aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2017-03-16Add TLSv1.3 draft-19 messages to traceTodd Short1-1/+6
2017-03-16Fix the Padding extensionMatt Caswell2-5/+43
2017-03-16Updates following review feedbackMatt Caswell2-7/+5
2017-03-16Fix ciphersuite handling during an HRRMatt Caswell1-18/+23
2017-03-16Ensure after an HRR any PSKs have the right hashMatt Caswell1-0/+8
2017-03-16HelloRetryRequest updates for draft-19Matt Caswell6-49/+181
2017-03-16Check ClientHello boundary as per draft-19Matt Caswell1-0/+8
2017-03-16Merge early_data_info extension into early_dataMatt Caswell7-51/+37
2017-03-16Update end of early data processing for draft-19Matt Caswell12-112/+155
2017-03-16Update secret generation for draft-19Matt Caswell1-0/+24
2017-03-15Remove dead codeBenjamin Kaduk1-3/+0
2017-03-15Tighten up client status_request processingBenjamin Kaduk1-1/+1
2017-03-15Clear alpn_selected_len for clients, tooBenjamin Kaduk1-1/+1
2017-03-14De-obfuscateBenjamin Kaduk1-2/+2
2017-03-14Fix some -Wshadow warningsBenjamin Kaduk1-23/+23
2017-03-10Use the callbacks from the SSL object instead of the SSL_CTX objectPauli1-8/+6
2017-03-10Avoid questionable use of the value of a pointerBernd Edlinger1-1/+2
2017-03-10Use the new TLSv1.3 certificate_required alert where appropriateMatt Caswell3-1/+5
2017-03-10Check that the PSK extension is lastMatt Caswell1-2/+6
2017-03-10Fixup previous merge.Bernd Edlinger1-1/+1
2017-03-08this change will prevent undefined behavior when src and dst are equal (memcp...Roberto Guimaraes1-2/+4
2017-03-08Fix no-compMatt Caswell1-0/+6
2017-03-07Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundaryMatt Caswell3-0/+31
2017-03-07Provide a function to test whether we have unread records pendingMatt Caswell3-1/+15
2017-03-07Get pointer type right in BIO_ssl_shutdown()Rich Salz1-8/+9
2017-03-06Tweak the TLSv1.3 record overflow limitsMatt Caswell1-7/+19
2017-03-06Fix double free in cookie generation.Kurt Roeckx1-0/+1
2017-03-04Don't call memcmp with a NULL pointerMatt Caswell1-2/+3
2017-03-04Add basic TLSv1.3 cookie supportMatt Caswell6-0/+62
2017-03-04Fix a memory leak on an error pathMatt Caswell1-0/+1
2017-03-03Set specific error is we have no valid signature algorithms setDr. Stephen Henson2-1/+4
2017-03-03Signature algorithm enhancement.Dr. Stephen Henson1-25/+31
2017-03-03Disallow zero length signature algorithmsDr. Stephen Henson2-1/+2
2017-03-03Don't allow DSA for TLS 1.3Dr. Stephen Henson1-0/+3
2017-03-03Silence some more clang warningsMatt Caswell1-2/+2
2017-03-02Silence some clang warningsMatt Caswell1-1/+1
2017-03-02Update early data API for writing to unauthenticated clientsMatt Caswell2-9/+15
2017-03-02Rename SSL_write_early() to SSL_write_early_data()Matt Caswell2-2/+2
2017-03-02Rename SSL_read_early() to SSL_read_early_data()Matt Caswell2-11/+13
2017-03-02Make SSL_write_early_finish() an internal only functionMatt Caswell2-16/+23
2017-03-02Various fixes required to allow SSL_write/SSL_read during early dataMatt Caswell7-39/+89
2017-03-02Enable the server to call SSL_write() without stopping the ability to call SS...Matt Caswell3-11/+18
2017-03-02Enable the client to call SSL_read() without stopping the ability to call SSL...Matt Caswell4-8/+35
2017-03-02Introduce a new early_data state in the state machineMatt Caswell3-39/+25
2017-03-02Improve the early data sanity check in SSL_do_handshake()Matt Caswell1-3/+9
2017-03-02Tighten sanity checks when calling early data functionsMatt Caswell1-3/+17
2017-03-02Make SSL_get_early_data_status() take a constMatt Caswell1-1/+1
2017-03-02Make SSL_get_max_early_data() and SSL_CTX_get_max_early_data() take a constMatt Caswell1-2/+2
2017-03-02Add a SSL_SESSION_get_max_early_data() functionMatt Caswell1-0/+5
2017-03-02Don't attempt to write more early_data than we know the server will acceptMatt Caswell2-7/+15