aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2019-03-06constify *_dup() and *i2d_*() and related functions as far as possible, intro...David von Oheimb3-8/+8
2019-03-06Adapt OPENSSL_INIT_DEBUG to the new generic trace APIRichard Levitte1-24/+9
2019-03-06Adapt CIPHER_DEBUG to the new generic trace APIRichard Levitte4-48/+57
2019-03-06Adapt SSL_DEBUG to the new generic trace APIRichard Levitte4-123/+73
2019-03-05Don't write the tick_identity to the sessionMatt Caswell5-25/+33
2019-02-22Don't restrict the number of KeyUpdate messages we can processMatt Caswell3-12/+0
2019-02-19Don't interleave handshake and other record types in TLSv1.3Matt Caswell2-1/+11
2019-02-15Add option to disable Extended Master SecretTodd Short4-3/+11
2019-02-14Don't signal SSL_CB_HANDSHAKE_START for TLSv1.3 post-handshake messagesMatt Caswell3-24/+12
2019-02-14Ignore cipher suites when setting cipher listSam Roberts1-2/+22
2019-02-05Make some simple getters take const SSL/SSL_CTXSam Roberts1-10/+10
2019-02-01Fix end-point shared secret for DTLS/SCTPMichael Tuexen2-4/+28
2019-01-27add an additional async notification communication method based on callbackPing Yu2-0/+56
2019-01-24Revert "Keep the DTLS timer running after the end of the handshake if appropr...Matt Caswell2-31/+0
2019-01-15Don't get the mac type in TLSv1.3Matt Caswell1-3/+1
2019-01-15Add missing entries in ssl_mac_pkey_idMatt Caswell1-0/+2
2019-01-08Don't artificially limit the size of the ClientHelloMatt Caswell1-7/+0
2019-01-07More configurable crypto and ssl library initializationViktor Dukhovni1-6/+7
2019-01-07Don't complain if we receive the cryptopro extension in the ClientHelloMatt Caswell1-2/+4
2019-01-06Restore compatibility with GOST2001 implementations.Dmitry Belyavskiy1-1/+6
2019-01-04Fix a RUN_ONCE bugMatt Caswell1-2/+4
2019-01-03Eliminate unused buffers from ssl3_change_cipher_stateDmitry Belyavskiy1-6/+0
2019-01-03Remove unused variables from tls1_change_cipher_stateDmitry Belyavskiy1-12/+0
2018-12-30Fix a minor nit in the hkdflabel sizeBernd Edlinger1-1/+1
2018-12-15Use (D)TLS_MAX_VERSION_INTERNAL internallyKurt Roeckx5-8/+11
2018-12-07ssl: Linux TLS Tx OffloadBoris Pismenny6-49/+200
2018-12-06Following the license change, modify the boilerplates in ssl/Richard Levitte51-51/+51
2018-12-06Refactor the computation of API version limitsRichard Levitte2-2/+2
2018-12-05Fix some SSL_export_keying_material() issuesMatt Caswell5-28/+53
2018-12-05Revert "Reduce stack usage in tls13_hkdf_expand"Matt Caswell1-12/+4
2018-11-30Fix usage of deprecated SSL_set_tmp_ecdh()Antoine Salon1-7/+3
2018-11-27Fix access zero memory if SSL_DEBUG is enabledPaul Yang2-3/+6
2018-11-20Update copyright yearMatt Caswell3-3/+3
2018-11-15Add a missing SSLfatal callMatt Caswell2-3/+10
2018-11-15Add SSL_CTX_set_tmp_ecdh.podAntoine Salon1-4/+4
2018-11-14Fix no-ec and no-tls1_2Matt Caswell3-1/+12
2018-11-12Added missing signature algorithm reflection functionsViktor Dukhovni2-2/+30
2018-11-12Separate ca_names handling for client and serverMatt Caswell7-27/+76
2018-11-12Don't negotiate TLSv1.3 if our EC cert isn't TLSv1.3 capableMatt Caswell3-2/+48
2018-11-10Unbreak SECLEVEL 3 regression causing it to not accept any ciphers.Tomas Mraz1-2/+2
2018-11-10Add EVP_PKEY_supports_digest_nid()David Woodhouse1-25/+30
2018-11-10Honour mandatory digest on private key in has_usable_cert()David Woodhouse1-3/+18
2018-11-08Give a better error if an attempt is made to set a zero length groups listMatt Caswell1-0/+4
2018-11-08Ignore disabled ciphers when deciding if we are using ECCMatt Caswell1-5/+8
2018-11-06Fix return formatting.Pauli1-1/+2
2018-11-06Cleanse the key log buffer.Pauli1-2/+2
2018-11-03Restore sensible "sess_accept" counter trackingBenjamin Kaduk1-1/+1
2018-10-30Don't call the client_cert_cb immediately in TLSv1.3Matt Caswell2-1/+24
2018-10-29ssl/statem: Don't compare size_t with less than zeroRichard Levitte2-4/+7
2018-10-29Add automatic initializations support for EVP_MAC objectsRichard Levitte1-1/+2