summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2017-01-31Majority rules, use session_ctx vs initial_ctxTodd Short
2017-01-31Tidy up Suite B logicDr. Stephen Henson
2017-01-31Remove peer_md and use peer_sigalg instead.Dr. Stephen Henson
2017-01-31Simplify sigalgs code.Dr. Stephen Henson
2017-01-31Add digest and key indices to table.Dr. Stephen Henson
2017-01-31Don't check certificate type against ciphersuite for TLS 1.3Dr. Stephen Henson
2017-01-31Add TLS 1.3 signing curve checkDr. Stephen Henson
2017-01-31Only allow PSS signatures with RSA keys and TLS 1.3Dr. Stephen Henson
2017-01-31Store table entry to peer signature algorithm.Dr. Stephen Henson
2017-01-30Free up the memory for the NewSessionTicket extensionsMatt Caswell
2017-01-30Make sure we free and cleanse the pms value in all code pathsMatt Caswell
2017-01-30Update macros.Dr. Stephen Henson
2017-01-30fix style issuesDr. Stephen Henson
2017-01-30Fix TLS 1.2 and no sigalgs.Dr. Stephen Henson
2017-01-30Replace TLS_SIGALGS with SIGALG_LOOKUPDr. Stephen Henson
2017-01-30Support TLS 1.3 signature scheme names.Dr. Stephen Henson
2017-01-30Extend TLS 1.3 signature table.Dr. Stephen Henson
2017-01-30Use shared signature algorithm list to find type.Dr. Stephen Henson
2017-01-30Add SSL_get_peer_signature_type_nid() function.Dr. Stephen Henson
2017-01-30Store peer signature type.Dr. Stephen Henson
2017-01-30More complete PSS support.Dr. Stephen Henson
2017-01-30Use uint16_t for signature scheme.Dr. Stephen Henson
2017-01-30use RSA_PSS_SALTLEN_DIGEST constantDr. Stephen Henson
2017-01-30Expand comment in tls_process_hello_req()Matt Caswell
2017-01-30Add a TODO around validating the ticket ageMatt Caswell
2017-01-30Various style fixes following review feedbackMatt Caswell
2017-01-30Remove unneccessary commentsMatt Caswell
2017-01-30Use for loop in WPACKET_fill_lengths instead of do...whileMatt Caswell
2017-01-30Move the SSL3_CK_CIPHERSUITE_FLAG out of public headerMatt Caswell
2017-01-30If we have no suitable PSK kex modes then don't attempt to resumeMatt Caswell
2017-01-30Fix <= TLS1.2 breakMatt Caswell
2017-01-30Make calls to SSL_renegotiate() error out for TLSv1.3Matt Caswell
2017-01-30Make the "ticket" function return codes clearerMatt Caswell
2017-01-30Miscellaneous style tweaks based on feedback receivedMatt Caswell
2017-01-30Ensure the al variable is properly ininitialised in all code pathsMatt Caswell
2017-01-30Ensure the age_add variable is properly initialisedMatt Caswell
2017-01-30Always ensure that session->cipher is setMatt Caswell
2017-01-30Tweak a commentMatt Caswell
2017-01-30Use the correct session resumption mechanismMatt Caswell
2017-01-30Move session version consistency checkMatt Caswell
2017-01-30Set the kex modes on the client too.Matt Caswell
2017-01-30Implement server side of PSK extension constructionMatt Caswell
2017-01-30Implement Server side of PSK extension parsingMatt Caswell
2017-01-30Make sure we also cleanse the finished keyMatt Caswell
2017-01-30Provide a key_share extension finaliserMatt Caswell
2017-01-30Add support for client side parsing of the PSK extensionMatt Caswell
2017-01-30Add support for the age_add fieldMatt Caswell
2017-01-30Construct the client side psk extension for TLSv1.3Matt Caswell
2017-01-30Provide a new WPACKET function for filling in all the lengthsMatt Caswell
2017-01-30Never send a session id in TLS1.3Matt Caswell