 Matt Caswell
|
5d263fb78b
Make the anti-replay feature optional
|
6 years ago |
|
Matt Caswell
|
6cc0b3c217
Respect SSL_OP_NO_TICKET in TLSv1.3
|
6 years ago |
 Kurt Roeckx
|
693cf80c6f
Enable SSL_MODE_AUTO_RETRY by default
|
6 years ago |
|
Matt Caswell
|
ee94ec2ef8
Don't cache stateless tickets in TLSv1.3
|
6 years ago |
|
Matt Caswell
|
36ff232cf2
Change the default number of NewSessionTickets we send to 2
|
6 years ago |
|
Matt Caswell
|
9d0a8bb71e
Enable the ability to set the number of TLSv1.3 session tickets sent
|
6 years ago |
|
Matt Caswell
|
5fe3715707
Flush server side unauthenticated writes
|
6 years ago |
|
Matt Caswell
|
a216df599a
Fix SSL_get_shared_ciphers()
|
6 years ago |
 Benjamin Kaduk
|
c4fa1f7fc0
Fix regression with session cache use by clients
|
6 years ago |
|
Matt Caswell
|
bd7775e14a
Fix assertion failure in SSL_set_bio()
|
6 years ago |
|
Matt Caswell
|
a53b5be6a0
Fix configuration of TLSv1.3 ciphersuites
|
6 years ago |
 Rich Salz
|
cdb10bae3f
Set error code on alloc failures
|
6 years ago |
|
Kurt Roeckx
|
4cffafe967
Use the private RNG for data that is not public
|
7 years ago |
|
Rich Salz
|
e6e9170d6e
Allow NULL for some _free routines.
|
6 years ago |
|
Matt Caswell
|
320a81277e
Remove some code for a contributor that we cannot find
|
6 years ago |
|
Benjamin Kaduk
|
d316cdcf6d
Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEER
|
6 years ago |
 Todd Short
|
4bfb96f2ad
Place ticket keys into secure memory
|
6 years ago |
 Tomas Mraz
|
8a5ed9dce8
Apply system_default configuration on SSL_CTX_new().
|
6 years ago |
|
Kurt Roeckx
|
16cfc2c90d
Don't use a ssl specific DRBG anymore
|
6 years ago |
 Dr. Matthias St. Pierre
|
31393fd906
RAND_DRBG: add a function for setting the default DRBG type and flags
|
6 years ago |
|
Dr. Matthias St. Pierre
|
6decf9436f
Publish the RAND_DRBG API
|
6 years ago |
|
Matt Caswell
|
fa25763b55
Put the default set of TLSv1.3 ciphersuites in a header file
|
6 years ago |
|
Matt Caswell
|
f865b08143
Split configuration of TLSv1.3 ciphers from older ciphers
|
6 years ago |
|
Todd Short
|
df0fed9aab
Session Ticket app data
|
7 years ago |
|
Matt Caswell
|
e440f51395
Give more information in the SSL_stateless return code
|
6 years ago |
|
Matt Caswell
|
0e1d6ecf37
Add X448/Ed448 support to libssl
|
6 years ago |
|
Benjamin Kaduk
|
c39e4048b5
Do not set a nonzero default max_early_data
|
6 years ago |
 Tatsuhiro Tsujikawa
|
b38ede8043
Export keying material using early exporter master secret
|
6 years ago |
|
Dr. Matthias St. Pierre
|
8164d91d18
DRBG: make the derivation function the default for ctr_drbg
|
6 years ago |
|
Matt Caswell
|
1d0c08b496
The function ssl_get_min_max_version() can fail
|
6 years ago |
