summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2018-03-20Update copyright yearMatt Caswell
2018-03-19Place ticket keys into secure memoryTodd Short
2018-03-19Fix no-pskMatt Caswell
2018-03-19Apply system_default configuration on SSL_CTX_new().Tomas Mraz
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx
2018-03-19Fix a crash in SSLfatal due to invalid enc_write_ctxBernd Edlinger
2018-03-19Add an anti-replay mechanismMatt Caswell
2018-03-19Don't update the session cache when processing a client certificate in TLSv1.3Matt Caswell
2018-03-19Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3Matt Caswell
2018-03-17Fix miscellaneous typos in docs and sourceDr. Matthias St. Pierre
2018-03-17Fix a memory leak in tls1_macBernd Edlinger
2018-03-17Fix a memory leak in n_ssl3_macBernd Edlinger
2018-03-16RAND_DRBG: add a function for setting the default DRBG type and flagsDr. Matthias St. Pierre
2018-03-15Publish the RAND_DRBG APIDr. Matthias St. Pierre
2018-03-15Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()Matt Caswell
2018-03-15Add support for setting raw private HMAC keysMatt Caswell
2018-03-15Only update the server session cache when the session is readyMatt Caswell
2018-03-14Put the default set of TLSv1.3 ciphersuites in a header fileMatt Caswell
2018-03-14Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell
2018-03-14Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell
2018-03-14Use the TLSv1.3 record header as AADMatt Caswell
2018-03-13update SRP copyright noticeTim Hudson
2018-03-12Fix enable-ssl-traceMatt Caswell
2018-03-12Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cbBenjamin Saunders
2018-03-12Session Ticket app dataTodd Short
2018-03-09Reuse extension_is_relevant() in should_add_extension()Benjamin Kaduk
2018-03-09Add SSL/SSL_CTX_use_cert_and_key()Todd Short
2018-03-09Give more information in the SSL_stateless return codeMatt Caswell
2018-03-09Fallback on old style PSK callbacks if the new style ones aren't presentMatt Caswell
2018-03-09Tolerate TLSv1.3 PSKs that are a different size to the hash sizeMatt Caswell
2018-03-08Duplicate entries ssl_handshake_tbl trace entries...FdaSilvaYY
2018-03-05If not sending key_share (no TLSv1.3), return appropriately.Todd Short
2018-03-05Fix status_request and SCT extensionsMatt Caswell
2018-03-05Add X448/Ed448 support to libsslMatt Caswell
2018-02-28Do not set a nonzero default max_early_dataBenjamin Kaduk
2018-02-28Tell the ciphers which DRBG to use for generating random bytes.Kurt Roeckx
2018-02-26Export keying material using early exporter master secretTatsuhiro Tsujikawa
2018-02-23Remove OSSLzu, and fix the one place that used it.Rich Salz
2018-02-23Remove unreachable statement.Pauli
2018-02-21Sanity check the ticket length before using key name/IVMatt Caswell
2018-02-19The record version for ClientHello2 should be TLS1.2Matt Caswell
2018-02-15If s->ctx is NULL then this is an internal errorMatt Caswell
2018-02-14Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitableMatt Caswell
2018-02-13DRBG: make the derivation function the default for ctr_drbgDr. Matthias St. Pierre
2018-02-13Update copyright yearMatt Caswell
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell
2018-02-12Don't overestimate the ticket ageMatt Caswell
2018-02-09Swap the check in ssl3_write_pending to avoid usingBernd Edlinger
2018-02-09Don't calculate the Finished MAC twiceMatt Caswell
2018-02-02Make sure that exporting keying material is allowedTatsuhiro Tsujikawa