aboutsummaryrefslogtreecommitdiff
path: root/ssl/ssl_conf.c
AgeCommit message (Expand)AuthorFilesLines
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov1-2/+3
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz1-0/+2
2019-11-03X509_LOOKUP_store: new X509_LOOKUP_METHOD that works by OSSL_STORE URIRichard Levitte1-6/+48
2019-10-09Explicitly test against NULL; do not use !p or similarRich Salz1-5/+6
2019-09-28Reorganize local header filesDr. Matthias St. Pierre1-1/+1
2019-02-15Add option to disable Extended Master SecretTodd Short1-1/+2
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte1-1/+1
2018-11-30Fix usage of deprecated SSL_set_tmp_ecdh()Antoine Salon1-7/+3
2018-07-02Add the ability to configure anti-replay via SSL_CONFMatt Caswell1-2/+9
2018-05-17Allow configuation of the number of TLSv1.3 session tickets via SSL_CONFMatt Caswell1-1/+17
2018-04-24Improve backwards compat with 1.0.2 for ECDHParametersMatt Caswell1-2/+3
2018-03-14Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell1-0/+13
2018-02-13Update copyright yearMatt Caswell1-1/+1
2018-02-01Add TLSv1.3 post-handshake authentication (PHA)Todd Short1-1/+6
2017-12-14Send a CCS after ServerHello in TLSv1.3 if using middlebox compat modeMatt Caswell1-1/+1
2017-12-14Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell1-1/+5
2017-11-30Use ChaCha only if prioritized by clntTodd Short1-1/+5
2017-08-30e_os.h removal from other headers and source files.Pauli1-1/+2
2017-07-07Do not allow non-dhe kex_modes by defaultMatt Caswell1-0/+4
2017-06-08Ignore -named_curve auto value to improve backwards compatibilityTomas Mraz1-0/+8
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short1-0/+4
2017-05-02TLS1.3 PaddingTodd Short1-1/+21
2017-04-03SSL_CONF support for certificate_authoritiesDr. Stephen Henson1-4/+18
2016-11-28Test mac-then-encryptEmilia Kasper1-0/+1
2016-11-10Rename the Elliptic Curves extension to supported_groupsMatt Caswell1-3/+10
2016-11-02Add the SSL_METHOD for TLSv1.3 and all other base changes requiredMatt Caswell1-0/+4
2016-08-18Indent ssl/Emilia Kasper1-10/+7
2016-06-22Spelling... and more spellingFdaSilvaYY1-1/+1
2016-05-17Copyright consolidation 01/10Rich Salz1-53/+5
2016-04-05New SSL test frameworkEmilia Kasper1-2/+2
2016-03-20Remove #error from include files.Rich Salz1-3/+1
2016-02-18Remove outdated DEBUG flags.Rich Salz1-6/+0
2016-02-11Move to REF_DEBUG, for consistency.Rich Salz1-3/+0
2016-02-05Restore -no_comp switch for backwards compatible behaviourViktor Dukhovni1-1/+3
2016-02-03RT3234: disable compressionEmilia Kasper1-2/+2
2016-01-10Allow disabling the min and max versionKurt Roeckx1-0/+1
2016-01-02Protocol version selection and negotiation rewriteViktor Dukhovni1-14/+18
2016-01-02Add support for minimum and maximum protocol versionKurt Roeckx1-1/+80
2015-12-16Rename some BUF_xxx to OPENSSL_xxxRich Salz1-2/+2
2015-12-04Remove SSL_{CTX_}set_ecdh_auto() and always enable ECDHKurt Roeckx1-41/+16
2015-11-09Standardise our style for checking malloc failuresMatt Caswell1-2/+2
2015-10-02Remove BIO_s_file_internal macro.Rich Salz1-1/+1
2015-09-03remove 0 assignments.Rich Salz1-17/+1
2015-07-21free names before contextDr. Stephen Henson1-1/+1
2015-07-21typoDr. Stephen Henson1-1/+1
2015-07-21SSL_CONF additions.Dr. Stephen Henson1-12/+144
2015-07-18Use uint32_t consistently for flags.Dr. Stephen Henson1-2/+2
2015-05-22Remove support for OPENSSL_NO_TLSEXTMatt Caswell1-4/+0
2015-05-08Add SSL_use_certificate_chain_file functionDr. Stephen Henson1-1/+1
2015-05-06Use "==0" instead of "!strcmp" etcRich Salz1-4/+4