 Matt Caswell
|
de9e884b2f
Tolerate encrypted or plaintext alerts
|
6 years ago |
 Andy Polyakov
|
9ef9088c15
ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.
|
6 years ago |
|
Matt Caswell
|
d8434cf856
Validate legacy_version
|
6 years ago |
|
Matt Caswell
|
d162340d36
Fix no-psk
|
6 years ago |
|
Matt Caswell
|
baa45c3e74
As a server don't select TLSv1.3 if we're not capable of it
|
6 years ago |
|
Matt Caswell
|
4fd12788eb
Use ssl_version_supported() when choosing server version
|
6 years ago |
|
Matt Caswell
|
4cb004573a
Remove TLSv1.3 tickets from the client cache as we use them
|
6 years ago |
|
Matt Caswell
|
73cc84a132
Suport TLSv1.3 draft 28
|
6 years ago |
|
Matt Caswell
|
c0638adeec
Fix ticket callbacks in TLSv1.3
|
6 years ago |
|
Matt Caswell
|
f7506416b1
Keep the DTLS timer running after the end of the handshake if appropriate
|
6 years ago |
|
Matt Caswell
|
447cc0ad73
In a reneg use the same client_version we used last time
|
6 years ago |
|
Matt Caswell
|
22eb2d1c80
Remove some logically dead code
|
6 years ago |
|
Matt Caswell
|
4ce787b97a
Make sure SSL_in_init() returns 0 at SSL_CB_HANDSHAKE_DONE
|
6 years ago |
|
Matt Caswell
|
c2c1d8a495
Call the info callback on all handshake done events
|
6 years ago |
 Rich Salz
|
c6d38183d6
Rewrite the X509->alert mapping code
|
6 years ago |
|
Matt Caswell
|
424afe931e
Don't wait for dry at the end of a handshake
|
6 years ago |
|
Matt Caswell
|
16ff13427f
Only update the server session cache when the session is ready
|
6 years ago |
|
Matt Caswell
|
5d67110173
Don't calculate the Finished MAC twice
|
6 years ago |
 Todd Short
|
9d75dce3e1
Add TLSv1.3 post-handshake authentication (PHA)
|
7 years ago |
|
Matt Caswell
|
3faa07b582
Move decisions about whether to accept reneg into the state machine
|
6 years ago |
|
Matt Caswell
|
e93597193d
Don't send unexpected_message if we receive CCS while stateless
|
6 years ago |
|
Matt Caswell
|
43054d3d73
Add support for sending TLSv1.3 cookies
|
7 years ago |
|
Matt Caswell
|
2a8db71713
Don't flush the ClientHello if we're going to send early data
|
7 years ago |
|
Matt Caswell
|
fc7129dc37
Update state machine to send CCS based on whether we did an HRR
|
7 years ago |
|
Matt Caswell
|
6f40214f68
Fix an HRR bug
|
7 years ago |
|
Matt Caswell
|
597c51bc98
Merge HRR into ServerHello
|
7 years ago |
|
Matt Caswell
|
88050dd196
Update ServerHello to new draft-22 format
|
7 years ago |
|
Matt Caswell
|
29bfd5b79a
Add some more cleanups
|
7 years ago |
|
Matt Caswell
|
d4d2f3a4c1
Convert more functions in ssl/statem/statem.c to use SSLfatal()
|
7 years ago |
|
Matt Caswell
|
a2c2e00050
Convert remaining functions in statem_clnt.c to use SSLfatal()
|
7 years ago |
