Dr. Stephen Henson
|
d0205686bb
PR: 2240
|
vor 14 Jahren |
Dr. Stephen Henson
|
290be870d6
using_ecc doesn't just apply to TLSv1
|
vor 14 Jahren |
Dr. Stephen Henson
|
7d5686d355
Don't assume a decode error if session tlsext_ecpointformatlist is not NULL: it can be legitimately set elsewhere.
|
vor 14 Jahren |
Dr. Stephen Henson
|
732d31beee
bring HEAD up to date, add CVE-2010-3864 fix, update NEWS files
|
vor 14 Jahren |
Ben Laurie
|
bf48836c7c
Fixes to NPN from Adam Langley.
|
vor 14 Jahren |
Dr. Stephen Henson
|
bdd5350804
PR: 1833
|
vor 14 Jahren |
Ben Laurie
|
ee2ffc2794
Add Next Protocol Negotiation.
|
vor 14 Jahren |
Ben Laurie
|
c8bbd98a2b
Fix warnings.
|
vor 14 Jahren |
Dr. Stephen Henson
|
c2c49969e2
Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as
|
vor 14 Jahren |
Dr. Stephen Henson
|
423c66f10e
Simplify RI+SCSV logic:
|
vor 15 Jahren |
Dr. Stephen Henson
|
fbed9f8158
Alert to use is now defined in spec: update code
|
vor 15 Jahren |
Dr. Stephen Henson
|
ef51b4b9b4
New option to enable/disable connection to unpatched servers
|
vor 15 Jahren |
Dr. Stephen Henson
|
c27c9cb4f7
Allow initial connection (but no renegoriation) to servers which don't support
|
vor 15 Jahren |
Dr. Stephen Henson
|
13f6d57b1e
Add support for magic cipher suite value (MCSV). Make secure renegotiation
|
vor 15 Jahren |
Dr. Stephen Henson
|
8025e25113
PR: 2121
|
vor 15 Jahren |
Dr. Stephen Henson
|
637f374ad4
Initial experimental TLSv1.1 support
|
vor 15 Jahren |
Dr. Stephen Henson
|
64abf5e657
Include a more meaningful error message when rejecting legacy renegotiation
|
vor 15 Jahren |
Dr. Stephen Henson
|
860c3dd1b6
add missing parts of reneg port, fix apps patch
|
vor 15 Jahren |
Dr. Stephen Henson
|
7ba3838a4b
If it is a new session don't send the old TLS ticket: send a zero length
|
vor 15 Jahren |
Dr. Stephen Henson
|
661dc1431f
Fix statless session resumption so it can coexist with SNI
|
vor 15 Jahren |
Dr. Stephen Henson
|
07a9d1a2c2
PR: 2028
|
vor 15 Jahren |
Dr. Stephen Henson
|
5f8f94a661
Update from 1.0.0-stable.
|
vor 15 Jahren |
Ben Laurie
|
2bd45dc94c
Apparently s->ctx could be NULL. (Coverity ID 147).
|
vor 16 Jahren |
Ben Laurie
|
121f9e743c
Apparently s->ctx could be NULL at this point (see earlier
|
vor 16 Jahren |
Ben Laurie
|
0eab41fb78
If we're going to return errors (no matter how stupid), then we should
|
vor 16 Jahren |
Ben Laurie
|
a9dbe71ee0
Back out pointless change.
|
vor 16 Jahren |
Ben Laurie
|
ecd3370ba0
*** empty log message ***
|
vor 16 Jahren |
Dr. Stephen Henson
|
12bf56c017
PR: 1574
|
vor 16 Jahren |
Dr. Stephen Henson
|
e8da6a1d0f
Fix from stable branch.
|
vor 16 Jahren |
Bodo Möller
|
40a706286f
From HEAD:
|
vor 16 Jahren |