 Matt Caswell
|
309371d626
Fix EAP-FAST
|
vor 6 Jahren |
 Dmitry Belyavskiy
|
41f10305d8
Send GOST SignatureAlgorithms when TLS 1.2 in use
|
vor 6 Jahren |
|
Dmitry Belyavskiy
|
1f65c0459a
Bugfix: GOST2012 certificates for GOST ciphersuites were broken.
|
vor 6 Jahren |
 Kurt Roeckx
|
5f96a95e25
Set sess to NULL after freeing it.
|
vor 6 Jahren |
|
Matt Caswell
|
61fb59238d
Rework the decrypt ticket callback
|
vor 6 Jahren |
|
Matt Caswell
|
c0638adeec
Fix ticket callbacks in TLSv1.3
|
vor 6 Jahren |
|
Matt Caswell
|
ca50cd911c
Fix the MAX_CURVELIST definition
|
vor 6 Jahren |
|
Matt Caswell
|
7500bc337a
Allow TLSv1.3 EC certs to use compressed points
|
vor 6 Jahren |
 Rich Salz
|
cdb10bae3f
Set error code on alloc failures
|
vor 6 Jahren |
|
Matt Caswell
|
dcf8b01f44
Tolerate a Certificate using a non-supported group on server side
|
vor 6 Jahren |
 Todd Short
|
4bfb96f2ad
Place ticket keys into secure memory
|
vor 6 Jahren |
|
Matt Caswell
|
32305f8850
Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3
|
vor 6 Jahren |
|
Todd Short
|
df0fed9aab
Session Ticket app data
|
vor 7 Jahren |
|
Matt Caswell
|
0e1d6ecf37
Add X448/Ed448 support to libssl
|
vor 6 Jahren |
|
Matt Caswell
|
ee76349525
Sanity check the ticket length before using key name/IV
|
vor 6 Jahren |
|
Matt Caswell
|
1d0c08b496
The function ssl_get_min_max_version() can fail
|
vor 6 Jahren |
 Benjamin Kaduk
|
c1acef9263
Fix uninitialized read in sigalg parsing code
|
vor 6 Jahren |
|
Benjamin Kaduk
|
c589c34e61
Add support for the TLS 1.3 signature_algorithms_cert extension
|
vor 6 Jahren |
|
Benjamin Kaduk
|
fd5e1a8c4a
Propagate TLS 1.3 sigalgs through tls1_set_sigalgs()
|
vor 6 Jahren |
|
Benjamin Kaduk
|
f55e99f7dd
Add TLS 1.3 draft-23 PSS signature algorithms
|
vor 6 Jahren |
 Richard Levitte
|
3c7d0945b6
Update copyright years on all files merged since Jan 1st 2018
|
vor 6 Jahren |
 Noah Robbin
|
bcec0b9488
Use the index that matches the key type (either SSL_PKEY_RSA_PSS_SIGN or SSL_PKEY_RSA).
|
vor 7 Jahren |
|
Noah Robbin
|
0fe3db251a
Use size of server key when selecting signature algorithm.
|
vor 7 Jahren |
|
Matt Caswell
|
f63a17d66d
Convert the state machine code to use SSLfatal()
|
vor 7 Jahren |
 Andy Polyakov
|
3a63c0edab
Resolve warnings in VC-WIN32 build, which allows to add /WX.
|
vor 7 Jahren |
 FdaSilvaYY
|
cf72c75792
Implement Maximum Fragment Length TLS extension.
|
vor 7 Jahren |
 KaoruToda
|
b2555168ec
Various clean-ups
|
vor 7 Jahren |
 Dr. Stephen Henson
|
6447e8184c
Merge tls1_check_curve into tls1_check_group_id
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
f48d826e33
Change curves to groups where relevant
|
vor 7 Jahren |
|
Dr. Stephen Henson
|
ff6d20a67b
Use separate functions for supported and peer groups lists
|
vor 7 Jahren |
