summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2017-05-03Limit padded record to max plaintextTodd Short
2017-05-03Clarify serverinfo usage with Certificate messagesMatt Caswell
2017-05-03Add an SSL_ prefix to SERVERINFOV2 and SERVERINFOV1Matt Caswell
2017-05-03Only send custom extensions where we have received one in the ClientHelloMatt Caswell
2017-05-03Extend the SERVERINFO file format to include an extensions contextMatt Caswell
2017-05-02Fix comment around safari fingerprint checkMatt Caswell
2017-05-02TLS1.3 PaddingTodd Short
2017-04-26Return success in custom_ext_parse_old_cb_wrap if parse_cb is NULLGraham Edgecombe
2017-04-26Don't treat PACKET_remaining() as booleanTatsuhiro Tsujikawa
2017-04-26Break before && operatorTatsuhiro Tsujikawa
2017-04-26Call init and finalization functions per extension messageTatsuhiro Tsujikawa
2017-04-26Always duplicate the session on NewSessionTicket in TLSv1.3Matt Caswell
2017-04-26Add support for SSL_SESSION_is_resumable()Matt Caswell
2017-04-26Remove TLS1.3 TODO around testing for session id lengthMatt Caswell
2017-04-26Add a ciphersuite config sanity check for serversMatt Caswell
2017-04-26Add a ciphersuite config sanity check for clientsMatt Caswell
2017-04-26Don't overwrite the alert value if there is no alert to sendMatt Caswell
2017-04-25Don't attempt to send fragments > max_send_fragment in DTLSMatt Caswell
2017-04-25Remove special case code for SCTP reneg handlingMatt Caswell
2017-04-24Don't fail the connection in SSLv3 if server selects ECDHEMatt Caswell
2017-04-24if log fails, avoid pms getting double freeRich Salz
2017-04-20Ignore dups in X509_STORE_add_*Rich Salz
2017-04-19Fix minor compiler issues.Todd Short
2017-04-13ASN.1: adapt our use of INTxx et al by making them explicitely embeddedRichard Levitte
2017-04-12CT_POLICY_EVAL_CTX_set_time expects milliseconds, but given secondsRob Percival
2017-04-11Remove ECDH(E) ciphers from SSLv3Todd Short
2017-04-11Additional check to handle BAD SSL_write retryRich Salz
2017-04-10Allow an ALPN callback to pretend to not existBenjamin Kaduk
2017-04-10Publish our INT32, UINT32, INT64, UINT64 ASN.1 types and Z variantsRichard Levitte
2017-04-07Remove an out of date TODOMatt Caswell
2017-04-07Create an ENDPOINT enum type for use internallyMatt Caswell
2017-04-07Prefix custom extension API callback types with SSL_Matt Caswell
2017-04-07Various style tweaks based on feedbackMatt Caswell
2017-04-07Implement a new custom extensions APIMatt Caswell
2017-04-07Move the extensions context codes into the public APIMatt Caswell
2017-04-07Move ssl/t1_ext.c to ssl/statem/extensions_cust.cMatt Caswell
2017-04-04Convert SSL_SESSION_ASN1 to use size specific integersRichard Levitte
2017-04-03Constify SSL_dup_CA_list()Dr. Stephen Henson
2017-04-03Don't use client specific functions to retrieve CA listDr. Stephen Henson
2017-04-03SSL_CONF support for certificate_authoritiesDr. Stephen Henson
2017-04-03New certificate_authorities functionsDr. Stephen Henson
2017-04-03Fix calls to SSL_get_server_tmp_key() in TLSv1.3Matt Caswell
2017-04-03Tweak a style issueMatt Caswell
2017-04-03Restore s->early_data_state with the original valueTatsuhiro Tsujikawa
2017-04-03Don't handle handshake messages when writing early data on serverMatt Caswell
2017-04-03Fix a typo in the SSL_get_max_early_data() declarationsKazuki Yamaguchi
2017-03-31Update SSL_extension_supported()Matt Caswell
2017-03-30Fix early data bug with pause between EoED and CFMatt Caswell
2017-03-30Fix bug with SSL_read_early_data()Matt Caswell
2017-03-29Fix the build warning under OPENSSL_NO_GOSTQin Long