aboutsummaryrefslogtreecommitdiff
path: root/ssl/statem/statem_srvr.c
AgeCommit message (Expand)AuthorFilesLines
2017-08-15Move ALPN handling from finalizer to delayed callBenjamin Kaduk1-0/+48
2017-08-03Add a DRBG to each SSL objectRich Salz1-3/+3
2017-07-18Fix early_data with an HRRMatt Caswell1-9/+9
2017-07-07Updates following review feedback of TLSv1.3 draft-21 codeMatt Caswell1-4/+2
2017-07-07Send and receive the ticket_nonce field in a NewSessionTicketMatt Caswell1-1/+18
2017-06-21Allow Ed25519 in TLS 1.2Dr. Stephen Henson1-1/+1
2017-06-21Convert key exchange to one shot callDr. Stephen Henson1-12/+15
2017-06-21Merge Nokia copyright notice into standardRich Salz1-27/+1
2017-06-20Modify Sun copyright to follow OpenSSL styleRich Salz1-13/+1
2017-06-16Tweak the check that a ciphersuite has not changed since the HRRMatt Caswell1-2/+3
2017-06-16Fix an uninitialised variable warningMatt Caswell1-3/+3
2017-06-16Move ciphersuite selection before session resumption in TLSv1.3Matt Caswell1-60/+81
2017-06-16Allow the server to change the ciphersuite on resumeMatt Caswell1-5/+9
2017-06-11If-guard to avoid null ptr deref in statem_srvr.cRich Salz1-1/+2
2017-06-06Fix #2400 Add NO_RENEGOTIATE optionTodd Short1-0/+4
2017-05-19Try to be more consistent about the alerts we sendMatt Caswell1-16/+19
2017-05-11Verify that there is no trailing data after the extensions blockMatt Caswell1-1/+2
2017-05-09Verify that only NULL compression is sent in TLSv1.3 ClientHelloMatt Caswell1-3/+15
2017-05-02Fix comment around safari fingerprint checkMatt Caswell1-0/+1
2017-04-26Don't treat PACKET_remaining() as booleanTatsuhiro Tsujikawa1-3/+3
2017-04-26Call init and finalization functions per extension messageTatsuhiro Tsujikawa1-4/+5
2017-04-26Don't overwrite the alert value if there is no alert to sendMatt Caswell1-21/+21
2017-04-25Remove special case code for SCTP reneg handlingMatt Caswell1-37/+0
2017-04-07Move the extensions context codes into the public APIMatt Caswell1-13/+16
2017-03-29More typo fixesFdaSilvaYY1-1/+1
2017-03-24Add server side support for TLSv1.3 downgrade mechanismMatt Caswell1-3/+4
2017-03-17Support draft-19 TLS certificate request formatDr. Stephen Henson1-15/+15
2017-03-17Move parsing and construction of CA names to separate functionsDr. Stephen Henson1-28/+1
2017-03-16Updates following review feedbackMatt Caswell1-1/+1
2017-03-16Fix ciphersuite handling during an HRRMatt Caswell1-18/+23
2017-03-16HelloRetryRequest updates for draft-19Matt Caswell1-2/+23
2017-03-16Check ClientHello boundary as per draft-19Matt Caswell1-0/+8
2017-03-16Update end of early data processing for draft-19Matt Caswell1-12/+58
2017-03-10Use the new TLSv1.3 certificate_required alert where appropriateMatt Caswell1-1/+1
2017-03-03Disallow zero length signature algorithmsDr. Stephen Henson1-0/+1
2017-03-02Various fixes required to allow SSL_write/SSL_read during early dataMatt Caswell1-9/+11
2017-03-02Enable the server to call SSL_write() without stopping the ability to call SS...Matt Caswell1-1/+6
2017-03-02Introduce a new early_data state in the state machineMatt Caswell1-5/+0
2017-03-02Only accept early_data if the negotiated ALPN is the sameMatt Caswell1-4/+17
2017-03-02Validate the ticket age for resumed sessionsMatt Caswell1-4/+8
2017-03-02Disallow handshake messages in the middle of early_dataMatt Caswell1-0/+6
2017-03-02Fix changing of the cipher state when dealing with early dataMatt Caswell1-3/+15
2017-03-02Provide an SSL_read_early() function for reading early dataMatt Caswell1-3/+9
2017-03-02Ensure that we never select compression in TLSv1.3Matt Caswell1-3/+4
2017-02-27Initial incomplete TLS 1.3 certificate request support.Dr. Stephen Henson1-7/+23
2017-02-23Add SSL_CTX early callbackBenjamin Kaduk1-127/+176
2017-02-23Refactor SSL_bytes_to_cipher_list()Benjamin Kaduk1-2/+36
2017-02-23Export SSL_bytes_to_cipher_list()Benjamin Kaduk1-154/+2
2017-02-23Let ssl_get_cipher_by_char yield not-valid ciphersBenjamin Kaduk1-1/+1
2017-02-23Store the number of extensions in CLIENTHELLO_MSGBenjamin Kaduk1-1/+2