 Tomas Mraz
|
38b051a1fe
SSL object refactoring using SSL_CONNECTION object
|
2 years ago |
 slontis
|
b740012f77
Check for EVP_MD being NULL inside ssl.
|
2 years ago |
 Peiwei Hu
|
56876ae952
Fix the erroneous checks of EVP_PKEY_CTX_set_group_name
|
2 years ago |
 Matt Caswell
|
fecb3aae22
Update copyright year
|
2 years ago |
 Hugo Landau
|
948cf52179
Add SSL_(CTX_)?get0_(verify|chain)_cert_store functions
|
2 years ago |
 Nicola Tuveri
|
66914fc024
[ssl] Prefer SSL_k(EC)?DHE to the SSL_kE(EC)?DH alias
|
2 years ago |
 Phus Lu
|
13a53fbf13
add SSL_get0_iana_groups() & SSL_client_hello_get_extension_order()
|
2 years ago |
 Dr. David von Oheimb
|
79b2a2f2ee
add OSSL_STACK_OF_X509_free() for commonly used pattern
|
2 years ago |
|
Matt Caswell
|
e819b57273
Don't free the EVP_PKEY on error in set0_tmp_dh_pkey() functions
|
2 years ago |
 Bernd Edlinger
|
0a10825a00
Enable brainpool curves for TLS1.3
|
6 years ago |
 Pauli
|
e07102220a
tls/ccm8: reduce the cipher strength for CCM8 ciphers to 64 bits
|
3 years ago |
|
Pauli
|
56ffcce492
doc: document the change to the security level of CCM8 cipher suites
|
3 years ago |
|
Pauli
|
1a473d1cc6
tls: reduce the strength of CCM_8 ciphers due to their short IV.
|
3 years ago |
|
slontis
|
c3b5fa4ab7
Change TLS RC4 cipher strength check to be data driven.
|
3 years ago |
|
Pauli
|
0f8815aace
ssl: add zero strenght arguments to BN and RAND RNG calls
|
3 years ago |
 Benjamin Kaduk
|
aa6bd216dd
Promote SSL_get_negotiated_group() for non-TLSv1.3
|
3 years ago |
|
Tomas Mraz
|
e2e20129a9
OBJ_nid2sn(NID_sha256) is completely equivalent to OSSL_DIGEST_NAME_SHA2_256
|
3 years ago |
|
Matt Caswell
|
39a140597d
Ensure buffer/length pairs are always in sync
|
3 years ago |
 Pauli
|
d38b6ae96f
ssl: support params arguments to init functions
|
3 years ago |
|
Matt Caswell
|
76cb077f81
Deprecate the libssl level SRP APIs
|
3 years ago |
|
Matt Caswell
|
e376242d28
Remove all OPENSSL_NO_XXX from libssl where XXX is a crypto alg
|
3 years ago |
|
Matt Caswell
|
462f4f4bc0
Remove OPENSSL_NO_EC guards from libssl
|
3 years ago |
|
Matt Caswell
|
3de751e7f0
Remove compile time guard checking from ssl3_get_req_cert_type
|
3 years ago |
|
Matt Caswell
|
5b64ce89b0
Remove OPENSSL_NO_DH guards from libssl
|
3 years ago |
|
Matt Caswell
|
08cea586c9
Remove some TODO(OpenSSL1.2) references
|
3 years ago |
 Richard Levitte
|
4333b89f50
Update copyright year
|
3 years ago |
|
Tomas Mraz
|
0c8e98e615
Avoid using OSSL_PKEY_PARAM_GROUP_NAME when the key might be legacy
|
3 years ago |
|
Shane Lontis
|
5b5eea4b60
Deprecate EC_KEY + Update ec apps to use EVP_PKEY
|
4 years ago |
 Michael Baentsch
|
becbacd705
Adding TLS group name retrieval
|
3 years ago |
 Richard Levitte
|
3a1ee3c199
Drop OPENSSL_NO_RSA everywhere
|
3 years ago |
