aboutsummaryrefslogtreecommitdiff
path: root/ssl/t1_lib.c
AgeCommit message (Expand)AuthorFilesLines
2016-04-09Make DH opaqueMatt Caswell1-6/+9
2016-04-06Fix no-ocspMatt Caswell1-6/+10
2016-04-04Revert "various spelling fixes"Rich Salz1-9/+8
2016-04-04various spelling fixesFdaSilvaYY1-8/+9
2016-03-20Fix ALPN - more fixesTodd Short1-6/+9
2016-03-20Remove #error from include files.Rich Salz1-7/+3
2016-03-18Ensure that memory allocated for the ticket is freedMatt Caswell1-0/+1
2016-03-09Add support for minimum and maximum protocol version supported by a cipherKurt Roeckx1-14/+27
2016-03-08GH787: Fix ALPNTodd Short1-24/+53
2016-03-04Adds CT validation to SSL connectionsRob Percival1-0/+33
2016-03-04Changes to DEFAULT curvesRich Salz1-24/+8
2016-03-03Refactor ClientHello extension parsingEmilia Kasper1-275/+238
2016-02-28TLS support for X25519Dr. Stephen Henson1-2/+8
2016-02-19TLS: reject duplicate extensionsEmilia Kasper1-1/+83
2016-02-18Remove outdated DEBUG flags.Rich Salz1-38/+0
2016-02-18Fix memory leaks in tls_decrypt_ticketMatt Caswell1-7/+15
2016-02-16Simplify tls1_set_ec_id.Dr. Stephen Henson1-24/+12
2016-02-16Use nid_list table to lookup curve IDs.Dr. Stephen Henson1-60/+5
2016-02-16Add explanation and warning to TLS id table.Dr. Stephen Henson1-0/+6
2016-02-11Remove static ECDH support.Dr. Stephen Henson1-14/+4
2016-02-11Don't check self signed certificate signature security.Dr. Stephen Henson1-0/+3
2016-02-11Remove TLS heartbeat, disable DTLS heartbeatRich Salz1-184/+32
2016-02-01constify PACKETEmilia Kasper1-6/+6
2016-01-26Remove /* foo.c */ commentsRich Salz1-1/+0
2016-01-20make EVP_PKEY opaqueDr. Stephen Henson1-6/+6
2016-01-12Adapt all EVP_CIPHER_CTX users for it becoming opaqueRichard Levitte1-13/+14
2016-01-07Fix declarations and constification for inline stack.Dr. Stephen Henson1-1/+1
2016-01-02Protocol version selection and negotiation rewriteViktor Dukhovni1-1/+4
2015-12-31Use X509_get0_pubkey where appropriateDr. Stephen Henson1-7/+3
2015-12-30Check for missing DSA parameters.Dr. Stephen Henson1-3/+8
2015-12-27Simplify calling of the OCSP callbackMatt Caswell1-21/+4
2015-12-27Ensure we don't call the OCSP callback if resuming a sessionMatt Caswell1-1/+1
2015-12-27Fix error when server does not send CertificateStatus messageMatt Caswell1-5/+5
2015-12-19Remove fixed DH ciphersuites.Dr. Stephen Henson1-16/+1
2015-12-16Rename some BUF_xxx to OPENSSL_xxxRich Salz1-1/+1
2015-12-10Add a return value checkMatt Caswell1-4/+4
2015-12-08Extended master secret fixes and checks.Dr. Stephen Henson1-16/+52
2015-12-07Adapt the rest of the source to the opaque HMAC_CTXRichard Levitte1-9/+12
2015-12-07Adapt HMAC to the EVP_MD_CTX changesRichard Levitte1-1/+1
2015-12-04Remove SSL_{CTX_}set_ecdh_auto() and always enable ECDHKurt Roeckx1-21/+8
2015-12-04Make SSL_{CTX}_set_tmp_ecdh() call SSL_{CTX_}set1_curves()Kurt Roeckx1-27/+16
2015-12-04Remove support for SSL_{CTX_}set_tmp_ecdh_callback().Kurt Roeckx1-6/+3
2015-11-30Remove GOST special case: handled automatically now.Dr. Stephen Henson1-15/+0
2015-11-30Use digest indices for signature algorithms.Dr. Stephen Henson1-32/+13
2015-11-30Use digest tables for defaults.Dr. Stephen Henson1-7/+7
2015-11-25Remove unused cert_verify_mac codeDr. Stephen Henson1-3/+0
2015-11-24Use EVP_md5_sha1() to generate client verifyDr. Stephen Henson1-1/+1
2015-11-24Use MD5+SHA1 for default digest if appropriate.Dr. Stephen Henson1-2/+5
2015-11-23Patch containing TLS implementation for GOST 2012Dmitry Belyavsky1-13/+107
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell1-10/+18