 Rob Percival
|
ed29e82ade
Adds CT validation to SSL connections
|
8 years ago |
 Rich Salz
|
ddb4c0477a
Changes to DEFAULT curves
|
9 years ago |
 Emilia Kasper
|
062178678f
Refactor ClientHello extension parsing
|
9 years ago |
 Dr. Stephen Henson
|
1db3107ada
TLS support for X25519
|
8 years ago |
|
Emilia Kasper
|
aa474d1fb1
TLS: reject duplicate extensions
|
8 years ago |
|
Rich Salz
|
d63a5e5e7d
Remove outdated DEBUG flags.
|
8 years ago |
 Matt Caswell
|
35b1a433ed
Fix memory leaks in tls_decrypt_ticket
|
8 years ago |
|
Dr. Stephen Henson
|
2235b7f2dd
Simplify tls1_set_ec_id.
|
8 years ago |
|
Dr. Stephen Henson
|
2fa2d15ac8
Use nid_list table to lookup curve IDs.
|
8 years ago |
|
Dr. Stephen Henson
|
2dc1aeed3b
Add explanation and warning to TLS id table.
|
8 years ago |
|
Dr. Stephen Henson
|
ce0c1f2bb2
Remove static ECDH support.
|
8 years ago |
|
Dr. Stephen Henson
|
221c7b55e3
Don't check self signed certificate signature security.
|
8 years ago |
|
Rich Salz
|
22e3dcb780
Remove TLS heartbeat, disable DTLS heartbeat
|
8 years ago |
|
Emilia Kasper
|
b698174493
constify PACKET
|
8 years ago |
|
Rich Salz
|
349807608f
Remove /* foo.c */ comments
|
9 years ago |
|
Dr. Stephen Henson
|
3aeb934865
make EVP_PKEY opaque
|
8 years ago |
 Richard Levitte
|
846ec07d90
Adapt all EVP_CIPHER_CTX users for it becoming opaque
|
9 years ago |
|
Dr. Stephen Henson
|
4a640fb6c3
Fix declarations and constification for inline stack.
|
9 years ago |
 Viktor Dukhovni
|
4fa52141b0
Protocol version selection and negotiation rewrite
|
9 years ago |
|
Dr. Stephen Henson
|
8382fd3a93
Use X509_get0_pubkey where appropriate
|
9 years ago |
|
Dr. Stephen Henson
|
72245f340c
Check for missing DSA parameters.
|
9 years ago |
|
Matt Caswell
|
b1931d432f
Simplify calling of the OCSP callback
|
9 years ago |
|
Matt Caswell
|
80e339fd09
Ensure we don't call the OCSP callback if resuming a session
|
9 years ago |
|
Matt Caswell
|
bb1aaab428
Fix error when server does not send CertificateStatus message
|
9 years ago |
|
Dr. Stephen Henson
|
bc71f91064
Remove fixed DH ciphersuites.
|
9 years ago |
|
Rich Salz
|
7644a9aef8
Rename some BUF_xxx to OPENSSL_xxx
|
9 years ago |
|
Matt Caswell
|
330dcb09b2
Add a return value check
|
9 years ago |
|
Dr. Stephen Henson
|
e7f0d9210c
Extended master secret fixes and checks.
|
9 years ago |
|
Richard Levitte
|
bf7c68177b
Adapt the rest of the source to the opaque HMAC_CTX
|
9 years ago |
|
Richard Levitte
|
fa0c23de83
Adapt HMAC to the EVP_MD_CTX changes
|
9 years ago |
