 Matt Caswell
|
5627f9f217
Don't detect a downgrade where the server has a protocol version hole
|
6 år sedan |
|
Matt Caswell
|
b5b993b229
Use the same min-max version range on the client consistently
|
6 år sedan |
|
Matt Caswell
|
9f22c52723
Turn on TLSv1.3 downgrade protection by default
|
6 år sedan |
|
Matt Caswell
|
35e742ecac
Update code for the final RFC version of TLSv1.3 (RFC8446)
|
6 år sedan |
 Dmitry Yakovlev
|
572fa0249d
Move SSL_DEBUG md fprintf after assignment
|
6 år sedan |
|
Matt Caswell
|
5df2206048
Improve fallback protection
|
6 år sedan |
|
Matt Caswell
|
de9e884b2f
Tolerate encrypted or plaintext alerts
|
6 år sedan |
 Andy Polyakov
|
9ef9088c15
ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.
|
6 år sedan |
|
Matt Caswell
|
d8434cf856
Validate legacy_version
|
6 år sedan |
|
Matt Caswell
|
d162340d36
Fix no-psk
|
6 år sedan |
|
Matt Caswell
|
baa45c3e74
As a server don't select TLSv1.3 if we're not capable of it
|
6 år sedan |
|
Matt Caswell
|
4fd12788eb
Use ssl_version_supported() when choosing server version
|
6 år sedan |
|
Matt Caswell
|
4cb004573a
Remove TLSv1.3 tickets from the client cache as we use them
|
6 år sedan |
|
Matt Caswell
|
73cc84a132
Suport TLSv1.3 draft 28
|
6 år sedan |
|
Matt Caswell
|
c0638adeec
Fix ticket callbacks in TLSv1.3
|
6 år sedan |
|
Matt Caswell
|
f7506416b1
Keep the DTLS timer running after the end of the handshake if appropriate
|
6 år sedan |
|
Matt Caswell
|
447cc0ad73
In a reneg use the same client_version we used last time
|
6 år sedan |
|
Matt Caswell
|
22eb2d1c80
Remove some logically dead code
|
6 år sedan |
|
Matt Caswell
|
4ce787b97a
Make sure SSL_in_init() returns 0 at SSL_CB_HANDSHAKE_DONE
|
6 år sedan |
|
Matt Caswell
|
c2c1d8a495
Call the info callback on all handshake done events
|
6 år sedan |
 Rich Salz
|
c6d38183d6
Rewrite the X509->alert mapping code
|
6 år sedan |
|
Matt Caswell
|
424afe931e
Don't wait for dry at the end of a handshake
|
6 år sedan |
|
Matt Caswell
|
16ff13427f
Only update the server session cache when the session is ready
|
6 år sedan |
|
Matt Caswell
|
5d67110173
Don't calculate the Finished MAC twice
|
6 år sedan |
 Todd Short
|
9d75dce3e1
Add TLSv1.3 post-handshake authentication (PHA)
|
7 år sedan |
|
Matt Caswell
|
3faa07b582
Move decisions about whether to accept reneg into the state machine
|
6 år sedan |
|
Matt Caswell
|
e93597193d
Don't send unexpected_message if we receive CCS while stateless
|
6 år sedan |
|
Matt Caswell
|
43054d3d73
Add support for sending TLSv1.3 cookies
|
7 år sedan |
|
Matt Caswell
|
2a8db71713
Don't flush the ClientHello if we're going to send early data
|
7 år sedan |
|
Matt Caswell
|
fc7129dc37
Update state machine to send CCS based on whether we did an HRR
|
7 år sedan |
