 Jiasheng Jiang
|
48e3cf25a8
ssl/statem: Replace size_t with int and add the checks
|
7 mesi fa |
 Dimitri Papadopoulos
|
164a541b93
Fix new typos found by codespell
|
10 mesi fa |
 Markus Minichmayr
|
f290663148
Fix implementation of `PreferNoDHEKEX` option.
|
11 mesi fa |
|
Markus Minichmayr
|
b8590b2f36
Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the server to prefer non-dhe psk key exchange over psk with dhe (config file option `PreferNoDHEKEX`, server option `prefer_no_dhe_kex`).
|
11 mesi fa |
 Frederik Wedel-Heinen
|
5ac7ee4d5a
Resolves some magic values that has a hello_retry_request enum type.
|
1 anno fa |
 Todd Short
|
3c95ef22df
RFC7250 (RPK) support
|
3 anni fa |
 Matt Caswell
|
0513a38364
Fix early_data age calculation
|
1 anno fa |
 Philippe Antoine
|
1dbfd7fe24
fuzz: fix coverity warnings
|
1 anno fa |
|
Philippe Antoine
|
2b9e2afc38
fuzz: make post handshake reachable
|
1 anno fa |
|
Matt Caswell
|
247b8e5252
Ensure that the key share group is allowed for our protocol version
|
2 anni fa |
|
Matt Caswell
|
16f0e91cf8
Partial revert and reimplement "Enable brainpool curves for TLS1.3"
|
2 anni fa |
 Richard Levitte
|
e077455e9e
Stop raising ERR_R_MALLOC_FAILURE in most places
|
2 anni fa |
 Pauli
|
f0131dc04a
ssl: modify libssl so that it uses OSSL_TIME
|
2 anni fa |
|
Pauli
|
e8a557dc3c
Coverity: misuses of time_t
|
2 anni fa |
 Tomas Mraz
|
38b051a1fe
SSL object refactoring using SSL_CONNECTION object
|
2 anni fa |
 slontis
|
b740012f77
Check for EVP_MD being NULL inside ssl.
|
2 anni fa |
|
Matt Caswell
|
fecb3aae22
Update copyright year
|
2 anni fa |
|
Tomas Mraz
|
d5530efada
Add back check for the DH public key size
|
2 anni fa |
 Bernd Edlinger
|
0a10825a00
Enable brainpool curves for TLS1.3
|
6 anni fa |
 x2018
|
1287dabd0b
fix some code with obvious wrong coding style
|
3 anni fa |
|
Pauli
|
407820c0e3
tls: remove TODOs
|
3 anni fa |
|
Tomas Mraz
|
ed576acdf5
Rename all getters to use get/get0 in name
|
3 anni fa |
 Benjamin Kaduk
|
aa6bd216dd
Promote SSL_get_negotiated_group() for non-TLSv1.3
|
3 anni fa |
|
Benjamin Kaduk
|
e776858bce
Don't send key_share for PSK-only key exchange
|
3 anni fa |
 Pauli
|
d38b6ae96f
ssl: support params arguments to init functions
|
3 anni fa |
|
Matt Caswell
|
a28d06f3e9
Update copyright year
|
3 anni fa |
|
Matt Caswell
|
462f4f4bc0
Remove OPENSSL_NO_EC guards from libssl
|
3 anni fa |
|
Matt Caswell
|
8b1db5d329
Make supported_groups code independent of EC and DH
|
3 anni fa |
|
Matt Caswell
|
ddf8f1ce63
Ensure default supported groups works even with no-ec and no-dh
|
3 anni fa |
 Pauli
|
a7e6a3d8ef
tag unused function arguments as ossl_unused
|
4 anni fa |
