aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2017-11-13Resolve warnings in VC-WIN32 build, which allows to add /WX.Andy Polyakov4-4/+4
2017-11-13ssl/ssl_asn1.c: resolve warnings in VC-WIN32 build, which allows to add /WX.Andy Polyakov1-5/+5
2017-11-11Many spelling fixes/typo's corrected.Josh Soref1-1/+1
2017-11-07style : fix some if(...FdaSilvaYY2-3/+3
2017-11-07Mark a zero length record as readMatt Caswell1-1/+9
2017-11-05Implement Maximum Fragment Length TLS extension.FdaSilvaYY14-21/+309
2017-10-30Provide SSL_CTX.stats.sess_accept for switched ctxsBenjamin Kaduk1-1/+14
2017-10-30Normalize on session_ctx for stats where possibleBenjamin Kaduk2-11/+15
2017-10-30Use atomics for SSL_CTX statisticsBenjamin Kaduk4-31/+62
2017-10-26Simplify the stack reservationPaul Yang2-8/+2
2017-10-25Fix error handling in SSL_newBernd Edlinger1-5/+6
2017-10-20Various clean-upsKaoruToda2-3/+5
2017-10-18Remove parentheses of return.KaoruToda19-291/+291
2017-10-18Add missing RAND_DRBG lockingBenjamin Kaduk1-2/+15
2017-10-18Fix reseeding issues of the public RAND_DRBGDr. Matthias St. Pierre1-3/+6
2017-10-16Tweak the comment regarding record version check with respect to TLSv1.3Matt Caswell1-3/+4
2017-10-16Sanity check the HRR version fieldMatt Caswell1-0/+7
2017-10-16Don't do version neg on an HRRMatt Caswell3-16/+23
2017-10-12Fix bug where early_data does not work if no SNI callback is presentMatt Caswell1-0/+5
2017-10-11Move supportedgroup ext-block fields out of NO_ECBenjamin Kaduk1-2/+2
2017-10-10crypto/x509v3/v3_utl.c, ssl/ssl_cert.c: fix Coverity problems.Andy Polyakov1-3/+5
2017-10-10Don't change client random in Client Hello in its second flightTatsuhiro Tsujikawa1-2/+3
2017-10-09Since return is inconsistent, I removed unnecessary parentheses andKaoruToda12-33/+33
2017-10-06Merge tls1_check_curve into tls1_check_group_idDr. Stephen Henson3-39/+27
2017-10-06Change curves to groups where relevantDr. Stephen Henson4-37/+37
2017-10-06Use separate functions for supported and peer groups listsDr. Stephen Henson5-45/+43
2017-10-04Remove an incorrect commentMatt Caswell1-3/+0
2017-10-04Session resume broken switching contextsTodd Short4-91/+117
2017-09-29Remove unnecessary #include <openssl/lhash.h> directives.Pauli3-3/+0
2017-09-28Use safestack.h exclusively internally.Pauli1-1/+0
2017-09-28Add stack space reservations.Pauli2-3/+9
2017-09-26Add and use function tls1_in_list to avoid code duplication.Dr. Stephen Henson1-30/+30
2017-09-26Use tls1_group_id_lookup in tls1_curve_allowedDr. Stephen Henson1-5/+3
2017-09-26Rename tls1_get_curvelist.Dr. Stephen Henson5-80/+46
2017-09-26Rewrite compression and group checks.Dr. Stephen Henson2-135/+122
2017-09-26New function ssl_generate_param_groupDr. Stephen Henson4-63/+40
2017-09-26Replace tls1_ec_curve_id2nid.Dr. Stephen Henson7-41/+45
2017-09-26Rename tls_curve_info to TLS_GROUP_INFO, move to ssl_locl.hDr. Stephen Henson2-15/+15
2017-09-26Return group id in tls1_shared_groupDr. Stephen Henson4-22/+17
2017-09-26Return correct Suite B curve, fix comment.Dr. Stephen Henson1-2/+2
2017-09-23Use size of entries, not size of the pointer.Kurt Roeckx1-1/+1
2017-09-23Use curve_id not the nidKurt Roeckx1-4/+4
2017-09-22Store groups as uint16_tDr. Stephen Henson9-153/+152
2017-09-21Cleanup whitespace in ssl_lib.c (tabs to spaces)Dr. Matthias St. Pierre1-24/+24
2017-09-21Fix strict-warnings buildPatrick Steuer1-1/+1
2017-09-20Allow use of RSA-PSS certificates in TLS 1.2Dr. Stephen Henson1-2/+8
2017-09-20Allow RSA certificates to be used for RSA-PSSDr. Stephen Henson1-10/+30
2017-09-20Add RSA-PSS key certificate type.Dr. Stephen Henson3-13/+11
2017-09-15Provide getters for min/max proto versionChristian Heimes1-0/+8
2017-09-14Fix no-ec no-dh buildBenjamin Kaduk1-1/+5