summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2018-03-15Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()Matt Caswell
2018-03-15Add support for setting raw private HMAC keysMatt Caswell
2018-03-15Only update the server session cache when the session is readyMatt Caswell
2018-03-14Put the default set of TLSv1.3 ciphersuites in a header fileMatt Caswell
2018-03-14Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell
2018-03-14Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell
2018-03-14Use the TLSv1.3 record header as AADMatt Caswell
2018-03-13update SRP copyright noticeTim Hudson
2018-03-12Fix enable-ssl-traceMatt Caswell
2018-03-12Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cbBenjamin Saunders
2018-03-12Session Ticket app dataTodd Short
2018-03-09Reuse extension_is_relevant() in should_add_extension()Benjamin Kaduk
2018-03-09Add SSL/SSL_CTX_use_cert_and_key()Todd Short
2018-03-09Give more information in the SSL_stateless return codeMatt Caswell
2018-03-09Fallback on old style PSK callbacks if the new style ones aren't presentMatt Caswell
2018-03-09Tolerate TLSv1.3 PSKs that are a different size to the hash sizeMatt Caswell
2018-03-08Duplicate entries ssl_handshake_tbl trace entries...FdaSilvaYY
2018-03-05If not sending key_share (no TLSv1.3), return appropriately.Todd Short
2018-03-05Fix status_request and SCT extensionsMatt Caswell
2018-03-05Add X448/Ed448 support to libsslMatt Caswell
2018-02-28Do not set a nonzero default max_early_dataBenjamin Kaduk
2018-02-28Tell the ciphers which DRBG to use for generating random bytes.Kurt Roeckx
2018-02-26Export keying material using early exporter master secretTatsuhiro Tsujikawa
2018-02-23Remove OSSLzu, and fix the one place that used it.Rich Salz
2018-02-23Remove unreachable statement.Pauli
2018-02-21Sanity check the ticket length before using key name/IVMatt Caswell
2018-02-19The record version for ClientHello2 should be TLS1.2Matt Caswell
2018-02-15If s->ctx is NULL then this is an internal errorMatt Caswell
2018-02-14Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitableMatt Caswell
2018-02-13DRBG: make the derivation function the default for ctr_drbgDr. Matthias St. Pierre
2018-02-13Update copyright yearMatt Caswell
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell
2018-02-12Don't overestimate the ticket ageMatt Caswell
2018-02-09Swap the check in ssl3_write_pending to avoid usingBernd Edlinger
2018-02-09Don't calculate the Finished MAC twiceMatt Caswell
2018-02-02Make sure that exporting keying material is allowedTatsuhiro Tsujikawa
2018-02-02Remove generation of exporter master secret on client application trafficTatsuhiro Tsujikawa
2018-02-02Generate exporter_master_secret after server FinishedTatsuhiro Tsujikawa
2018-02-01Fix some minor code nitsTodd Short
2018-02-01Free pha_dgst in SSL_clear()Todd Short
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short
2018-02-01Fix some instances of the wrong alert type being sentMatt Caswell
2018-01-30Move decisions about whether to accept reneg into the state machineMatt Caswell
2018-01-29Add RAND_DRBG_bytesKurt Roeckx
2018-01-26Fix ssl-trace with TLS 1.3 draft-23 PSS sigalgsBenjamin Kaduk
2018-01-25Fix uninitialized read in sigalg parsing codeBenjamin Kaduk
2018-01-25Add support for the TLS 1.3 signature_algorithms_cert extensionBenjamin Kaduk
2018-01-25Propagate TLS 1.3 sigalgs through tls1_set_sigalgs()Benjamin Kaduk
2018-01-25Add TLS 1.3 draft-23 PSS signature algorithmsBenjamin Kaduk
2018-01-24Updates following review of SSL_stateless() codeMatt Caswell