 Matt Caswell
|
defe51c178
Update copyright year
|
2 anni fa |
 x2018
|
4204cd6429
free the Post-Handshake Auth digest when there is an error saving the digest
|
3 anni fa |
|
Matt Caswell
|
e0b139b845
Modify is_tls13_capable() to take account of the servername cb
|
4 anni fa |
 Tomas Mraz
|
fdcddd9357
Disallow certs with explicit curve in verification chain
|
4 anni fa |
 Viktor Dukhovni
|
c6c9f886ae
Avoid errors with a priori inapplicable protocol bounds
|
4 anni fa |
|
Matt Caswell
|
e7ff223a20
Update copyright year
|
4 anni fa |
 Benjamin Kaduk
|
910c8ffaf8
Don't write to the session when computing TLS 1.3 keys
|
4 anni fa |
 Artiom Vaskov
|
d8e8ed0220
ssl/statem/statem_lib.c: make servercontext/clientcontext arrays of chars instead of char pointers to fix EBCDIC builds.
|
5 anni fa |
 NaveenShivanna86
|
a80de34b27
'init_buf' memory can be freed when DTLS is used over SCTP (not over UDP).
|
5 anni fa |
 Dr. Matthias St. Pierre
|
b5acbf9148
Reorganize local header files
|
5 anni fa |
 opensslonzos-github
|
cd5e2b0a68
Add missing EBCDIC strings
|
5 anni fa |
|
Matt Caswell
|
6c2f347c78
Defer sending a KeyUpdate until after pending writes are complete
|
5 anni fa |
|
Matt Caswell
|
72a7a7021f
Update copyright year
|
5 anni fa |
|
Matt Caswell
|
f6d64b5142
Don't restrict the number of KeyUpdate messages we can process
|
5 anni fa |
|
Matt Caswell
|
37857e9b52
Don't signal SSL_CB_HANDSHAKE_START for TLSv1.3 post-handshake messages
|
5 anni fa |
|
Matt Caswell
|
8e3df4012a
Revert "Keep the DTLS timer running after the end of the handshake if appropriate"
|
5 anni fa |
 Paul Yang
|
9465e71639
Fix access zero memory if SSL_DEBUG is enabled
|
6 anni fa |
|
Matt Caswell
|
eaa32f3679
Fix no-ec and no-tls1_2
|
6 anni fa |
|
Matt Caswell
|
b4970e8bf5
Separate ca_names handling for client and server
|
6 anni fa |
|
Matt Caswell
|
6f54ae7a90
Don't negotiate TLSv1.3 if our EC cert isn't TLSv1.3 capable
|
6 anni fa |
|
Matt Caswell
|
a2388b50af
Don't call the client_cert_cb immediately in TLSv1.3
|
6 anni fa |
 Richard Levitte
|
7ccfce81db
ssl/statem: Don't compare size_t with less than zero
|
6 anni fa |
|
Matt Caswell
|
cd3b53b8f8
Ensure certificate callbacks work correctly in TLSv1.3
|
6 anni fa |
|
Matt Caswell
|
1bf4cb0fe3
Process KeyUpdate and NewSessionTicket messages after a close_notify
|
6 anni fa |
|
Matt Caswell
|
5627f9f217
Don't detect a downgrade where the server has a protocol version hole
|
6 anni fa |
|
Matt Caswell
|
b5b993b229
Use the same min-max version range on the client consistently
|
6 anni fa |
|
Matt Caswell
|
9f22c52723
Turn on TLSv1.3 downgrade protection by default
|
6 anni fa |
|
Matt Caswell
|
35e742ecac
Update code for the final RFC version of TLSv1.3 (RFC8446)
|
6 anni fa |
 Dmitry Yakovlev
|
572fa0249d
Move SSL_DEBUG md fprintf after assignment
|
6 anni fa |
|
Matt Caswell
|
5df2206048
Improve fallback protection
|
6 anni fa |
