summaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
AgeCommit message (Expand)Author
2015-12-04Remove support for SSL_{CTX_}set_tmp_ecdh_callback().Kurt Roeckx
2015-11-30Remove GOST special case: handled automatically now.Dr. Stephen Henson
2015-11-30Use digest indices for signature algorithms.Dr. Stephen Henson
2015-11-30Use digest tables for defaults.Dr. Stephen Henson
2015-11-25Remove unused cert_verify_mac codeDr. Stephen Henson
2015-11-24Use EVP_md5_sha1() to generate client verifyDr. Stephen Henson
2015-11-24Use MD5+SHA1 for default digest if appropriate.Dr. Stephen Henson
2015-11-23Patch containing TLS implementation for GOST 2012Dmitry Belyavsky
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell
2015-11-14Don't alow TLS v1.0 ciphersuites for SSLv3Dr. Stephen Henson
2015-11-09Remove redundant check from tls1_get_curvelistMatt Caswell
2015-11-09Standardise our style for checking malloc failuresMatt Caswell
2015-11-08Use uint32_t and int32_t for SSL_CIPHER structure.Dr. Stephen Henson
2015-11-02Remove a trivially true OPENSSL_assertMatt Caswell
2015-10-30Move in_handshake into STATEMMatt Caswell
2015-10-23Remove useless codeAlessandro Ghedini
2015-10-07Don't advance PACKET in ssl_check_for_safariMatt Caswell
2015-10-05Validate ClientHello extension field lengthAlessandro Ghedini
2015-10-05ssl3_get_client_hello: rearrange logicEmilia Kasper
2015-09-17Remove PACKET_(get|goto)_bookmarkEmilia Kasper
2015-09-07PACKETise ServerHello processingMatt Caswell
2015-08-14Fix session ticketsMatt Caswell
2015-08-13Enhance PACKET readabilityMatt Caswell
2015-08-10RT3999: Remove sub-component version stringsRich Salz
2015-08-03PACKETise ClientHello processingMatt Caswell
2015-07-30Make auto DH work with DHEPSKDr. Stephen Henson
2015-07-30Check for kECDH with extensions.Dr. Stephen Henson
2015-07-30Disable all PSK if no callback.Dr. Stephen Henson
2015-07-28Allow any order for signature algorithm string.Dr. Stephen Henson
2015-07-18Use uint32_t consistently for flags.Dr. Stephen Henson
2015-06-12Allow a zero length extension blockAdam Langley
2015-06-10Tighten extension handlingMatt Caswell
2015-06-04Allow all curves when the client doesn't send an supported elliptic curves ex...Kurt Roeckx
2015-05-26Don't check for a negative SRP extension sizeMatt Caswell
2015-05-22Remove support for OPENSSL_NO_TLSEXTMatt Caswell
2015-05-20Only support >= 256-bit elliptic curves with ecdh_auto (server) or by default...Emilia Kasper
2015-05-19move masks out of CERT structureDr. Stephen Henson
2015-05-18Move certificate validity flags out of CERT.Dr. Stephen Henson
2015-05-18Move signing digest out of CERT.Dr. Stephen Henson
2015-05-18CERT tidyDr. Stephen Henson
2015-05-16Version negotiation rewrite cleanupMatt Caswell
2015-05-13Remove Kerberos support from libsslMatt Caswell
2015-05-06Use "==0" instead of "!strcmp" etcRich Salz
2015-05-06Initialize potentially uninitialized local variablesGunnar Kudrjavets
2015-05-03Add OSSL_NELEM macro.Dr. Stephen Henson
2015-05-01free null cleanup finaleRich Salz
2015-04-30free NULL cleanup 5aRich Salz
2015-04-16Code style: space after 'if'Viktor Dukhovni
2015-03-26Removed dependency on rrec from heartbeat processingMatt Caswell
2015-03-26Encapsulate s->s3->rrecMatt Caswell