 Matt Caswell
|
dcf8b01f44
Tolerate a Certificate using a non-supported group on server side
|
vor 6 Jahren |
 Todd Short
|
4bfb96f2ad
Place ticket keys into secure memory
|
vor 6 Jahren |
|
Matt Caswell
|
32305f8850
Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3
|
vor 6 Jahren |
|
Todd Short
|
df0fed9aab
Session Ticket app data
|
vor 7 Jahren |
|
Matt Caswell
|
0e1d6ecf37
Add X448/Ed448 support to libssl
|
vor 6 Jahren |
|
Matt Caswell
|
ee76349525
Sanity check the ticket length before using key name/IV
|
vor 6 Jahren |
|
Matt Caswell
|
1d0c08b496
The function ssl_get_min_max_version() can fail
|
vor 6 Jahren |
 Benjamin Kaduk
|
c1acef9263
Fix uninitialized read in sigalg parsing code
|
vor 6 Jahren |
|
Benjamin Kaduk
|
c589c34e61
Add support for the TLS 1.3 signature_algorithms_cert extension
|
vor 6 Jahren |
|
Benjamin Kaduk
|
fd5e1a8c4a
Propagate TLS 1.3 sigalgs through tls1_set_sigalgs()
|
vor 6 Jahren |
|
Benjamin Kaduk
|
f55e99f7dd
Add TLS 1.3 draft-23 PSS signature algorithms
|
vor 6 Jahren |
 Richard Levitte
|
3c7d0945b6
Update copyright years on all files merged since Jan 1st 2018
|
vor 6 Jahren |
 Noah Robbin
|
bcec0b9488
Use the index that matches the key type (either SSL_PKEY_RSA_PSS_SIGN or SSL_PKEY_RSA).
|
vor 7 Jahren |
|
Noah Robbin
|
0fe3db251a
Use size of server key when selecting signature algorithm.
|
vor 7 Jahren |
|
Matt Caswell
|
f63a17d66d
Convert the state machine code to use SSLfatal()
|
vor 7 Jahren |
 Andy Polyakov
|
3a63c0edab
Resolve warnings in VC-WIN32 build, which allows to add /WX.
|
vor 7 Jahren |
 FdaSilvaYY
|
cf72c75792
Implement Maximum Fragment Length TLS extension.
|
vor 7 Jahren |
 KaoruToda
|
b2555168ec
Various clean-ups
|
vor 7 Jahren |
 Dr. Stephen Henson
|
6447e8184c
Merge tls1_check_curve into tls1_check_group_id
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
f48d826e33
Change curves to groups where relevant
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
ff6d20a67b
Use separate functions for supported and peer groups lists
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
b50951d36c
Add and use function tls1_in_list to avoid code duplication.
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
5ce5f787e3
Use tls1_group_id_lookup in tls1_curve_allowed
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
34e5292c57
Rename tls1_get_curvelist.
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
4a1b428019
Rewrite compression and group checks.
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
43b95d7365
Replace tls1_ec_curve_id2nid.
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
0e464d9ddd
Rename tls_curve_info to TLS_GROUP_INFO, move to ssl_locl.h
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
8841154a90
Return group id in tls1_shared_group
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
1483b8582c
Return correct Suite B curve, fix comment.
|
vor 7 Jahren |
 Kurt Roeckx
|
9b01779cbf
Use curve_id not the nid
|
vor 7 Jahren |
