Dr. Stephen Henson
|
722521594c
Don't use decryption_failed alert for TLS v1.1 or later.
|
vor 14 Jahren |
Dr. Stephen Henson
|
e9be051f3a
use generalise mac API for SSL key generation
|
vor 14 Jahren |
Dr. Stephen Henson
|
e15320f652
Only use explicit IV if cipher is in CBC mode.
|
vor 14 Jahren |
Dr. Stephen Henson
|
f96ccf36ff
PR: 1830
|
vor 14 Jahren |
Dr. Stephen Henson
|
b9e7793dd7
oops, revert wrong patch..
|
vor 14 Jahren |
Dr. Stephen Henson
|
d135da5192
Fix warnings (From HEAD, original patch by Ben).
|
vor 14 Jahren |
Dr. Stephen Henson
|
9674de7d3d
no need for empty fragments with TLS 1.1 and later due to explicit IV
|
vor 14 Jahren |
Ben Laurie
|
c8bbd98a2b
Fix warnings.
|
vor 14 Jahren |
Dr. Stephen Henson
|
7837c7ec45
PR: 2259
|
vor 14 Jahren |
Dr. Stephen Henson
|
637f374ad4
Initial experimental TLSv1.1 support
|
vor 15 Jahren |
Dr. Stephen Henson
|
8711efb498
Updates from 1.0.0-stable branch.
|
vor 15 Jahren |
Dr. Stephen Henson
|
d7ecd42255
Fix warnings properly this time ;-)
|
vor 16 Jahren |
Dr. Stephen Henson
|
211655fcdd
Fix sign-compare warnings.
|
vor 16 Jahren |
Lutz Jänicke
|
fceac0bc74
Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP
|
vor 16 Jahren |
Ben Laurie
|
0eab41fb78
If we're going to return errors (no matter how stupid), then we should
|
vor 16 Jahren |
Ben Laurie
|
6ba71a7173
Handle the unlikely event that BIO_get_mem_data() returns -ve.
|
vor 16 Jahren |
Geoff Thorpe
|
6343829a39
Revert the size_t modifications from HEAD that had led to more
|
vor 16 Jahren |
Dr. Stephen Henson
|
7b808412c9
Make -DKSSL_DEBUG work again.
|
vor 16 Jahren |
Andy Polyakov
|
aff686df91
Fix unsigned/signed warnings in ssl.
|
vor 17 Jahren |
Dr. Stephen Henson
|
0e1dba934f
1. Changes for s_client.c to make it return non-zero exit code in case
|
vor 17 Jahren |
Andy Polyakov
|
4fe55663df
Make DTLS1 record layer MAC calculation RFC compliant.
|
vor 17 Jahren |
Dr. Stephen Henson
|
67c8e7f414
Support for certificate status TLS extension.
|
vor 17 Jahren |
Bodo Möller
|
761772d7e1
Implement the Opaque PRF Input TLS extension
|
vor 17 Jahren |
Dr. Stephen Henson
|
81025661a9
Update ssl code to support digests other than MD5+SHA1 in handshake.
|
vor 17 Jahren |
Dr. Stephen Henson
|
b948e2c59e
Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.
|
vor 17 Jahren |
Bodo Möller
|
52b8dad8ec
Reorganize the data used for SSL ciphersuite pattern matching.
|
vor 18 Jahren |
Nils Larsch
|
cc684e330b
ensure that the EVP_CIPHER_CTX object is initialized
|
vor 18 Jahren |
Dr. Stephen Henson
|
5cda6c4582
Fix from stable branch.
|
vor 18 Jahren |
Nils Larsch
|
ddac197404
add initial support for RFC 4279 PSK SSL ciphersuites
|
vor 18 Jahren |
Bodo Möller
|
01c76c6606
There's no such things as DTLS1_AD_MISSING_HANDSHAKE_MESSAGE.
|
vor 19 Jahren |