aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2018-03-21Don't wait for dry at the end of a handshakeMatt Caswell1-9/+0
2018-03-21Check for alerts while waiting for a dry eventMatt Caswell1-1/+19
2018-03-21Fix stack-use-after-scopePeter Wu1-1/+3
2018-03-20Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEERBenjamin Kaduk1-0/+12
2018-03-20Update copyright yearMatt Caswell9-9/+9
2018-03-19Place ticket keys into secure memoryTodd Short5-25/+34
2018-03-19Fix no-pskMatt Caswell2-1/+5
2018-03-19Apply system_default configuration on SSL_CTX_new().Tomas Mraz3-6/+24
2018-03-19Don't use a ssl specific DRBG anymoreKurt Roeckx11-58/+14
2018-03-19Fix a crash in SSLfatal due to invalid enc_write_ctxBernd Edlinger5-1/+10
2018-03-19Add an anti-replay mechanismMatt Caswell2-3/+11
2018-03-19Don't update the session cache when processing a client certificate in TLSv1.3Matt Caswell1-3/+0
2018-03-19Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3Matt Caswell3-5/+15
2018-03-17Fix miscellaneous typos in docs and sourceDr. Matthias St. Pierre1-2/+2
2018-03-17Fix a memory leak in tls1_macBernd Edlinger1-1/+3
2018-03-17Fix a memory leak in n_ssl3_macBernd Edlinger1-1/+1
2018-03-16RAND_DRBG: add a function for setting the default DRBG type and flagsDr. Matthias St. Pierre1-1/+1
2018-03-15Publish the RAND_DRBG APIDr. Matthias St. Pierre1-1/+1
2018-03-15Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()Matt Caswell4-14/+16
2018-03-15Add support for setting raw private HMAC keysMatt Caswell4-11/+12
2018-03-15Only update the server session cache when the session is readyMatt Caswell2-7/+14
2018-03-14Put the default set of TLSv1.3 ciphersuites in a header fileMatt Caswell1-4/+1
2018-03-14Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell6-105/+256
2018-03-14Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell3-17/+20
2018-03-14Use the TLSv1.3 record header as AADMatt Caswell4-13/+47
2018-03-13update SRP copyright noticeTim Hudson1-1/+5
2018-03-12Fix enable-ssl-traceMatt Caswell1-4/+4
2018-03-12Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cbBenjamin Saunders3-6/+31
2018-03-12Session Ticket app dataTodd Short7-66/+144
2018-03-09Reuse extension_is_relevant() in should_add_extension()Benjamin Kaduk1-10/+12
2018-03-09Add SSL/SSL_CTX_use_cert_and_key()Todd Short2-0/+118
2018-03-09Give more information in the SSL_stateless return codeMatt Caswell3-3/+13
2018-03-09Fallback on old style PSK callbacks if the new style ones aren't presentMatt Caswell2-2/+107
2018-03-09Tolerate TLSv1.3 PSKs that are a different size to the hash sizeMatt Caswell1-8/+4
2018-03-08Duplicate entries ssl_handshake_tbl trace entries...FdaSilvaYY1-13/+17
2018-03-05If not sending key_share (no TLSv1.3), return appropriately.Todd Short1-2/+3
2018-03-05Fix status_request and SCT extensionsMatt Caswell2-2/+14
2018-03-05Add X448/Ed448 support to libsslMatt Caswell5-3/+22
2018-02-28Do not set a nonzero default max_early_dataBenjamin Kaduk1-3/+15
2018-02-28Tell the ciphers which DRBG to use for generating random bytes.Kurt Roeckx4-0/+4
2018-02-26Export keying material using early exporter master secretTatsuhiro Tsujikawa5-0/+104
2018-02-23Remove OSSLzu, and fix the one place that used it.Rich Salz1-1/+1
2018-02-23Remove unreachable statement.Pauli1-1/+0
2018-02-21Sanity check the ticket length before using key name/IVMatt Caswell1-6/+12
2018-02-19The record version for ClientHello2 should be TLS1.2Matt Caswell1-1/+3
2018-02-15If s->ctx is NULL then this is an internal errorMatt Caswell1-3/+8
2018-02-14Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitableMatt Caswell1-1/+1
2018-02-13DRBG: make the derivation function the default for ctr_drbgDr. Matthias St. Pierre1-2/+1
2018-02-13Update copyright yearMatt Caswell11-11/+11
2018-02-12The function ssl_get_min_max_version() can failMatt Caswell4-6/+17