 Matt Caswell
|
a53b5be6a0
Fix configuration of TLSv1.3 ciphersuites
|
6 years ago |
 Rich Salz
|
c6d38183d6
Rewrite the X509->alert mapping code
|
6 years ago |
|
Matt Caswell
|
dcf8b01f44
Tolerate a Certificate using a non-supported group on server side
|
6 years ago |
 FdaSilvaYY
|
1fb6b0bf3e
Unify s_client/s_server srtp profiles option handling
|
6 years ago |
 Todd Short
|
4bfb96f2ad
Place ticket keys into secure memory
|
6 years ago |
 Tomas Mraz
|
8a5ed9dce8
Apply system_default configuration on SSL_CTX_new().
|
6 years ago |
 Kurt Roeckx
|
16cfc2c90d
Don't use a ssl specific DRBG anymore
|
6 years ago |
|
Matt Caswell
|
f865b08143
Split configuration of TLSv1.3 ciphers from older ciphers
|
6 years ago |
 Benjamin Saunders
|
3fa2812f32
Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cb
|
6 years ago |
|
Todd Short
|
df0fed9aab
Session Ticket app data
|
7 years ago |
|
Matt Caswell
|
0e1d6ecf37
Add X448/Ed448 support to libssl
|
6 years ago |
 Tatsuhiro Tsujikawa
|
b38ede8043
Export keying material using early exporter master secret
|
6 years ago |
|
Matt Caswell
|
1d0c08b496
The function ssl_get_min_max_version() can fail
|
6 years ago |
|
Todd Short
|
9d75dce3e1
Add TLSv1.3 post-handshake authentication (PHA)
|
7 years ago |
 Benjamin Kaduk
|
c589c34e61
Add support for the TLS 1.3 signature_algorithms_cert extension
|
6 years ago |
|
Benjamin Kaduk
|
fd5e1a8c4a
Propagate TLS 1.3 sigalgs through tls1_set_sigalgs()
|
6 years ago |
|
Benjamin Kaduk
|
f55e99f7dd
Add TLS 1.3 draft-23 PSS signature algorithms
|
6 years ago |
|
Matt Caswell
|
c36001c3a8
Fix logic around when to send an HRR based on cookies
|
7 years ago |
|
Matt Caswell
|
43054d3d73
Add support for sending TLSv1.3 cookies
|
7 years ago |
 Richard Levitte
|
48e5119a6b
Copyright update of more files that have changed this year
|
6 years ago |
 Daniel Bevenius
|
436ad81f05
Fix minor 'the the' typos
|
6 years ago |
|
Matt Caswell
|
2a8db71713
Don't flush the ClientHello if we're going to send early data
|
7 years ago |
|
Matt Caswell
|
758e05c52e
Make sure we treat records written after HRR as TLSv1.3
|
7 years ago |
|
Matt Caswell
|
7b0a3ce0f9
Ensure CCS sent before early_data has the correct record version
|
7 years ago |
|
Matt Caswell
|
fc7129dc37
Update state machine to send CCS based on whether we did an HRR
|
7 years ago |
|
Matt Caswell
|
fdd9236747
Drop CCS messages received in the TLSv1.3 handshake
|
7 years ago |
|
Matt Caswell
|
a5816a5ab9
Implement session id TLSv1.3 middlebox compatibility mode
|
7 years ago |
|
Matt Caswell
|
88050dd196
Update ServerHello to new draft-22 format
|
7 years ago |
|
Daniel Bevenius
|
6aff543b9b
Correct minor typo in ssl_locl.h comment
|
7 years ago |
|
Matt Caswell
|
29bfd5b79a
Add some more cleanups
|
7 years ago |
