 Richard Levitte
|
2c18d164f5
Following the license change, modify the boilerplates in ssl/
|
5 anos atrás |
 Matt Caswell
|
589b6227a8
Ignore disabled ciphers when deciding if we are using ECC
|
6 anos atrás |
|
Matt Caswell
|
b5b993b229
Use the same min-max version range on the client consistently
|
6 anos atrás |
|
Matt Caswell
|
32097b33bd
Change Post Handshake auth so that it is opt-in
|
6 anos atrás |
|
Matt Caswell
|
35e742ecac
Update code for the final RFC version of TLSv1.3 (RFC8446)
|
6 anos atrás |
|
Matt Caswell
|
73cc84a132
Suport TLSv1.3 draft 28
|
6 anos atrás |
|
Matt Caswell
|
9d5db9c9ab
Assert that alpn_selected is NULL before we assign it
|
6 anos atrás |
 Peter Wu
|
696de86f8e
Fix stack-use-after-scope
|
6 anos atrás |
|
Matt Caswell
|
c2b290c3d0
Fix no-psk
|
6 anos atrás |
|
Matt Caswell
|
27e462f1b0
Only allow supported_versions in a TLSv1.3 ServerHello
|
6 anos atrás |
|
Matt Caswell
|
f3d40db1b9
Fallback on old style PSK callbacks if the new style ones aren't present
|
6 anos atrás |
 Todd Short
|
aa2ed504ea
If not sending key_share (no TLSv1.3), return appropriately.
|
6 anos atrás |
|
Matt Caswell
|
5de683d2c6
Fix status_request and SCT extensions
|
6 anos atrás |
|
Matt Caswell
|
6738bf1417
Update copyright year
|
6 anos atrás |
|
Matt Caswell
|
7e70213fe3
Don't overestimate the ticket age
|
6 anos atrás |
|
Todd Short
|
9d75dce3e1
Add TLSv1.3 post-handshake authentication (PHA)
|
6 anos atrás |
|
Matt Caswell
|
848a950b71
Fix some instances of the wrong alert type being sent
|
6 anos atrás |
 Paul Yang
|
56d362881e
Remove spaces at end of line in ssl/statem
|
6 anos atrás |
|
Matt Caswell
|
5cc807da25
Delay flush until after CCS with early_data
|
6 anos atrás |
|
Matt Caswell
|
426dfc9ff7
Send supported_versions in an HRR
|
6 anos atrás |
|
Matt Caswell
|
fc7129dc37
Update state machine to send CCS based on whether we did an HRR
|
6 anos atrás |
|
Matt Caswell
|
88050dd196
Update ServerHello to new draft-22 format
|
7 anos atrás |
|
Matt Caswell
|
635c8f7715
Fix up a few places in the state machine that got missed with SSLfatal()
|
6 anos atrás |
|
Matt Caswell
|
f63a17d66d
Convert the state machine code to use SSLfatal()
|
6 anos atrás |
|
Matt Caswell
|
bfab12bb7d
Allow a client to send early_data with SNI if the session has no SNI
|
6 anos atrás |
 Andy Polyakov
|
3a63c0edab
Resolve warnings in VC-WIN32 build, which allows to add /WX.
|
6 anos atrás |
 FdaSilvaYY
|
cf72c75792
Implement Maximum Fragment Length TLS extension.
|
7 anos atrás |
 Dr. Stephen Henson
|
f48d826e33
Change curves to groups where relevant
|
7 anos atrás |
|
Dr. Stephen Henson
|
ff6d20a67b
Use separate functions for supported and peer groups lists
|
7 anos atrás |
|
Dr. Stephen Henson
|
34e5292c57
Rename tls1_get_curvelist.
|
7 anos atrás |
