 Todd Short
|
8c2bfd2512
Add SSL_get[01]_peer_certificate()
|
5 years ago |
 Nikolay Morozov
|
90fc2c26df
SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementation
|
4 years ago |
 Rich Salz
|
852c2ed260
In OpenSSL builds, declare STACK for datatypes ...
|
4 years ago |
 Matt Caswell
|
33388b44b6
Update copyright year
|
4 years ago |
|
Matt Caswell
|
a959b4fa97
Use X509_STORE_CTX_new_with_libctx() in libssl
|
4 years ago |
 Richard Levitte
|
c2041da8c1
EVP & TLS: Add necessary EC_KEY data extraction functions, and use them
|
4 years ago |
|
Matt Caswell
|
fc69f32cd6
Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libssl
|
4 years ago |
 Benjamin Kaduk
|
d74014c4b8
Don't write to the session when computing TLS 1.3 keys
|
4 years ago |
|
Matt Caswell
|
c8f6c28a93
Explicitly fetch ciphers and digests in libssl
|
4 years ago |
|
Matt Caswell
|
bddbfae1cd
libssl: Eliminate as much use of EVP_PKEY_size() as possible
|
4 years ago |
 Artiom Vaskov
|
99435164ac
ssl/statem/statem_lib.c: make servercontext/clientcontext arrays of chars instead of char pointers to fix EBCDIC builds.
|
5 years ago |
 NaveenShivanna86
|
e7c27a6c37
'init_buf' memory can be freed when DTLS is used over SCTP (not over UDP).
|
5 years ago |
 Dr. Matthias St. Pierre
|
706457b7bd
Reorganize local header files
|
5 years ago |
 opensslonzos-github
|
48102247ff
Add missing EBCDIC strings
|
5 years ago |
|
Matt Caswell
|
dbc6268f68
Allow TLSv1.3 in a no-ec build
|
5 years ago |
 Shane Lontis
|
83b4a24384
Make EVP_MD_CTX_ctrl() work for legacy use cases (ssl3).
|
5 years ago |
|
Shane Lontis
|
d5e5e2ffaf
Move digests to providers
|
5 years ago |
|
Matt Caswell
|
feb9e31c40
Defer sending a KeyUpdate until after pending writes are complete
|
5 years ago |
|
Todd Short
|
555cbb328e
Collapse ssl3_state_st (s3) into ssl_st
|
6 years ago |
|
Richard Levitte
|
49b26f54f4
Adapt SSL_DEBUG to the new generic trace API
|
6 years ago |
|
Matt Caswell
|
3409a5ff8a
Don't restrict the number of KeyUpdate messages we can process
|
5 years ago |
|
Matt Caswell
|
4af5836b55
Don't signal SSL_CB_HANDSHAKE_START for TLSv1.3 post-handshake messages
|
5 years ago |
|
Matt Caswell
|
bcc1f3e2ba
Revert "Keep the DTLS timer running after the end of the handshake if appropriate"
|
5 years ago |
 Kurt Roeckx
|
5c587fb6b9
Use (D)TLS_MAX_VERSION_INTERNAL internally
|
6 years ago |
|
Richard Levitte
|
2c18d164f5
Following the license change, modify the boilerplates in ssl/
|
6 years ago |
 Paul Yang
|
5a4481f0e0
Fix access zero memory if SSL_DEBUG is enabled
|
6 years ago |
|
Matt Caswell
|
65d2c16cbe
Fix no-ec and no-tls1_2
|
6 years ago |
|
Matt Caswell
|
9873297900
Separate ca_names handling for client and server
|
6 years ago |
|
Matt Caswell
|
de4dc59802
Don't negotiate TLSv1.3 if our EC cert isn't TLSv1.3 capable
|
6 years ago |
|
Matt Caswell
|
e45620140f
Don't call the client_cert_cb immediately in TLSv1.3
|
6 years ago |
