summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2017-02-26Add missing blank lines and cosmetic improvementsDr. Stephen Henson
2017-02-26TLS 1.3 support for ssl_print_ticket()Dr. Stephen Henson
2017-02-26print out alpn extensionDr. Stephen Henson
2017-02-26Add ffdhe groups to trace outputDr. Stephen Henson
2017-02-26Print numerical value of named roupsDr. Stephen Henson
2017-02-26Add entry for PSK extensionDr. Stephen Henson
2017-02-26Add trace entries for remaining TLS 1.3 ciphersuitesDr. Stephen Henson
2017-02-25For TLS 1.3 reject SHA1 TLS signaturesDr. Stephen Henson
2017-02-24Reject compressed point format with TLS 1.3Dr. Stephen Henson
2017-02-24Add SuiteB support to tls_choose_sigalg()Dr. Stephen Henson
2017-02-24Tidy up certificate type handling.Dr. Stephen Henson
2017-02-23Implement SSL_read_ex() and SSL_write_ex() as documented.Kurt Roeckx
2017-02-23Add SSL_CTX early callbackBenjamin Kaduk
2017-02-23Prepare for WORK_MORE_CBenjamin Kaduk
2017-02-23Refactor SSL_bytes_to_cipher_list()Benjamin Kaduk
2017-02-23Export SSL_bytes_to_cipher_list()Benjamin Kaduk
2017-02-23Let ssl_get_cipher_by_char yield not-valid ciphersBenjamin Kaduk
2017-02-23Add more first-class support for SCSVSBenjamin Kaduk
2017-02-23Move CLIENTHELLO_MSG up in the headerBenjamin Kaduk
2017-02-23Store the number of extensions in CLIENTHELLO_MSGBenjamin Kaduk
2017-02-23output number of exts from tls_collect_extensions()Benjamin Kaduk
2017-02-22Add some more consistency checks in tls_decrypt_ticket.Bernd Edlinger
2017-02-22Fix i2d_SSL_SESSION pp output parameter should point to end of asn1 data.Bernd Edlinger
2017-02-21Check validity, not just signing for all certificatesDr. Stephen Henson
2017-02-21Set default validity flags.Dr. Stephen Henson
2017-02-21remove md array: it is not used any more.Dr. Stephen Henson
2017-02-21fix spelling of Camellia in commentPauli
2017-02-21Implementation of the ARIA cipher as described in RFC 5794.Pauli
2017-02-17Explicitly disallow DSA for TLS 1.3Dr. Stephen Henson
2017-02-17Updates following review feedbackMatt Caswell
2017-02-17Don't use an enum in the return type for a public API functionMatt Caswell
2017-02-17Fix a shadowed global variable warningMatt Caswell
2017-02-17Updates following review feedbackMatt Caswell
2017-02-17Limit the number of KeyUpdate messages we can processMatt Caswell
2017-02-17Actually update the keys when a KeyUpdate message is sent or receivedMatt Caswell
2017-02-17If we receive an "update_requested" KeyUpdate then respond with a KeyUpdateMatt Caswell
2017-02-17Add the ability for a server to receive a KeyUpdate messageMatt Caswell
2017-02-17Add a SSL_get_key_update_type() functionMatt Caswell
2017-02-17Add the ability for a client to send a KeyUpdate messageMatt Caswell
2017-02-17Add the ability for a client to receive a KeyUpdate messageMatt Caswell
2017-02-17Add SSL_trace() support for KeyUpdate messagesMatt Caswell
2017-02-17Provide a function to send a KeyUpdate messageMatt Caswell
2017-02-16Use tls_choose_sigalg for client auth.Dr. Stephen Henson
2017-02-16Add client side support to tls_choose_sigalg.Dr. Stephen Henson
2017-02-16Remove an OPENSSL_assert() and replace with a soft assert and checkMatt Caswell
2017-02-16Don't change the state of the ETM flags until CCS processingMatt Caswell
2017-02-16Fix warningDr. Stephen Henson
2017-02-15Set current certificate to selected certificate.Dr. Stephen Henson
2017-02-15Rework error handling of custom_ext_meth_add towards strong exception safety.Bernd Edlinger
2017-02-15Skip curve check if sigalg doesn't specify a curve.Dr. Stephen Henson