Rich Salz
|
56bd17830f
Convert SSL_{CTX}_[gs]et_options to 64
|
3 years ago |
Pauli
|
53d85372ca
ssl: fix problem where MAC IDs were globally cached.
|
3 years ago |
Matt Caswell
|
76cb077f81
Deprecate the libssl level SRP APIs
|
3 years ago |
Benjamin Kaduk
|
3bc0b621a7
Remove unused 'peer_type' from SSL_SESSION
|
3 years ago |
Matt Caswell
|
462f4f4bc0
Remove OPENSSL_NO_EC guards from libssl
|
3 years ago |
Matt Caswell
|
8b1db5d329
Make supported_groups code independent of EC and DH
|
3 years ago |
Matt Caswell
|
ddf8f1ce63
Ensure default supported groups works even with no-ec and no-dh
|
3 years ago |
Matt Caswell
|
5b64ce89b0
Remove OPENSSL_NO_DH guards from libssl
|
3 years ago |
Richard Levitte
|
4333b89f50
Update copyright year
|
3 years ago |
Tomas Mraz
|
0c8e98e615
Avoid using OSSL_PKEY_PARAM_GROUP_NAME when the key might be legacy
|
3 years ago |
Shane Lontis
|
5b5eea4b60
Deprecate EC_KEY + Update ec apps to use EVP_PKEY
|
4 years ago |
Michael Baentsch
|
becbacd705
Adding TLS group name retrieval
|
3 years ago |
Richard Levitte
|
d8975dec0c
TLS: Use EVP_PKEY_get_group_name() to get the group name
|
4 years ago |
Matt Caswell
|
cbb85bda0c
Fix builds that specify both no-dh and no-ec
|
4 years ago |
Matt Caswell
|
a68eee679a
Move some libssl global variables into SSL_CTX
|
4 years ago |
Richard Levitte
|
d7e498ac55
Deprecate RSA harder
|
4 years ago |
Matt Caswell
|
13c453728c
Only disabled what we need to in a no-dh build
|
4 years ago |
Matt Caswell
|
091f6074c5
Convert TLS auto DH parameters to use EVP_PKEY
|
4 years ago |
Matt Caswell
|
301fcb2843
Concentrate deprecated libssl API usage in one file
|
4 years ago |
Dr. Matthias St. Pierre
|
b425001010
Rename OPENSSL_CTX prefix to OSSL_LIB_CTX
|
4 years ago |
Nicola Tuveri
|
8b17fbaf46
[ssl] Support ssl_encapsulate on server side
|
4 years ago |
Nicola Tuveri
|
a011b5861b
[ssl] Support ssl_decapsulate on client side
|
4 years ago |
Nicola Tuveri
|
c1a74f59ac
Define OSSL_CAPABILITY_TLS_GROUP_IS_KEM
|
4 years ago |
Rutger Hendriks
|
e57bbf9e1a
Increase PSK_MAX_PSK_LEN to 512
|
4 years ago |
Matt Caswell
|
e08f86ddb1
Make ssl3_cbc_digest_record() use the real data_size
|
4 years ago |
Matt Caswell
|
3fddbb264e
Add an HMAC implementation that is TLS aware
|
4 years ago |
John Baldwin
|
c7b46b549d
Move KTLS inline functions only used by libssl into ssl/ktls.c.
|
4 years ago |
Matt Caswell
|
b558817823
Convert SSLv3 handling to use provider side CBC/MAC removal
|
4 years ago |
Matt Caswell
|
ec27e619e8
Move MAC removal responsibility to the various protocol "enc" functions
|
4 years ago |
Matt Caswell
|
260009d877
Update the various SSL group getting and setting functions
|
4 years ago |