 Richard Levitte
|
2c18d164f5
Following the license change, modify the boilerplates in ssl/
|
vor 6 Jahren |
 Matt Caswell
|
0fb2815b87
Fix some SSL_export_keying_material() issues
|
vor 6 Jahren |
|
Matt Caswell
|
9873297900
Separate ca_names handling for client and server
|
vor 6 Jahren |
 Benjamin Kaduk
|
2aaa0b146b
Restore sensible "sess_accept" counter tracking
|
vor 6 Jahren |
|
Richard Levitte
|
60690b5b83
ssl/statem: Don't compare size_t with less than zero
|
vor 6 Jahren |
|
Matt Caswell
|
f01344cb5c
Do not reset SNI data in SSL_do_handshake()
|
vor 6 Jahren |
 Ben Kaduk
|
2c0267fdc9
Restore historical SSL_get_servername() behavior
|
vor 6 Jahren |
|
Matt Caswell
|
b5b993b229
Use the same min-max version range on the client consistently
|
vor 6 Jahren |
 Andy Polyakov
|
9ef9088c15
ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.
|
vor 6 Jahren |
|
Benjamin Kaduk
|
1c4aa31d79
Normalize SNI hostname handling for SSL and SSL_SESSION
|
vor 6 Jahren |
|
Matt Caswell
|
c9598459b6
Add setters to set the early_data callback
|
vor 6 Jahren |
|
Matt Caswell
|
fb62e47c78
Don't send a warning alert in TLSv1.3
|
vor 6 Jahren |
|
Matt Caswell
|
4ff1a52666
Fix TLSv1.3 ticket nonces
|
vor 6 Jahren |
|
Matt Caswell
|
bceae201b4
EVP_MD_size() can return an error
|
vor 6 Jahren |
|
Matt Caswell
|
f929439f61
Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()
|
vor 6 Jahren |
|
Matt Caswell
|
e32b52a27e
Add support for setting raw private HMAC keys
|
vor 6 Jahren |
|
Matt Caswell
|
27e462f1b0
Only allow supported_versions in a TLSv1.3 ServerHello
|
vor 6 Jahren |
|
Benjamin Kaduk
|
ee36b963ae
Reuse extension_is_relevant() in should_add_extension()
|
vor 7 Jahren |
|
Matt Caswell
|
e73c6eaeff
Tolerate TLSv1.3 PSKs that are a different size to the hash size
|
vor 6 Jahren |
|
Matt Caswell
|
5de683d2c6
Fix status_request and SCT extensions
|
vor 6 Jahren |
|
Matt Caswell
|
c471521243
If s->ctx is NULL then this is an internal error
|
vor 6 Jahren |
|
Matt Caswell
|
6e99ae58c8
Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitable
|
vor 6 Jahren |
 Todd Short
|
e43e6b1951
Fix some minor code nits
|
vor 6 Jahren |
|
Todd Short
|
9d75dce3e1
Add TLSv1.3 post-handshake authentication (PHA)
|
vor 7 Jahren |
|
Benjamin Kaduk
|
c589c34e61
Add support for the TLS 1.3 signature_algorithms_cert extension
|
vor 6 Jahren |
|
Matt Caswell
|
97ea1e7f42
Updates following review of SSL_stateless() code
|
vor 6 Jahren |
|
Matt Caswell
|
c36001c3a8
Fix logic around when to send an HRR based on cookies
|
vor 7 Jahren |
|
Matt Caswell
|
43054d3d73
Add support for sending TLSv1.3 cookies
|
vor 7 Jahren |
|
Richard Levitte
|
3c7d0945b6
Update copyright years on all files merged since Jan 1st 2018
|
vor 6 Jahren |
|
Benjamin Kaduk
|
7bc2bddb14
Permit the "supported_groups" extension in ServerHellos
|
vor 7 Jahren |
