 Matt Caswell
|
abd86cecce
Use a fetched version of SHA256 in tls_process_new_session_ticket()
|
4 years ago |
|
Matt Caswell
|
3aceb9ec51
Use the libctx and properties when constructing an EVP_PKEY_CTX
|
4 years ago |
 Pauli
|
ada66e78ef
Deprecate the low level Diffie-Hellman functions.
|
4 years ago |
|
Matt Caswell
|
0f00ed7720
Use the OPENSSL_CTX and property query string in EVP_PKEY_CTX
|
4 years ago |
|
Matt Caswell
|
c8f6c28a93
Explicitly fetch ciphers and digests in libssl
|
4 years ago |
|
Matt Caswell
|
8f21260b09
Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libssl
|
4 years ago |
|
Matt Caswell
|
bddbfae1cd
libssl: Eliminate as much use of EVP_PKEY_size() as possible
|
4 years ago |
 Rich Salz
|
12a765a523
Explicitly test against NULL; do not use !p or similar
|
5 years ago |
 Dr. Matthias St. Pierre
|
706457b7bd
Reorganize local header files
|
5 years ago |
|
Matt Caswell
|
feb9e31c40
Defer sending a KeyUpdate until after pending writes are complete
|
5 years ago |
 Todd Short
|
555cbb328e
Collapse ssl3_state_st (s3) into ssl_st
|
6 years ago |
 Richard Levitte
|
49b26f54f4
Adapt SSL_DEBUG to the new generic trace API
|
6 years ago |
|
Matt Caswell
|
c96ce52ce2
Don't write the tick_identity to the session
|
5 years ago |
 Michael Tuexen
|
09d62b336d
Fix end-point shared secret for DTLS/SCTP
|
5 years ago |
|
Matt Caswell
|
7835e97b6f
Don't artificially limit the size of the ClientHello
|
6 years ago |
 Kurt Roeckx
|
5c587fb6b9
Use (D)TLS_MAX_VERSION_INTERNAL internally
|
6 years ago |
|
Richard Levitte
|
2c18d164f5
Following the license change, modify the boilerplates in ssl/
|
6 years ago |
|
Matt Caswell
|
0fb2815b87
Fix some SSL_export_keying_material() issues
|
6 years ago |
 Paul Yang
|
5a4481f0e0
Fix access zero memory if SSL_DEBUG is enabled
|
6 years ago |
|
Matt Caswell
|
e45620140f
Don't call the client_cert_cb immediately in TLSv1.3
|
6 years ago |
|
Matt Caswell
|
1bf4cb0fe3
Process KeyUpdate and NewSessionTicket messages after a close_notify
|
6 years ago |
 Andy Polyakov
|
9ef9088c15
ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.
|
6 years ago |
|
Matt Caswell
|
1cde025957
Ensure we send an alert on error when processing a ticket
|
6 years ago |
|
Matt Caswell
|
4fd12788eb
Use ssl_version_supported() when choosing server version
|
6 years ago |
|
Matt Caswell
|
4cb004573a
Remove TLSv1.3 tickets from the client cache as we use them
|
6 years ago |
|
Matt Caswell
|
1f1563216d
Restore behaviour from commit 36ff232cf that was incorrectly removed
|
6 years ago |
|
Matt Caswell
|
10bda8f8dd
Reformulate the if condition in tls_process_new_session_ticket
|
6 years ago |
|
Matt Caswell
|
6cf2dbd9fa
Don't store the ticket nonce in the session
|
6 years ago |
|
Matt Caswell
|
4ff1a52666
Fix TLSv1.3 ticket nonces
|
6 years ago |
|
Matt Caswell
|
36ff232cf2
Change the default number of NewSessionTickets we send to 2
|
6 years ago |
