aboutsummaryrefslogtreecommitdiff
path: root/ssl/t1_lib.c
AgeCommit message (Expand)AuthorFilesLines
2018-07-18Check that the public key OID matches the sig algMatt Caswell1-1/+9
2018-07-13Do not use GOST sig algs in TLSv1.3 where possibleMatt Caswell1-0/+41
2018-06-29Check return from BN_set_word.Pauli1-3/+6
2018-06-07Fix EAP-FASTMatt Caswell1-5/+7
2018-05-30Send GOST SignatureAlgorithms when TLS 1.2 in useDmitry Belyavskiy1-1/+6
2018-05-30Bugfix: GOST2012 certificates for GOST ciphersuites were broken.Dmitry Belyavskiy1-0/+15
2018-05-12Set sess to NULL after freeing it.Kurt Roeckx1-0/+1
2018-05-11Rework the decrypt ticket callbackMatt Caswell1-46/+84
2018-05-11Fix ticket callbacks in TLSv1.3Matt Caswell1-77/+66
2018-04-25Fix the MAX_CURVELIST definitionMatt Caswell1-1/+1
2018-04-24Allow TLSv1.3 EC certs to use compressed pointsMatt Caswell1-7/+7
2018-04-03Set error code on alloc failuresRich Salz1-10/+16
2018-03-28Tolerate a Certificate using a non-supported group on server sideMatt Caswell1-9/+15
2018-03-19Place ticket keys into secure memoryTodd Short1-3/+3
2018-03-19Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3Matt Caswell1-3/+4
2018-03-12Session Ticket app dataTodd Short1-30/+54
2018-03-05Add X448/Ed448 support to libsslMatt Caswell1-1/+9
2018-02-21Sanity check the ticket length before using key name/IVMatt Caswell1-6/+12
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell1-2/+5
2018-01-25Fix uninitialized read in sigalg parsing codeBenjamin Kaduk1-1/+1
2018-01-25Add support for the TLS 1.3 signature_algorithms_cert extensionBenjamin Kaduk1-45/+63
2018-01-25Propagate TLS 1.3 sigalgs through tls1_set_sigalgs()Benjamin Kaduk1-14/+55
2018-01-25Add TLS 1.3 draft-23 PSS signature algorithmsBenjamin Kaduk1-6/+18
2018-01-09Update copyright years on all files merged since Jan 1st 2018Richard Levitte1-1/+1
2018-01-08Use the index that matches the key type (either SSL_PKEY_RSA_PSS_SIGN or SSL_...Noah Robbin1-4/+23
2018-01-08Use size of server key when selecting signature algorithm.Noah Robbin1-0/+34
2017-12-04Convert the state machine code to use SSLfatal()Matt Caswell1-40/+49
2017-11-13Resolve warnings in VC-WIN32 build, which allows to add /WX.Andy Polyakov1-1/+1
2017-11-05Implement Maximum Fragment Length TLS extension.FdaSilvaYY1-0/+31
2017-10-20Various clean-upsKaoruToda1-2/+4
2017-10-06Merge tls1_check_curve into tls1_check_group_idDr. Stephen Henson1-31/+19
2017-10-06Change curves to groups where relevantDr. Stephen Henson1-3/+3
2017-10-06Use separate functions for supported and peer groups listsDr. Stephen Henson1-35/+26
2017-09-26Add and use function tls1_in_list to avoid code duplication.Dr. Stephen Henson1-30/+30
2017-09-26Use tls1_group_id_lookup in tls1_curve_allowedDr. Stephen Henson1-5/+3
2017-09-26Rename tls1_get_curvelist.Dr. Stephen Henson1-41/+35
2017-09-26Rewrite compression and group checks.Dr. Stephen Henson1-134/+122
2017-09-26Replace tls1_ec_curve_id2nid.Dr. Stephen Henson1-7/+3
2017-09-26Rename tls_curve_info to TLS_GROUP_INFO, move to ssl_locl.hDr. Stephen Henson1-9/+3
2017-09-26Return group id in tls1_shared_groupDr. Stephen Henson1-17/+14
2017-09-26Return correct Suite B curve, fix comment.Dr. Stephen Henson1-2/+2
2017-09-23Use curve_id not the nidKurt Roeckx1-4/+4
2017-09-22Store groups as uint16_tDr. Stephen Henson1-100/+101
2017-09-21Fix strict-warnings buildPatrick Steuer1-1/+1
2017-09-20Allow RSA certificates to be used for RSA-PSSDr. Stephen Henson1-10/+30
2017-09-20Add RSA-PSS key certificate type.Dr. Stephen Henson1-0/+2
2017-08-30e_os.h removal from other headers and source files.Pauli1-1/+2
2017-07-13Use cert tables in ssl_set_sig_maskDr. Stephen Henson1-33/+12
2017-07-13Use certificate tables instead of ssl_cert_typeDr. Stephen Henson1-4/+10
2017-07-13Use certificate tables instead of ssl_cipher_get_cert_index.Dr. Stephen Henson1-64/+51