 Dr. Stephen Henson
|
6dd547398a
use client version when eliminating TLS v1.2 ciphersuites in client hello
|
12 years ago |
|
Dr. Stephen Henson
|
fca38e350b
fix signed/unsigned warning
|
12 years ago |
|
Dr. Stephen Henson
|
1d7392f219
PR: 2602
|
12 years ago |
 Bodo Möller
|
c519e89f5c
Fix session handling.
|
13 years ago |
|
Dr. Stephen Henson
|
1f59a84308
Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA
|
13 years ago |
|
Dr. Stephen Henson
|
d09677ac45
Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support and
|
13 years ago |
|
Dr. Stephen Henson
|
238b63613b
use TLS1_get_version macro to check version so TLS v1.2 changes don't interfere with DTLS
|
13 years ago |
|
Dr. Stephen Henson
|
086e32a6c7
Implement FIPS_mode and FIPS_mode_set
|
13 years ago |
|
Dr. Stephen Henson
|
a2f9200fba
Initial TLS v1.2 client support. Include a default supported signature
|
13 years ago |
|
Dr. Stephen Henson
|
6b7be581e5
Continuing TLS v1.2 support: add support for server parsing of
|
13 years ago |
|
Dr. Stephen Henson
|
7409d7ad51
Initial incomplete TLS v1.2 support. New ciphersuites added, new version
|
13 years ago |
|
Dr. Stephen Henson
|
08557cf22c
Initial "opaque SSL" framework. If an application defines
|
13 years ago |
 Ben Laurie
|
edc032b5e3
Add SRP support.
|
13 years ago |
|
Dr. Stephen Henson
|
a3654f0586
Include openssl/crypto.h first in several other files so FIPS renaming
|
13 years ago |
|
Dr. Stephen Henson
|
b71f815f6b
remove duplicate statement
|
13 years ago |
|
Dr. Stephen Henson
|
ac7797a722
oops, reinstate TLSv1 string
|
13 years ago |
|
Ben Laurie
|
bf48836c7c
Fixes to NPN from Adam Langley.
|
14 years ago |
|
Dr. Stephen Henson
|
bdd5350804
PR: 1833
|
14 years ago |
|
Bodo Möller
|
7c2d4fee25
For better forward-security support, add functions
|
14 years ago |
|
Dr. Stephen Henson
|
44959ee456
PR: 1833
|
14 years ago |
|
Ben Laurie
|
ee2ffc2794
Add Next Protocol Negotiation.
|
14 years ago |
|
Ben Laurie
|
c8bbd98a2b
Fix warnings.
|
14 years ago |
|
Dr. Stephen Henson
|
7512141162
OR default SSL_OP_LEGACY_SERVER_CONNECT so existing options are preserved
|
14 years ago |
|
Dr. Stephen Henson
|
423c66f10e
Simplify RI+SCSV logic:
|
14 years ago |
|
Dr. Stephen Henson
|
76998a71bc
Updates to conform with draft-ietf-tls-renegotiation-03.txt:
|
14 years ago |
|
Dr. Stephen Henson
|
73527122c9
Typo
|
14 years ago |
|
Dr. Stephen Henson
|
d68015764e
Update RI to match latest spec.
|
14 years ago |
|
Dr. Stephen Henson
|
ef51b4b9b4
New option to enable/disable connection to unpatched servers
|
14 years ago |
|
Dr. Stephen Henson
|
a8640f0a7d
Check s3 is not NULL
|
14 years ago |
|
Dr. Stephen Henson
|
7661ccadf0
Add ctrls to clear options and mode.
|
14 years ago |
