summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2017-03-29More typo fixesFdaSilvaYY
2017-03-28Fix a few more typosFdaSilvaYY
2017-03-24Move the downgrade sentinel declarations to a header fileMatt Caswell
2017-03-24Add client side support for TLSv1.3 downgrade mechanismMatt Caswell
2017-03-24Add server side support for TLSv1.3 downgrade mechanismMatt Caswell
2017-03-21Fix resumption after HRRMatt Caswell
2017-03-19TLS1.3: Correct intermediate secret derivationJoseph Birr-Pixton
2017-03-17Implement certificate_authorities extensionDr. Stephen Henson
2017-03-17Support draft-19 TLS certificate request formatDr. Stephen Henson
2017-03-17Allow signature algorithms in TLS 1.3 certificate request extensions.Dr. Stephen Henson
2017-03-17Move parsing and construction of CA names to separate functionsDr. Stephen Henson
2017-03-16Remove obsolete version test when returning CA names.Dr. Stephen Henson
2017-03-16Add TLSv1.3 draft-19 messages to traceTodd Short
2017-03-16Fix the Padding extensionMatt Caswell
2017-03-16Updates following review feedbackMatt Caswell
2017-03-16Fix ciphersuite handling during an HRRMatt Caswell
2017-03-16Ensure after an HRR any PSKs have the right hashMatt Caswell
2017-03-16HelloRetryRequest updates for draft-19Matt Caswell
2017-03-16Check ClientHello boundary as per draft-19Matt Caswell
2017-03-16Merge early_data_info extension into early_dataMatt Caswell
2017-03-16Update end of early data processing for draft-19Matt Caswell
2017-03-16Update secret generation for draft-19Matt Caswell
2017-03-15Remove dead codeBenjamin Kaduk
2017-03-15Tighten up client status_request processingBenjamin Kaduk
2017-03-15Clear alpn_selected_len for clients, tooBenjamin Kaduk
2017-03-14De-obfuscateBenjamin Kaduk
2017-03-14Fix some -Wshadow warningsBenjamin Kaduk
2017-03-10Use the callbacks from the SSL object instead of the SSL_CTX objectPauli
2017-03-10Avoid questionable use of the value of a pointerBernd Edlinger
2017-03-10Use the new TLSv1.3 certificate_required alert where appropriateMatt Caswell
2017-03-10Check that the PSK extension is lastMatt Caswell
2017-03-10Fixup previous merge.Bernd Edlinger
2017-03-08this change will prevent undefined behavior when src and dst are equal (memcp...Roberto Guimaraes
2017-03-08Fix no-compMatt Caswell
2017-03-07Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundaryMatt Caswell
2017-03-07Provide a function to test whether we have unread records pendingMatt Caswell
2017-03-07Get pointer type right in BIO_ssl_shutdown()Rich Salz
2017-03-06Tweak the TLSv1.3 record overflow limitsMatt Caswell
2017-03-06Fix double free in cookie generation.Kurt Roeckx
2017-03-04Don't call memcmp with a NULL pointerMatt Caswell
2017-03-04Add basic TLSv1.3 cookie supportMatt Caswell
2017-03-04Fix a memory leak on an error pathMatt Caswell
2017-03-03Set specific error is we have no valid signature algorithms setDr. Stephen Henson
2017-03-03Signature algorithm enhancement.Dr. Stephen Henson
2017-03-03Disallow zero length signature algorithmsDr. Stephen Henson
2017-03-03Don't allow DSA for TLS 1.3Dr. Stephen Henson
2017-03-03Silence some more clang warningsMatt Caswell
2017-03-02Silence some clang warningsMatt Caswell
2017-03-02Update early data API for writing to unauthenticated clientsMatt Caswell
2017-03-02Rename SSL_write_early() to SSL_write_early_data()Matt Caswell