 Martin Elshuber
|
163b801616
Add support to zeroize plaintext in S3 record layer
|
4 years ago |
 Matt Caswell
|
ec27e619e8
Move MAC removal responsibility to the various protocol "enc" functions
|
4 years ago |
 Vadim Fedorenko
|
cc10b56dbe
TLSv13: add kTLS support
|
4 years ago |
 Dmitry Belyavskiy
|
09b90e0ed7
Introducing option SSL_OP_IGNORE_UNEXPECTED_EOF
|
4 years ago |
 Benjamin Kaduk
|
3bfacb5fd4
Add SSL_new_session_ticket() API
|
4 years ago |
|
Matt Caswell
|
33388b44b6
Update copyright year
|
4 years ago |
 John Baldwin
|
074a6e86e6
Use a flag in SSL3_BUFFER to track when an application buffer is reused.
|
5 years ago |
|
Matt Caswell
|
d924dbf4ae
Detect EOF while reading in libssl
|
4 years ago |
|
John Baldwin
|
f059e4cc43
Don't generate a MAC when using KTLS.
|
5 years ago |
 Andrew Gallatin
|
54f30cb57c
Bypass multiblock and send individual records when using KTLS.
|
6 years ago |
 Dr. Matthias St. Pierre
|
706457b7bd
Reorganize local header files
|
5 years ago |
|
Matt Caswell
|
8bbf63e48f
Fix SSL_MODE_RELEASE_BUFFERS functionality
|
5 years ago |
|
Matt Caswell
|
0d345f0e10
Make the PACKET/WPACKET code available to both libcrypto and libssl
|
5 years ago |
|
Matt Caswell
|
feb9e31c40
Defer sending a KeyUpdate until after pending writes are complete
|
5 years ago |
 Todd Short
|
555cbb328e
Collapse ssl3_state_st (s3) into ssl_st
|
6 years ago |
 Boris Pismenny
|
c35e921ffa
ssl: Linux TLS Rx Offload
|
5 years ago |
 Richard Levitte
|
558ea84743
Remove heartbeats completely
|
8 years ago |
|
Matt Caswell
|
3d35e3a253
Don't interleave handshake and other record types in TLSv1.3
|
5 years ago |
|
Boris Pismenny
|
50ec750567
ssl: Linux TLS Tx Offload
|
7 years ago |
|
Richard Levitte
|
2c18d164f5
Following the license change, modify the boilerplates in ssl/
|
6 years ago |
|
Matt Caswell
|
1bf4cb0fe3
Process KeyUpdate and NewSessionTicket messages after a close_notify
|
6 years ago |
|
Matt Caswell
|
de9e884b2f
Tolerate encrypted or plaintext alerts
|
6 years ago |
|
Matt Caswell
|
7426cd343d
Ensure that we write out alerts correctly after early_data
|
6 years ago |
|
Matt Caswell
|
358ffa05cd
Return a fatal error if application data is encountered during shutdown
|
6 years ago |
|
Matt Caswell
|
ba70904949
Return SSL_ERROR_WANT_READ if SSL_shutdown() encounters handshake data
|
6 years ago |
|
Matt Caswell
|
93f528f36e
Auto retry if we ditch records during shutdown
|
6 years ago |
|
Matt Caswell
|
fee33643a8
Fix enable-ssl3 enable-ssl3-method
|
6 years ago |
|
Matt Caswell
|
bcf2907c68
Remodel the if sequence for handling alerts
|
6 years ago |
|
Matt Caswell
|
4aa5a5669c
Fix TLSv1.3 alert handling
|
6 years ago |
|
Matt Caswell
|
3295d24238
Use the TLSv1.3 record header as AAD
|
6 years ago |
