aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2021-02-12tls_valid_group: Add missing dereference of okfortls13Tomas Mraz1-1/+1
2021-02-12Use ERR_R_*_LIB instead of ERR_LIB_* as reason code for sub-librariesRichard Levitte1-2/+2
2021-02-12Deprecate the libssl level SRP APIsMatt Caswell6-13/+78
2021-02-12Deprecate the low level SRP APIsMatt Caswell1-0/+3
2021-02-09Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk2-2/+0
2021-02-08Simplify the EVP_PKEY_XXX_fromdata_XX methods.Shane Lontis2-4/+5
2021-02-05Remove all OPENSSL_NO_XXX from libssl where XXX is a crypto algMatt Caswell5-29/+5
2021-02-05Remove OPENSSL_NO_EC guards from libsslMatt Caswell17-167/+20
2021-02-05Make sure we don't use sigalgs that are not availableMatt Caswell1-3/+10
2021-02-05Add the nist group names as aliases for the normal TLS group namesMatt Caswell2-5/+1
2021-02-05Remove compile time guard checking from ssl3_get_req_cert_typeMatt Caswell1-9/+4
2021-02-05Check for availability of ciphersuites at run timeMatt Caswell1-10/+29
2021-02-05Make supported_groups code independent of EC and DHMatt Caswell6-20/+44
2021-02-05Ensure default supported groups works even with no-ec and no-dhMatt Caswell6-26/+33
2021-02-05Remove OPENSSL_NO_DH guards from libsslMatt Caswell8-67/+40
2021-02-04Remove some TODO(OpenSSL1.2) referencesMatt Caswell2-2/+4
2021-01-28Update copyright yearRichard Levitte21-21/+21
2021-01-26TLS client: allow cert verify callback return -1 for SSL_ERROR_WANT_RETRY_VERIFYDr. David von Oheimb3-30/+45
2021-01-26Avoid using OSSL_PKEY_PARAM_GROUP_NAME when the key might be legacyTomas Mraz3-53/+17
2021-01-26Add EVP_PKEY functions to get EC conv form and field typeMatt Caswell1-15/+9
2021-01-26Deprecate EC_KEY + Update ec apps to use EVP_PKEYShane Lontis4-41/+82
2021-01-22Don't copy parameters on setting a key in libsslMatt Caswell1-20/+3
2021-01-20ktls: Initial support for ChaCha20-Poly1305Vadim Fedorenko1-1/+20
2021-01-18Rename EVP_CIPHER_CTX_get_iv and EVP_CIPHER_CTX_get_iv_state for clarityTomas Mraz1-3/+3
2021-01-18Update SERVER_HELLO_MAX_LENGTHMichael Baentsch1-1/+4
2021-01-13Add X509_NAME_hash_ex() to be able to check if it failed due to unsupported SHA1Dr. David von Oheimb1-1/+2
2021-01-12Clean away extraneous library specific FETCH_FAILED reason codesRichard Levitte8-19/+27
2021-01-09Fix for negative return value from `SSL_CTX_sess_accept()`anupamam131-1/+2
2021-01-09replace 'unsigned const char' with 'const unsigned char'Thomas De Schampheleire1-3/+3
2021-01-08Adding TLS group name retrievalMichael Baentsch3-1/+20
2021-01-08Ensure DTLS free functions can handle NULLMatt Caswell2-4/+8
2021-01-07Remove extra space.Otto Hollmann1-1/+1
2021-01-07Fixed error and return code.Otto Hollmann1-8/+5
2021-01-07Fix set_ciphersuites ignore unknown ciphers.Otto Hollmann1-1/+4
2020-12-20Drop OPENSSL_NO_RSA everywhereRichard Levitte4-21/+0
2020-12-09Modify is_tls13_capable() to take account of the servername cbMatt Caswell1-2/+13
2020-12-08TLS: Use EVP_PKEY_get_group_name() to get the group nameRichard Levitte3-18/+18
2020-12-08EVP: constify the EVP_PKEY_get_*_param() argument |pkey|Richard Levitte1-2/+0
2020-12-03tag unused function arguments as ossl_unusedPauli5-10/+16
2020-12-02Fix comment in do_dtls1_write()Benjamin Kaduk1-2/+2
2020-11-30Fix builds that specify both no-dh and no-ecMatt Caswell2-15/+4
2020-11-28Collapse two identical if statements into a single body.John Baldwin1-4/+0
2020-11-28Allow zero-byte writes to be reported as success.John Baldwin1-1/+9
2020-11-26Update copyright yearMatt Caswell9-9/+9
2020-11-24ERR: Rebuild all generated error headers and source filesRichard Levitte2-1/+29
2020-11-24Modify the ERR init functions to use the internal ERR string loadersRichard Levitte3-3/+25
2020-11-23Move some libssl global variables into SSL_CTXMatt Caswell4-48/+49
2020-11-20SSL: Change SSLerr() to ERR_raise()Richard Levitte2-3/+3
2020-11-18Deprecate RSA harderRichard Levitte7-174/+185
2020-11-18Return sensible values for some SSL ctrlsMatt Caswell1-6/+5