aboutsummaryrefslogtreecommitdiff
path: root/ssl/statem/statem_lib.c
AgeCommit message (Expand)AuthorFilesLines
2017-08-03Move ossl_assertMatt Caswell1-0/+1
2017-08-01Fix new_session_cb calls in TLSv1.3Matt Caswell1-1/+6
2017-07-13Use cert tables instead of X509_certificate_typeDr. Stephen Henson1-4/+2
2017-07-13Use certificate tables instead of ssl_cert_typeDr. Stephen Henson1-29/+0
2017-07-03Fix potential crash in tls_construct_finished.Bernd Edlinger1-1/+6
2017-06-23Fix another EVP_DigestVerify() instanceMatt Caswell1-4/+1
2017-06-21Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.Dr. Stephen Henson1-1/+1
2017-06-21Convert key exchange to one shot callDr. Stephen Henson1-0/+18
2017-06-21Handle signature algorithms with no associated digestDr. Stephen Henson1-3/+6
2017-06-21Add index for ED25519Dr. Stephen Henson1-0/+2
2017-06-20Modify Sun copyright to follow OpenSSL styleRich Salz1-6/+1
2017-06-09fix check of broken implementations of GOST ciphersuitesPichulin Dmitrii1-36/+39
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short1-0/+4
2017-05-23Don't use one shot API for SSLv3.Dr. Stephen Henson1-23/+32
2017-05-22Convert existing usage of assert() to ossl_assert() in libsslMatt Caswell1-1/+2
2017-05-22Replace instances of OPENSSL_assert() with soft asserts in libsslMatt Caswell1-6/+13
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell1-5/+3
2017-05-17Fail if we receive a response to an extension that we didn't requestMatt Caswell1-0/+3
2017-05-11Fix gcc-7 warnings.Bernd Edlinger1-0/+1
2017-05-11Add some extra comments following alert changesMatt Caswell1-0/+4
2017-05-11Send an illegal parameter alert if the update type in a KeyUpdate is wrongMatt Caswell1-3/+8
2017-05-11Add EVP_DigestSign and EVP_DigesVerifyDr. Stephen Henson1-6/+9
2017-05-08Send the supported_groups extension in EE where applicableMatt Caswell1-3/+1
2017-04-26Add a ciphersuite config sanity check for serversMatt Caswell1-4/+36
2017-04-25Remove special case code for SCTP reneg handlingMatt Caswell1-4/+1
2017-04-07Move the extensions context codes into the public APIMatt Caswell1-1/+1
2017-04-03Don't use client specific functions to retrieve CA listDr. Stephen Henson1-1/+1
2017-04-03New certificate_authorities functionsDr. Stephen Henson1-2/+2
2017-03-29Fix the build warning under OPENSSL_NO_GOSTQin Long1-2/+2
2017-03-29Further de-obfuscationBenjamin Kaduk1-3/+2
2017-03-28Fix a few more typosFdaSilvaYY1-1/+1
2017-03-24Move the downgrade sentinel declarations to a header fileMatt Caswell1-8/+0
2017-03-24Add client side support for TLSv1.3 downgrade mechanismMatt Caswell1-9/+64
2017-03-24Add server side support for TLSv1.3 downgrade mechanismMatt Caswell1-1/+20
2017-03-17Move parsing and construction of CA names to separate functionsDr. Stephen Henson1-0/+95
2017-03-16Updates following review feedbackMatt Caswell1-6/+4
2017-03-16HelloRetryRequest updates for draft-19Matt Caswell1-2/+41
2017-03-16Update end of early data processing for draft-19Matt Caswell1-1/+0
2017-03-07Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundaryMatt Caswell1-0/+20
2017-03-02Various fixes required to allow SSL_write/SSL_read during early dataMatt Caswell1-1/+19
2017-03-02Introduce a new early_data state in the state machineMatt Caswell1-0/+1
2017-03-02Provide an SSL_read_early() function for reading early dataMatt Caswell1-0/+5
2017-02-28Clean up references to FIPSEmilia Kasper1-3/+1
2017-02-17Updates following review feedbackMatt Caswell1-3/+1
2017-02-17Limit the number of KeyUpdate messages we can processMatt Caswell1-0/+8
2017-02-17Actually update the keys when a KeyUpdate message is sent or receivedMatt Caswell1-3/+13
2017-02-17If we receive an "update_requested" KeyUpdate then respond with a KeyUpdateMatt Caswell1-0/+8
2017-02-17Add the ability for a client to send a KeyUpdate messageMatt Caswell1-0/+2
2017-02-17Add the ability for a client to receive a KeyUpdate messageMatt Caswell1-0/+18
2017-02-17Provide a function to send a KeyUpdate messageMatt Caswell1-0/+13