summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2017-07-26Add support to free/allocate SSL buffersTodd Short
2017-07-21Support converting cipher name to RFC name and vice versaPaul Yang
2017-07-18Remove session checks from SSL_clear()Matt Caswell
2017-07-18Fix SSL_clear() in TLSv1.3Matt Caswell
2017-07-18Tolerate a zero length ticket nonceMatt Caswell
2017-07-18Fix early_data with an HRRMatt Caswell
2017-07-17Fix TLSv1.3 exporter secretTatsuhiro Tsujikawa
2017-07-13Move certificate table to header file so it can be tested.Dr. Stephen Henson
2017-07-13Use cert tables in ssl_set_sig_maskDr. Stephen Henson
2017-07-13make errorsDr. Stephen Henson
2017-07-13Use cert tables instead of X509_certificate_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cert_typeDr. Stephen Henson
2017-07-13Use certificate tables instead of ssl_cipher_get_cert_index.Dr. Stephen Henson
2017-07-13Replace tls12_get_pkey_idxDr. Stephen Henson
2017-07-13Add SSL_aCERT: this is used for any ciphersuite with a certificate.Dr. Stephen Henson
2017-07-13Add certificate properties table.Dr. Stephen Henson
2017-07-08Fix cipher_compareRichard Levitte
2017-07-07Do not allow non-dhe kex_modes by defaultMatt Caswell
2017-07-07Updates following review feedback of TLSv1.3 draft-21 codeMatt Caswell
2017-07-07Update SSL_trace() to know about ticket_nonceMatt Caswell
2017-07-07Update the early_secret generation to use the new ticket_nonce fieldMatt Caswell
2017-07-07Update tls13_hkdf_expand() to take the length of the dataMatt Caswell
2017-07-07Send and receive the ticket_nonce field in a NewSessionTicketMatt Caswell
2017-07-05Error out when forcing an unsupported TLS versionBenjamin Kaduk
2017-07-03Fix potential crash in tls_construct_finished.Bernd Edlinger
2017-07-03Fix a crash in tls_construct_client_certificate.Bernd Edlinger
2017-07-03Fix TLSv1.3 exporterMatt Caswell
2017-06-30Drop support for OPENSSL_NO_TLS1_3_METHODMatt Caswell
2017-06-29Updates following review of SSL_export_key_material() changesMatt Caswell
2017-06-29Update SSL_export_keying_material() for TLSv1.3Matt Caswell
2017-06-28ssl_session_dup() missing ext.alpn_sessionTodd Short
2017-06-24Disallow DSA/SHA1/etc. for pure TLS 1.3 ClientHellosBenjamin Kaduk
2017-06-23Fix another EVP_DigestVerify() instanceMatt Caswell
2017-06-23Treat all failures from EVP_DigestVerify() as a bad signatureMatt Caswell
2017-06-22Fix tls1_generate_master_secretAlexey Komnin
2017-06-22Fix the names of ChaCha20-Poly1305 cipher suites in t1_trce.c.David Benjamin
2017-06-21Avoid compiler complainingPaul Yang
2017-06-21Add documentation for the SSL_export_keying_material() functionMatt Caswell
2017-06-21Fix DTLS failure when used in a build which has SCTP enabledMatt Caswell
2017-06-21PSK related tweaks based on review feedbackMatt Caswell
2017-06-21Fix some bugs in the TLSv1.3 PSK codeMatt Caswell
2017-06-21Make the input parameters for SSL_SESSION_set1_master_key constMatt Caswell
2017-06-21Add SSL_SESSION_set_protocol_version()Matt Caswell
2017-06-21Add SSL_SESSION_set_cipher()Matt Caswell
2017-06-21Add SSL_SESSION_set1_master_key()Matt Caswell
2017-06-21Add a function to get the handshake digest for an SSL_CIPHERMatt Caswell
2017-06-21Add public API functions for setting TLSv1.3 PSK callbacksMatt Caswell
2017-06-21Add TLSv1.3 client side external PSK supportMatt Caswell
2017-06-21Add TLSv1.3 server side external PSK supportMatt Caswell
2017-06-21Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.Dr. Stephen Henson