 Matt Caswell
|
fecb3aae22
Update copyright year
|
2 years ago |
 Pauli
|
acce055778
ssl: better support TSAN operations
|
2 years ago |
 Pauli
|
1e3317278e
ssl: replace ;; with ; as statement separator
|
2 years ago |
 Bernd Edlinger
|
0a10825a00
Enable brainpool curves for TLS1.3
|
6 years ago |
 x2018
|
963eb12dbd
free the Post-Handshake Auth digest when there is an error saving the digest
|
3 years ago |
 Tomas Mraz
|
ed576acdf5
Rename all getters to use get/get0 in name
|
3 years ago |
|
Pauli
|
d38b6ae96f
ssl: support params arguments to init functions
|
3 years ago |
|
Tomas Mraz
|
f378755d62
statem_lib.c: Remove TODOs that are unnecessary
|
3 years ago |
|
Matt Caswell
|
a28d06f3e9
Update copyright year
|
3 years ago |
|
Matt Caswell
|
462f4f4bc0
Remove OPENSSL_NO_EC guards from libssl
|
3 years ago |
|
Matt Caswell
|
ebda646db6
Modify is_tls13_capable() to take account of the servername cb
|
4 years ago |
 Richard Levitte
|
d8975dec0c
TLS: Use EVP_PKEY_get_group_name() to get the group name
|
4 years ago |
 Pauli
|
a7e6a3d8ef
tag unused function arguments as ossl_unused
|
4 years ago |
|
Richard Levitte
|
d7e498ac55
Deprecate RSA harder
|
4 years ago |
|
Richard Levitte
|
c48ffbcca1
SSL: refactor all SSLfatal() calls
|
4 years ago |
|
Richard Levitte
|
6849b73ccc
Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() call
|
4 years ago |
 Benjamin Kaduk
|
467dc32524
Adjust error reason for ssl_get_min_max_version() failure
|
4 years ago |
|
Matt Caswell
|
d8652be06e
Run the withlibctx.pl script
|
4 years ago |
 Tomas Mraz
|
cccf532fef
Disallow certs with explicit curve in verification chain
|
4 years ago |
|
Matt Caswell
|
e6623cfbff
Fix safestack issues in x509.h
|
4 years ago |
|
Matt Caswell
|
6ac1cd10ba
Fix safestack issues in ssl.h
|
4 years ago |
|
Matt Caswell
|
8e32ea633f
Check whether we have MD5-SHA1 and whether we need it
|
4 years ago |
 Shane Lontis
|
0ab18e7924
Add EVP signature with libctx methods.
|
4 years ago |
 Viktor Dukhovni
|
7717459892
Avoid errors with a priori inapplicable protocol bounds
|
4 years ago |
 Todd Short
|
8c2bfd2512
Add SSL_get[01]_peer_certificate()
|
5 years ago |
 Nikolay Morozov
|
90fc2c26df
SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementation
|
4 years ago |
 Rich Salz
|
852c2ed260
In OpenSSL builds, declare STACK for datatypes ...
|
4 years ago |
|
Matt Caswell
|
33388b44b6
Update copyright year
|
4 years ago |
|
Matt Caswell
|
a959b4fa97
Use X509_STORE_CTX_new_with_libctx() in libssl
|
4 years ago |
|
Richard Levitte
|
c2041da8c1
EVP & TLS: Add necessary EC_KEY data extraction functions, and use them
|
4 years ago |
