summaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
AgeCommit message (Expand)Author
2017-09-23Use curve_id not the nidKurt Roeckx
2017-09-22Store groups as uint16_tDr. Stephen Henson
2017-09-21Fix strict-warnings buildPatrick Steuer
2017-09-20Allow RSA certificates to be used for RSA-PSSDr. Stephen Henson
2017-09-20Add RSA-PSS key certificate type.Dr. Stephen Henson
2017-08-30e_os.h removal from other headers and source files.Pauli
2017-07-13Use cert tables in ssl_set_sig_maskDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cert_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cipher_get_cert_index.Dr. Stephen Henson
2017-07-13Replace tls12_get_pkey_idxDr. Stephen Henson
2017-06-29Update SSL_export_keying_material() for TLSv1.3Matt Caswell
2017-06-24Disallow DSA/SHA1/etc. for pure TLS 1.3 ClientHellosBenjamin Kaduk
2017-06-21Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.Dr. Stephen Henson
2017-06-21Allow Ed25519 in TLS 1.2Dr. Stephen Henson
2017-06-21Handle signature algorithms with no associated digestDr. Stephen Henson
2017-06-21Add Ed25519 signature algorithmDr. Stephen Henson
2017-06-21Add Ed25519 to signature algorithm tableDr. Stephen Henson
2017-06-21Add index for ED25519Dr. Stephen Henson
2017-06-21Use X509_get_signature_info to get signature strength.Dr. Stephen Henson
2017-06-15Fix no-ecBenjamin Kaduk
2017-06-08Add back support for SHA224 based sig algsMatt Caswell
2017-05-22Convert existing usage of assert() to ossl_assert() in libsslMatt Caswell
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell
2017-04-26Add a ciphersuite config sanity check for serversMatt Caswell
2017-04-24Don't fail the connection in SSLv3 if server selects ECDHEMatt Caswell
2017-04-03New certificate_authorities functionsDr. Stephen Henson
2017-03-29More typo fixesFdaSilvaYY
2017-03-10Avoid questionable use of the value of a pointerBernd Edlinger
2017-03-10Fixup previous merge.Bernd Edlinger
2017-03-03Set specific error is we have no valid signature algorithms setDr. Stephen Henson
2017-03-03Signature algorithm enhancement.Dr. Stephen Henson
2017-03-03Disallow zero length signature algorithmsDr. Stephen Henson
2017-03-03Don't allow DSA for TLS 1.3Dr. Stephen Henson
2017-02-25For TLS 1.3 reject SHA1 TLS signaturesDr. Stephen Henson
2017-02-24Reject compressed point format with TLS 1.3Dr. Stephen Henson
2017-02-24Add SuiteB support to tls_choose_sigalg()Dr. Stephen Henson
2017-02-24Tidy up certificate type handling.Dr. Stephen Henson
2017-02-22Add some more consistency checks in tls_decrypt_ticket.Bernd Edlinger
2017-02-21Set default validity flags.Dr. Stephen Henson
2017-02-21remove md array: it is not used any more.Dr. Stephen Henson
2017-02-17Explicitly disallow DSA for TLS 1.3Dr. Stephen Henson
2017-02-16Use tls_choose_sigalg for client auth.Dr. Stephen Henson
2017-02-16Add client side support to tls_choose_sigalg.Dr. Stephen Henson
2017-02-16Fix warningDr. Stephen Henson
2017-02-15Set current certificate to selected certificate.Dr. Stephen Henson
2017-02-15Skip curve check if sigalg doesn't specify a curve.Dr. Stephen Henson
2017-02-15Use CERT_PKEY pointer instead of indexDr. Stephen Henson
2017-02-15Use cert_index and sigalgDr. Stephen Henson
2017-02-15Add sigalg for earlier TLS versionsDr. Stephen Henson
2017-02-15Change tls_choose_sigalg so it can set errors and alerts.Dr. Stephen Henson