 Matt Caswell
|
6ac1cd10ba
Fix safestack issues in ssl.h
|
4 years ago |
|
Matt Caswell
|
e09f8d256f
Don't send supported groups if no-ec and we're doing DTLS
|
4 years ago |
|
Matt Caswell
|
db9592c1f7
Provider a better error message if we fail to copy parameters
|
4 years ago |
|
Matt Caswell
|
9d2d857f13
Modify libssl to discover supported groups based on available providers
|
4 years ago |
|
Matt Caswell
|
7b2d995ed7
Don't downgrade keys in libssl
|
4 years ago |
 Rich Salz
|
852c2ed260
In OpenSSL builds, declare STACK for datatypes ...
|
4 years ago |
|
Matt Caswell
|
33388b44b6
Update copyright year
|
4 years ago |
 Richard Levitte
|
afce590b74
TLS: Temporarly downgrade newly generated EVP_PKEYs to legacy
|
4 years ago |
|
Matt Caswell
|
c8f6c28a93
Explicitly fetch ciphers and digests in libssl
|
4 years ago |
 Dr. Matthias St. Pierre
|
706457b7bd
Reorganize local header files
|
5 years ago |
 David Benjamin
|
166c0b98fd
Don't generate an unnecessary Diffie-Hellman key in TLS 1.3 clients.
|
5 years ago |
|
Matt Caswell
|
cd0fb43cbe
Following the previous 2 commits also move ecpointformats out of session
|
5 years ago |
|
Matt Caswell
|
dbc6268f68
Allow TLSv1.3 in a no-ec build
|
5 years ago |
 raja-ashok
|
9aaecbfc98
TLS1.3 FFDHE Support
|
5 years ago |
 Todd Short
|
555cbb328e
Collapse ssl3_state_st (s3) into ssl_st
|
6 years ago |
|
Matt Caswell
|
c96ce52ce2
Don't write the tick_identity to the session
|
5 years ago |
|
Todd Short
|
088dfa1335
Add option to disable Extended Master Secret
|
7 years ago |
|
Richard Levitte
|
2c18d164f5
Following the license change, modify the boilerplates in ssl/
|
6 years ago |
|
Matt Caswell
|
589b6227a8
Ignore disabled ciphers when deciding if we are using ECC
|
6 years ago |
|
Matt Caswell
|
b5b993b229
Use the same min-max version range on the client consistently
|
6 years ago |
|
Matt Caswell
|
32097b33bd
Change Post Handshake auth so that it is opt-in
|
6 years ago |
|
Matt Caswell
|
35e742ecac
Update code for the final RFC version of TLSv1.3 (RFC8446)
|
6 years ago |
|
Matt Caswell
|
73cc84a132
Suport TLSv1.3 draft 28
|
6 years ago |
|
Matt Caswell
|
9d5db9c9ab
Assert that alpn_selected is NULL before we assign it
|
6 years ago |
 Peter Wu
|
696de86f8e
Fix stack-use-after-scope
|
6 years ago |
|
Matt Caswell
|
c2b290c3d0
Fix no-psk
|
6 years ago |
|
Matt Caswell
|
27e462f1b0
Only allow supported_versions in a TLSv1.3 ServerHello
|
6 years ago |
|
Matt Caswell
|
f3d40db1b9
Fallback on old style PSK callbacks if the new style ones aren't present
|
6 years ago |
|
Todd Short
|
aa2ed504ea
If not sending key_share (no TLSv1.3), return appropriately.
|
6 years ago |
|
Matt Caswell
|
5de683d2c6
Fix status_request and SCT extensions
|
6 years ago |
