aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2012-12-29stop warning when compiling with no-compDr. Stephen Henson2-2/+7
2012-12-26typoDr. Stephen Henson1-1/+1
2012-12-18Use client version when deciding which cipher suites to disable.Dr. Stephen Henson1-1/+1
2012-12-16d1_lib.c,bss_dgram.c: eliminate dependency on _ftime.Andy Polyakov1-5/+9
2012-12-10revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 i...Dr. Stephen Henson1-1/+5
2012-12-09allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY modeDr. Stephen Henson1-5/+1
2012-12-07send out the raw SSL/TLS headers to the msg_callback and display them in SSL_...Dr. Stephen Henson4-10/+25
2012-12-07typoDr. Stephen Henson1-1/+1
2012-12-07really fix automatic ;-)Dr. Stephen Henson1-1/+1
2012-12-06fix handling of "automatic" in file modeDr. Stephen Henson1-1/+6
2012-12-01return error if Suite B mode is selected and TLS 1.2 can't be used. Correct e...Dr. Stephen Henson4-5/+14
2012-11-26Print out point format list for clients too.Dr. Stephen Henson1-10/+7
2012-11-26Use default point formats extension for server side as well as clientDr. Stephen Henson1-44/+38
2012-11-26change inaccurate error messageDr. Stephen Henson1-1/+1
2012-11-26set auto ecdh parameter selction for Suite BDr. Stephen Henson1-0/+2
2012-11-24add Suite B 128 bit mode offering only combination 2Dr. Stephen Henson1-2/+10
2012-11-22Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson2-0/+17
2012-11-22reject zero length point format list or supported curves extensionsDr. Stephen Henson1-2/+4
2012-11-21curves can be set in both client and serverDr. Stephen Henson1-2/+0
2012-11-21use correct return values when callin cmdDr. Stephen Henson1-3/+7
2012-11-19make dependDr. Stephen Henson1-15/+55
2012-11-19fix typo and warningDr. Stephen Henson4-7/+7
2012-11-16add SSL_CONF functions and documentationDr. Stephen Henson4-3/+621
2012-11-16new command line option -stdname to ciphers utilityDr. Stephen Henson2-0/+8
2012-11-15add "missing" TLSv1.2 cipher aliasDr. Stephen Henson1-2/+3
2012-11-08new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for so...Dr. Stephen Henson2-0/+18
2012-09-30If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" asDr. Stephen Henson3-2/+31
2012-09-21* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately inRichard Levitte1-1/+1
2012-09-12Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson7-10/+51
2012-09-11Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson2-8/+12
2012-09-11Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie4-39/+81
2012-09-08new ctrl to retrive value of received temporary key in server key exchange me...Dr. Stephen Henson2-0/+41
2012-09-07store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson3-0/+28
2012-08-31perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson6-49/+62
2012-08-30give more meaningful error if presented with wrong certificate type by serverDr. Stephen Henson3-2/+19
2012-08-29Add compilation flag to disable certain protocol checks and allow use ofDr. Stephen Henson3-1/+62
2012-08-28oops, typoDr. Stephen Henson1-2/+2
2012-08-28New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passesDr. Stephen Henson4-1/+122
2012-08-15Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson13-78/+367
2012-08-03Rename Suite B functions for consistency.Dr. Stephen Henson1-15/+2
2012-07-27Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson6-36/+228
2012-07-24Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson6-34/+57
2012-07-24check EC tmp key matches preferencesDr. Stephen Henson5-3/+34
2012-07-24typoDr. Stephen Henson1-1/+1
2012-07-23Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson5-2/+155
2012-07-20set ciphers to NULL before calling cert_cbDr. Stephen Henson1-1/+1
2012-07-19stop warningDr. Stephen Henson1-1/+1
2012-07-19add ssl_locl.h to err header files, rebuild ssl error stringsDr. Stephen Henson1-115/+115
2012-07-18New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson5-41/+119
2012-07-18update trace messagesDr. Stephen Henson1-4/+24