 Alexey Fofanov
|
9890cc42da
set_client_ciphersuite(): Fix for potential UB if session->cipher is NULL
|
1 year ago |
 Dimitri Papadopoulos
|
23def9d371
Fix typos found by codespell
|
1 year ago |
|
Dimitri Papadopoulos
|
bbaeadb068
"foo * bar" should be "foo *bar"
|
1 year ago |
 Matt Caswell
|
84a149254f
Change the TLS handshake keys early if we're not doing early data
|
1 year ago |
|
Matt Caswell
|
50a0af2e41
TLS KeyUpdate messages are not allowed in QUIC
|
1 year ago |
 Jairus Christensen
|
cee0628e0d
[feat] SSL RTT in both client and server statem. SSL_get_handshake_rtt makes it available
|
1 year ago |
 Tomas Mraz
|
1eef26bd89
Do not send the empty renegotiation info SCSV in QUIC
|
1 year ago |
 Todd Short
|
3c95ef22df
RFC7250 (RPK) support
|
3 years ago |
 VeronikaNguyen
|
c6d14bfd5f
Added `CERTIFICATE_VERIFY_MAX_LENGTH` constant
|
1 year ago |
 Michael Baentsch
|
ee58915cfd
first cut at sigalg loading
|
2 years ago |
|
Matt Caswell
|
3f9175c7a4
Extend the new_record_layer function
|
2 years ago |
|
Tomas Mraz
|
97b8db1af2
Make error reason for disallowed legacy sigalg more specific
|
1 year ago |
|
Matt Caswell
|
f471f60a8a
Remove remaining refs to enc_(write|read)_ctx/(read|write)_hash
|
2 years ago |
|
Todd Short
|
3840271e98
Add zlib oneshot compression
|
2 years ago |
|
Todd Short
|
d06d5d6b68
Fix coverity 1516094 uninit
|
2 years ago |
|
Matt Caswell
|
b92fc4ae18
Remove some redundant code
|
2 years ago |
|
Todd Short
|
72620ac791
Add `for_comp` flag when retrieving certs for compression
|
2 years ago |
|
Todd Short
|
7e3cacac94
Update COMP_METHOD
|
2 years ago |
|
Todd Short
|
b67cb09f8d
Add support for compressed certificates (RFC8879)
|
3 years ago |
|
Matt Caswell
|
2c50d7fb06
Convert the TLSv1.3 crypto code to the new write record layer
|
2 years ago |
 Richard Levitte
|
e077455e9e
Stop raising ERR_R_MALLOC_FAILURE in most places
|
2 years ago |
|
Matt Caswell
|
1d3676778c
Move logic for figuring out the record version out of record layer
|
2 years ago |
|
Matt Caswell
|
67ec6d2b74
Use an enum for the return value from a construction function
|
2 years ago |
 Pauli
|
f0131dc04a
ssl: modify libssl so that it uses OSSL_TIME
|
2 years ago |
|
Matt Caswell
|
cffafb5f57
Move some fields out of the SSL object and into the record layer object
|
2 years ago |
|
Matt Caswell
|
9cd9e0978b
Remove some use of SSL object from record layer
|
2 years ago |
|
Tomas Mraz
|
38b051a1fe
SSL object refactoring using SSL_CONNECTION object
|
2 years ago |
 slontis
|
b740012f77
Check for EVP_MD being NULL inside ssl.
|
2 years ago |
 Dmitry Belyavskiy
|
2b5e89992e
Use safe pattern for buffer size determining in case of GOST key exchange
|
2 years ago |
|
Matt Caswell
|
fecb3aae22
Update copyright year
|
2 years ago |
