 Matt Caswell
|
13c453728c
Only disabled what we need to in a no-dh build
|
3 years ago |
|
Matt Caswell
|
091f6074c5
Convert TLS auto DH parameters to use EVP_PKEY
|
3 years ago |
|
Matt Caswell
|
301fcb2843
Concentrate deprecated libssl API usage in one file
|
3 years ago |
 Dr. Matthias St. Pierre
|
b425001010
Rename OPENSSL_CTX prefix to OSSL_LIB_CTX
|
3 years ago |
 Nicola Tuveri
|
8b17fbaf46
[ssl] Support ssl_encapsulate on server side
|
4 years ago |
|
Nicola Tuveri
|
a011b5861b
[ssl] Support ssl_decapsulate on client side
|
4 years ago |
|
Nicola Tuveri
|
c1a74f59ac
Define OSSL_CAPABILITY_TLS_GROUP_IS_KEM
|
4 years ago |
 Rutger Hendriks
|
e57bbf9e1a
Increase PSK_MAX_PSK_LEN to 512
|
4 years ago |
|
Matt Caswell
|
e08f86ddb1
Make ssl3_cbc_digest_record() use the real data_size
|
4 years ago |
|
Matt Caswell
|
3fddbb264e
Add an HMAC implementation that is TLS aware
|
4 years ago |
 John Baldwin
|
c7b46b549d
Move KTLS inline functions only used by libssl into ssl/ktls.c.
|
4 years ago |
|
Matt Caswell
|
b558817823
Convert SSLv3 handling to use provider side CBC/MAC removal
|
4 years ago |
|
Matt Caswell
|
ec27e619e8
Move MAC removal responsibility to the various protocol "enc" functions
|
4 years ago |
|
Matt Caswell
|
260009d877
Update the various SSL group getting and setting functions
|
4 years ago |
|
Matt Caswell
|
9d2d857f13
Modify libssl to discover supported groups based on available providers
|
4 years ago |
|
Matt Caswell
|
263ff2c9d4
Check that Signature Algorithms are available before using them
|
4 years ago |
 Otto Hollmann
|
c1fd005bfc
Add cipher list ciphersuites which using encryption algorithm in mode CBC.
|
4 years ago |
 Dmitry Belyavskiy
|
5a5530a29a
New Russian TLS 1.2 implementation
|
4 years ago |
 Benjamin Kaduk
|
35774d5594
Fix up whitespace nits introduced by PR #11416
|
4 years ago |
|
Benjamin Kaduk
|
3bfacb5fd4
Add SSL_new_session_ticket() API
|
4 years ago |
|
Matt Caswell
|
33388b44b6
Update copyright year
|
4 years ago |
|
Matt Caswell
|
73d391ad13
Use a fetched MD if appropriate in ssl3_cbc_digest_record
|
4 years ago |
|
Matt Caswell
|
c0bfc473d8
Use the libctx for all EVP_PKEY_CTX operations
|
4 years ago |
 Nikolay Morozov
|
6f89229603
TLSEXT_SIGALG_gostr34102012 0x0840 and 0x0841 support
|
4 years ago |
|
Matt Caswell
|
9727f4e7fd
Use a fetched cipher for the TLSv1.3 early secret
|
4 years ago |
 Pauli
|
ada66e78ef
Deprecate the low level Diffie-Hellman functions.
|
4 years ago |
|
Matt Caswell
|
0f00ed7720
Use the OPENSSL_CTX and property query string in EVP_PKEY_CTX
|
4 years ago |
|
Matt Caswell
|
c8f6c28a93
Explicitly fetch ciphers and digests in libssl
|
4 years ago |
|
Pauli
|
a76ce2862b
TLS: use EVP for HMAC throughout libssl.
|
4 years ago |
 Kurt Roeckx
|
b0031e5dc2
Check that the default signature type is allowed
|
4 years ago |
