summaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
AgeCommit message (Expand)Author
2018-06-29Check return from BN_set_word.Pauli
2018-04-25Fix the MAX_CURVELIST definitionMatt Caswell
2018-04-24Allow intermediate CAs to use RSA PSS in 1.1.0Matt Caswell
2018-04-20Fix the alert sent if no shared sig algsMatt Caswell
2018-04-17Ignore the status_request extension in a resumption handshakeMatt Caswell
2018-03-28Tolerate a Certificate using a non-supported group on server sideMatt Caswell
2018-03-27Update copyright yearMatt Caswell
2018-02-21Sanity check the ticket length before using key name/IVMatt Caswell
2018-01-30Add the SSL_OP_NO_RENEGOTIATION option to 1.1.0Matt Caswell
2017-10-05Add SSL_OP_NO_ENCRYPT_THEN_MACDavid Woodhouse
2017-08-16Reorder extensions to put SigAlgs lastTodd Short
2017-07-14Fix gcc-7 warnings about missing fall thru comments.Bernd Edlinger
2017-06-21Don't fail the connection in SSLv3 if server selects ECDHEMatt Caswell
2017-04-11Allow an ALPN callback to pretend to not existBenjamin Kaduk
2017-03-30More typo fixesFdaSilvaYY
2017-03-10Avoid questionable use of the value of a pointer that refers to spaceBernd Edlinger
2017-02-22Add some more consistency checks in tls_decrypt_ticket.Bernd Edlinger
2017-02-16Don't change the state of the ETM flags until CCS processingMatt Caswell
2017-02-14Use TLSEXT_KEYNAME_LENGTH in tls_decrypt_ticket.Bernd Edlinger
2017-02-05Majority rules, use session_ctx vs initial_ctxTodd Short
2017-01-26Use correct signature algorithm list when sending or checking.Dr. Stephen Henson
2017-01-18If client doesn't send curves list, don't assume all.Rich Salz
2016-10-28Implement length checks as a macroMatt Caswell
2016-10-28Ensure we have length checks for all extensionsMatt Caswell
2016-10-28Fix length check writing status request extensionMatt Caswell
2016-10-20Disable encrypt_then_mac negotiation for DTLS.David Woodhouse
2016-09-22Fix a mem leak in NPN handlingMatt Caswell
2016-09-22Fix OCSP Status Request extension unbounded memory growthMatt Caswell
2016-08-23Sanity check ticket length.Dr. Stephen Henson
2016-08-18Indent ssl/Emilia Kasper
2016-08-13Modify TLS support for new X25519 API.Dr. Stephen Henson
2016-07-19Fix two bugs in clienthello processingEmilia Kasper
2016-06-29SpellingFdaSilvaYY
2016-06-22Spelling... and more spellingFdaSilvaYY
2016-06-18Useless header include of openssl/rand.hFdaSilvaYY
2016-06-14Fix commentMatt Caswell
2016-06-09Fix session ticket and SNITodd Short
2016-05-23remove encrypt then mac ifdefsDr. Stephen Henson
2016-05-17Copyright consolidation 01/10Rich Salz
2016-05-16Use AES256 for the default encryption algoritm for TLS session ticketsTJ Saunders
2016-05-16session tickets: Use sizeof() for the various fieldsTJ Saunders
2016-05-16Fix NPN protocol name list validationKazuki Yamaguchi
2016-05-09Don't send signature algorithms when client_version is below TLS 1.2.David Benjamin
2016-04-28various spelling fixesFdaSilvaYY
2016-04-21Fix no-ocsp on Windows (and probably VMS)Matt Caswell
2016-04-18Rename some lowercase API'sRich Salz
2016-04-09Make DH opaqueMatt Caswell
2016-04-06Fix no-ocspMatt Caswell
2016-04-04Revert "various spelling fixes"Rich Salz
2016-04-04various spelling fixesFdaSilvaYY