aboutsummaryrefslogtreecommitdiff
path: root/ssl/handshake_client.cc
AgeCommit message (Expand)AuthorFilesLines
2024-06-17Send a consistent alert when the peer sends a bad signature algorithmDavid Benjamin1-1/+2
2024-03-07Only negotiate ECDHE curves and sigalgs onceDavid Benjamin1-16/+10
2024-03-07Add an SSL_CREDENTIAL API for ECDSA/RSA and delegated credentialsDavid Benjamin1-29/+62
2024-03-06Check client certificate types in TLS <= 1.2David Benjamin1-3/+28
2024-03-05Fold ssl_add_cert_chain into its callerDavid Benjamin1-1/+1
2023-04-28Support WPA 3.1 "enterprise" mode.Adam Langley1-16/+20
2023-04-12Add functions to allow the mocking of AES hw support for testing.Bob Beck1-4/+8
2023-04-07Tidy up some lengths in SSL_SESSIONDavid Benjamin1-2/+9
2023-03-01Use KEM terminology in TLS ECDHE and key_share abstractionsDavid Benjamin1-3/+3
2023-02-24Create the SSLKeyShare object in TLS 1.2 client ECDHE slightly laterDavid Benjamin1-11/+8
2023-02-13Make OPENSSL_malloc push ERR_R_MALLOC_FAILURE on failure.Bob Beck1-3/+0
2022-12-08Add SSL_was_key_usage_invalid.David Benjamin1-3/+5
2022-09-14Move the DTLS cookie to SSL_HANDSHAKE.David Benjamin1-4/+6
2022-07-18Align with OpenSSL on TLS 1.3 cipher suite constants.David Benjamin1-5/+5
2022-06-02Add SSL_[CTX_]_set_compliance_policy.Adam Langley1-2/+8
2022-01-28Record ClientHelloInner values in msg_callback.David Benjamin1-1/+1
2021-09-01Update to draft-ietf-tls-esni-13.David Benjamin1-3/+3
2021-08-26Make ssl_parse_extensions a little easier to use.David Benjamin1-10/+5
2021-08-25Deduplicate our three ServerHello parsers.David Benjamin1-73/+74
2021-06-24Implement ClientHelloOuter handshakes.David Benjamin1-43/+51
2021-06-24Reduce bouncing on the cache lock in ssl_update_cache.David Benjamin1-5/+8
2021-06-23Only clear not_resumable after the handshake.David Benjamin1-22/+18
2021-06-16More reliably report handshake errors through SSL_write.David Benjamin1-0/+6
2021-06-14Add an option to permute ClientHello extension order.David Benjamin1-0/+1
2021-06-11Add most of an ECH client implementation.David Benjamin1-33/+81
2021-06-10Move the TLS vs DTLS header length adjustment into ssl_add_clienthello_tlsext.David Benjamin1-3/+1
2021-06-10Replace hs->needs_psk_binder with an output parameter.David Benjamin1-2/+4
2021-06-09Compute the ECH GREASE payload outside of the callbacks.David Benjamin1-0/+1
2021-06-09Move key_share computation out of ClientHello callbacks.David Benjamin1-1/+2
2021-06-09Release some temporaries outside of ClientHello callbacks.David Benjamin1-1/+7
2021-06-09Move the early_data_{offered,reason} logic out of extension callbacks.David Benjamin1-0/+55
2021-06-03Remove the Channel ID callback.David Benjamin1-12/+0
2021-06-03Manage Channel ID handshake state better.David Benjamin1-2/+2
2021-05-21GREASE is now RFC 8701.David Benjamin1-1/+1
2021-05-19Remove draft tokbind implementation.David Benjamin1-7/+0
2021-05-13Check for resumption identifiers in SSL_SESSION_is_resumable.David Benjamin1-5/+3
2021-05-13Don't use SHA256(ticket) as the signaling session ID for tickets.David Benjamin1-23/+27
2021-05-13Simplify renego + resumption handling.David Benjamin1-9/+10
2021-05-13Move session ID assignment out of ssl_get_new_session.David Benjamin1-1/+1
2021-05-10Add SSL_can_release_private_key.David Benjamin1-0/+1
2020-11-19Rename the master_key field in SSL_SESSION to secret.David Benjamin1-5/+5
2020-11-18Always check the TLS 1.3 downgrade signal.David Benjamin1-15/+6
2020-09-25Switch ssl_parse_extensions to bool and Span.David Benjamin1-2/+1
2020-09-21Add SSL_CIPHER_get_protocol_id.David Benjamin1-1/+1
2020-06-15Enforce the keyUsage extension in TLS 1.2 client certs.David Benjamin1-2/+2
2020-05-07Disable TLS 1.3 compatibility mode for QUIC.Nick Harper1-11/+14
2020-04-01Add is_quic bit to SSL_SESSIONNick Harper1-1/+2
2020-03-03Revise QUIC encryption secret APIs.David Benjamin1-6/+3
2020-02-14Fix client handling of 0-RTT rejects with cipher mismatch.David Benjamin1-1/+1
2020-02-13Require handshake flights end at record boundaries.David Benjamin1-0/+7