summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2018-07-19Don't skip over early_data if we sent an HRRMatt Caswell
2018-07-18Check that the public key OID matches the sig algMatt Caswell
2018-07-17Fix no-pskMatt Caswell
2018-07-17Always issue new tickets when using TLSv1.3 stateful ticketsMatt Caswell
2018-07-17Don't remove sessions from the cache during PHA in TLSv1.3Matt Caswell
2018-07-13As a server don't select TLSv1.3 if we're not capable of itMatt Caswell
2018-07-13Use ssl_version_supported() when choosing server versionMatt Caswell
2018-07-13Do not use GOST sig algs in TLSv1.3 where possibleMatt Caswell
2018-07-06Introduce the recv_max_early_data settingMatt Caswell
2018-07-03Remove TLSv1.3 tickets from the client cache as we use themMatt Caswell
2018-07-03Restore behaviour from commit 36ff232cf that was incorrectly removedMatt Caswell
2018-07-02Add the ability to configure anti-replay via SSL_CONFMatt Caswell
2018-07-02Add setters to set the early_data callbackMatt Caswell
2018-07-02Make the anti-replay feature optionalMatt Caswell
2018-07-02Fix a NULL ptr deref in error path in tls_process_cke_dhe()Matt Caswell
2018-07-01Address coverity-reported NULL dereference in SSL_SESSION_print()Benjamin Kaduk
2018-06-29Check return from BN_set_word.Pauli
2018-06-27Return a fatal error if application data is encountered during shutdownMatt Caswell
2018-06-27Return SSL_ERROR_WANT_READ if SSL_shutdown() encounters handshake dataMatt Caswell
2018-06-27Auto retry if we ditch records during shutdownMatt Caswell
2018-06-26Use stateful tickets if we are doing anti-replayMatt Caswell
2018-06-26Respect SSL_OP_NO_TICKET in TLSv1.3Matt Caswell
2018-06-26Restructure the ticket construction codeMatt Caswell
2018-06-26Update SSL_SESSION_print for TLSv1.3Matt Caswell
2018-06-25Don't change a session once its in the cacheMatt Caswell
2018-06-22Remove __cplusplus preamble from internal headersNicola Tuveri
2018-06-21Don't use OPENSSL_strdup() for copying alpn_selectedMatt Caswell
2018-06-19Fix enable-ssl3 enable-ssl3-methodMatt Caswell
2018-06-11Remodel the if sequence for handling alertsMatt Caswell
2018-06-11Don't send a warning alert in TLSv1.3Matt Caswell
2018-06-11Fix TLSv1.3 alert handlingMatt Caswell
2018-06-07Do not free a session before calling the remove_session_cbMarcus Huewe
2018-06-07Reformulate the if condition in tls_process_new_session_ticketMatt Caswell
2018-06-07Don't store the ticket nonce in the sessionMatt Caswell
2018-06-07Fix TLSv1.3 ticket noncesMatt Caswell
2018-06-07Fix EAP-FASTMatt Caswell
2018-05-31EVP_MD_size() can return an errorMatt Caswell
2018-05-30Send GOST SignatureAlgorithms when TLS 1.2 in useDmitry Belyavskiy
2018-05-30Bugfix: GOST2012 certificates for GOST ciphersuites were broken.Dmitry Belyavskiy
2018-05-29Update copyright yearMatt Caswell
2018-05-25Fix array bounds violation in ssl_session_dupBernd Edlinger
2018-05-23Use the client app traffic secret for PHA Finished messageMatt Caswell
2018-05-22Enable SSL_MODE_AUTO_RETRY by defaultKurt Roeckx
2018-05-22Fix no-ec in combination with no-dhMatt Caswell
2018-05-21ssl/ssl_txt: fix NULL-checkTilman Keskinöz
2018-05-21Don't cache stateless tickets in TLSv1.3Matt Caswell
2018-05-17Change the default number of NewSessionTickets we send to 2Matt Caswell
2018-05-17Allow configuation of the number of TLSv1.3 session tickets via SSL_CONFMatt Caswell
2018-05-17Enable the ability to set the number of TLSv1.3 session tickets sentMatt Caswell
2018-05-15Suport TLSv1.3 draft 28Matt Caswell