 Matt Caswell
|
079ef6bd53
Buffer a ClientHello with a cookie received via DTLSv1_listen
|
6 years ago |
|
Matt Caswell
|
de9e884b2f
Tolerate encrypted or plaintext alerts
|
6 years ago |
|
Matt Caswell
|
4e8548e80e
Introduce the recv_max_early_data setting
|
6 years ago |
|
Matt Caswell
|
66fab92316
Mark DTLS records as read when we have finished with them
|
6 years ago |
 Kurt Roeckx
|
16cfc2c90d
Don't use a ssl specific DRBG anymore
|
6 years ago |
 Bernd Edlinger
|
a080c3e816
Fix a memory leak in tls1_mac
|
6 years ago |
|
Bernd Edlinger
|
302d1697fe
Fix a memory leak in n_ssl3_mac
|
6 years ago |
|
Matt Caswell
|
3295d24238
Use the TLSv1.3 record header as AAD
|
6 years ago |
 Rich Salz
|
77376c0507
Remove OSSLzu, and fix the one place that used it.
|
6 years ago |
 Richard Levitte
|
48e5119a6b
Copyright update of more files that have changed this year
|
6 years ago |
|
Matt Caswell
|
08455bc9b0
Tolerate DTLS alerts with an incorrect version number
|
6 years ago |
|
Matt Caswell
|
fc7129dc37
Update state machine to send CCS based on whether we did an HRR
|
7 years ago |
|
Matt Caswell
|
fdd9236747
Drop CCS messages received in the TLSv1.3 handshake
|
7 years ago |
|
Matt Caswell
|
921d84a0ad
Convert the remaining functions in the record layer to use SSLfatal()
|
7 years ago |
|
Matt Caswell
|
c285338293
More record layer conversions to use SSLfatal()
|
7 years ago |
|
Matt Caswell
|
196f2cbb78
Update ssl3_get_record() to use SSLfatal()
|
7 years ago |
 FdaSilvaYY
|
cf72c75792
Implement Maximum Fragment Length TLS extension.
|
7 years ago |
 KaoruToda
|
26a7d938c9
Remove parentheses of return.
|
7 years ago |
|
Matt Caswell
|
beb30941d6
Tweak the comment regarding record version check with respect to TLSv1.3
|
7 years ago |
|
Matt Caswell
|
a2b97bdf3d
Don't do version neg on an HRR
|
7 years ago |
|
KaoruToda
|
208fb891e3
Since return is inconsistent, I removed unnecessary parentheses and
|
7 years ago |
|
Matt Caswell
|
add8d0e9e0
Enable the ability to use an external PSK for sending early_data
|
7 years ago |
|
Rich Salz
|
ae3947de09
Add a DRBG to each SSL object
|
7 years ago |
|
Matt Caswell
|
67dc995eaf
Move ossl_assert
|
7 years ago |
|
Matt Caswell
|
b77f3ed171
Convert existing usage of assert() to ossl_assert() in libssl
|
7 years ago |
|
Matt Caswell
|
380a522f68
Replace instances of OPENSSL_assert() with soft asserts in libssl
|
7 years ago |
|
Matt Caswell
|
aabe3a3591
Fix return code in tls1_mac
|
7 years ago |
|
Matt Caswell
|
fb34a0f4e0
Try to be more consistent about the alerts we send
|
7 years ago |
|
Matt Caswell
|
9010b7bc6e
Add some extra comments following alert changes
|
7 years ago |
|
Matt Caswell
|
fc4c15faa4
TLSv1.3 alert and handshake messages can never be 0 length
|
7 years ago |
