 Matt Caswell
|
fd3ed85c67
Fix safestack issues in ocsp.h
|
4 years ago |
|
Matt Caswell
|
e6623cfbff
Fix safestack issues in x509.h
|
4 years ago |
|
Matt Caswell
|
6ac1cd10ba
Fix safestack issues in ssl.h
|
4 years ago |
|
Matt Caswell
|
6f0bd6ca1c
Ensure libssl creates libctx aware MAC keys
|
4 years ago |
 Shane Lontis
|
0ab18e7924
Add EVP signature with libctx methods.
|
4 years ago |
|
Matt Caswell
|
9d2d857f13
Modify libssl to discover supported groups based on available providers
|
4 years ago |
|
Matt Caswell
|
7b2d995ed7
Don't downgrade keys in libssl
|
4 years ago |
 Dmitry Belyavskiy
|
5a5530a29a
New Russian TLS 1.2 implementation
|
4 years ago |
 Rich Salz
|
852c2ed260
In OpenSSL builds, declare STACK for datatypes ...
|
4 years ago |
|
Matt Caswell
|
33388b44b6
Update copyright year
|
4 years ago |
 Richard Levitte
|
afce590b74
TLS: Temporarly downgrade newly generated EVP_PKEYs to legacy
|
4 years ago |
|
Matt Caswell
|
fc69f32cd6
Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libssl
|
4 years ago |
 Pauli
|
ada66e78ef
Deprecate the low level Diffie-Hellman functions.
|
4 years ago |
|
Matt Caswell
|
0f00ed7720
Use the OPENSSL_CTX and property query string in EVP_PKEY_CTX
|
4 years ago |
|
Matt Caswell
|
c8f6c28a93
Explicitly fetch ciphers and digests in libssl
|
4 years ago |
|
Matt Caswell
|
7955c1f16e
Fix SSL_get_servername() and SNI behaviour
|
5 years ago |
 Dr. Matthias St. Pierre
|
706457b7bd
Reorganize local header files
|
5 years ago |
|
Matt Caswell
|
debb64a0ca
Don't send a status_request extension in a CertificateRequest message
|
5 years ago |
|
Matt Caswell
|
cd0fb43cbe
Following the previous 2 commits also move ecpointformats out of session
|
5 years ago |
|
Matt Caswell
|
45436e611b
Fix a race condition in supported groups handling
|
5 years ago |
|
Matt Caswell
|
dbc6268f68
Allow TLSv1.3 in a no-ec build
|
5 years ago |
 raja-ashok
|
9aaecbfc98
TLS1.3 FFDHE Support
|
5 years ago |
 Todd Short
|
555cbb328e
Collapse ssl3_state_st (s3) into ssl_st
|
6 years ago |
|
Matt Caswell
|
c96ce52ce2
Don't write the tick_identity to the session
|
5 years ago |
|
Todd Short
|
088dfa1335
Add option to disable Extended Master Secret
|
7 years ago |
|
Richard Levitte
|
2c18d164f5
Following the license change, modify the boilerplates in ssl/
|
6 years ago |
|
Matt Caswell
|
51256b34d8
Send a NewSessionTicket after using an external PSK
|
6 years ago |
|
Matt Caswell
|
35e742ecac
Update code for the final RFC version of TLSv1.3 (RFC8446)
|
6 years ago |
 Benjamin Kaduk
|
1c4aa31d79
Normalize SNI hostname handling for SSL and SSL_SESSION
|
6 years ago |
|
Matt Caswell
|
5f26ddff7e
Always issue new tickets when using TLSv1.3 stateful tickets
|
6 years ago |
