to ensureDr. Stephen Henson