Pauli
|
2087028612
Fix return formatting.
|
6 years ago |
Pauli
|
e931f370aa
Cleanse the key log buffer.
|
6 years ago |
Richard Levitte
|
18958cefd8
Remove SSL_version_str
|
6 years ago |
Benjamin Kaduk
|
2340ed277b
Reset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()
|
6 years ago |
Matt Caswell
|
f01344cb5c
Do not reset SNI data in SSL_do_handshake()
|
6 years ago |
Ben Kaduk
|
328a0547ad
Simplify SSL_get_servername() to avoid session references
|
6 years ago |
Matt Caswell
|
e97be71804
Add support for SSL_CTX_set_post_handshake_auth()
|
6 years ago |
Matt Caswell
|
32097b33bd
Change Post Handshake auth so that it is opt-in
|
6 years ago |
Andy Polyakov
|
9ef9088c15
ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.
|
6 years ago |
Benjamin Kaduk
|
a75be9fd34
Improve backwards compat for SSL_get_servername()
|
6 years ago |
Benjamin Kaduk
|
1c4aa31d79
Normalize SNI hostname handling for SSL and SSL_SESSION
|
6 years ago |
Matt Caswell
|
4e8548e80e
Introduce the recv_max_early_data setting
|
6 years ago |
Matt Caswell
|
c9598459b6
Add setters to set the early_data callback
|
6 years ago |
Matt Caswell
|
5d263fb78b
Make the anti-replay feature optional
|
6 years ago |
Matt Caswell
|
6cc0b3c217
Respect SSL_OP_NO_TICKET in TLSv1.3
|
6 years ago |
Kurt Roeckx
|
693cf80c6f
Enable SSL_MODE_AUTO_RETRY by default
|
6 years ago |
Matt Caswell
|
ee94ec2ef8
Don't cache stateless tickets in TLSv1.3
|
6 years ago |
Matt Caswell
|
36ff232cf2
Change the default number of NewSessionTickets we send to 2
|
6 years ago |
Matt Caswell
|
9d0a8bb71e
Enable the ability to set the number of TLSv1.3 session tickets sent
|
6 years ago |
Matt Caswell
|
5fe3715707
Flush server side unauthenticated writes
|
6 years ago |
Matt Caswell
|
a216df599a
Fix SSL_get_shared_ciphers()
|
6 years ago |
Benjamin Kaduk
|
c4fa1f7fc0
Fix regression with session cache use by clients
|
6 years ago |
Matt Caswell
|
bd7775e14a
Fix assertion failure in SSL_set_bio()
|
6 years ago |
Matt Caswell
|
a53b5be6a0
Fix configuration of TLSv1.3 ciphersuites
|
6 years ago |
Rich Salz
|
cdb10bae3f
Set error code on alloc failures
|
6 years ago |
Kurt Roeckx
|
4cffafe967
Use the private RNG for data that is not public
|
7 years ago |
Rich Salz
|
e6e9170d6e
Allow NULL for some _free routines.
|
6 years ago |
Matt Caswell
|
320a81277e
Remove some code for a contributor that we cannot find
|
6 years ago |
Benjamin Kaduk
|
d316cdcf6d
Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEER
|
6 years ago |
Todd Short
|
4bfb96f2ad
Place ticket keys into secure memory
|
6 years ago |