aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/ssl_conf.c
Commit message (Expand)AuthorAgeFilesLines
* replace strstr() with strchr() for single charactersrilysh2024-01-251-1/+1
* Consolidate raising errors in SSL_CONF_cmd()Tomas Mraz2023-12-191-8/+16
* Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the server to prefer non-dhe ...Markus Minichmayr2023-11-241-0/+4
* "foo * bar" should be "foo *bar"Dimitri Papadopoulos2023-09-111-2/+2
* Copyright year updatesMatt Caswell2023-09-071-1/+1
* SSL_conf_cmd: add support for IgnoreUnexpectedEOFSteffen Nurpmeso2023-01-301-0/+1
* Create the SSL object for QUIC-TLSMatt Caswell2023-01-241-1/+1
* Add support for KTLS zerocopy sendfile on LinuxMaxim Mikityanskiy2022-11-241-0/+1
* Add support for compressed certificates (RFC8879)Todd Short2022-10-181-1/+11
* SSL object refactoring using SSL_CONNECTION objectTomas Mraz2022-07-281-16/+37
* Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl configTomas Mraz2022-06-031-1/+2
* The -no_legacy_server_connect option applies to clientTomas Mraz2022-05-271-1/+1
* Actually implement UnsafeLegacyServerConnect as documentedTomas Mraz2022-05-271-0/+2
* Update copyright yearMatt Caswell2022-05-031-1/+1
* str[n]casecmp => OPENSSL_strncasecmpDmitry Belyavskiy2022-04-221-5/+6
* SSL_conf_cmd: Allow DH Parameters at any position.Daniel Fiala2022-04-121-5/+9
* apps: Add option -no_ems to s_client/s_server appsyangyangtiantianlonglong2022-01-281-0/+3
* Disabling Encrypt-then-MAC extension in s_client/s_serverDmitry Belyavskiy2021-06-151-1/+5
* Add SSL_OP_ALLOW_CLIENT_RENEGOTIATIONRich Salz2021-05-171-0/+5
* Slightly reformat ssl.h.inRich Salz2021-05-141-2/+2
* Convert SSL_{CTX}_[gs]et_options to 64Rich Salz2021-05-141-6/+10
* Correct ssl_conf logic for "legacy_server_connect"Benjamin Kaduk2021-05-051-1/+1
* Only enable KTLS if it is explicitly configuredMatt Caswell2021-04-121-1/+2
* Update copyright yearMatt Caswell2021-02-181-1/+1
* Rename OSSL_ENCODER_CTX_new_by_EVP_PKEY and OSSL_DECODER_CTX_new_by_EVP_PKEYTomas Mraz2021-02-171-3/+3
* Remove OPENSSL_NO_EC guards from libsslMatt Caswell2021-02-051-10/+5
* Add the nist group names as aliases for the normal TLS group namesMatt Caswell2021-02-051-1/+0
* Implement a replacement for SSL_set_tmp_dh()Matt Caswell2020-11-181-16/+32
* Disable the DHParameters config option in a no-deprecated buildMatt Caswell2020-11-181-2/+3
* SSL: refactor all SSLfatal() callsRichard Levitte2020-11-111-8/+5
* Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() callRichard Levitte2020-11-111-3/+3
* Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre2020-10-151-1/+1
* Run the withlibctx.pl scriptMatt Caswell2020-10-011-4/+3
* Fix safestack issues in x509.hMatt Caswell2020-09-131-2/+0
* Add X509 related libctx changes.Shane Lontis2020-07-241-5/+17
* Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni2020-07-211-0/+7
* SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov2020-05-071-2/+3
* In OpenSSL builds, declare STACK for datatypes ...Rich Salz2020-04-241-0/+2
* X509_LOOKUP_store: new X509_LOOKUP_METHOD that works by OSSL_STORE URIRichard Levitte2019-11-031-6/+48
* Explicitly test against NULL; do not use !p or similarRich Salz2019-10-091-5/+6
* Reorganize local header filesDr. Matthias St. Pierre2019-09-281-1/+1
* Add option to disable Extended Master SecretTodd Short2019-02-151-1/+2
* Following the license change, modify the boilerplates in ssl/Richard Levitte2018-12-061-1/+1
* Fix usage of deprecated SSL_set_tmp_ecdh()Antoine Salon2018-11-301-7/+3
* Add the ability to configure anti-replay via SSL_CONFMatt Caswell2018-07-021-2/+9
* Allow configuation of the number of TLSv1.3 session tickets via SSL_CONFMatt Caswell2018-05-171-1/+17
* Improve backwards compat with 1.0.2 for ECDHParametersMatt Caswell2018-04-241-2/+3
* Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell2018-03-141-0/+13
* Update copyright yearMatt Caswell2018-02-131-1/+1
* Add TLSv1.3 post-handshake authentication (PHA)Todd Short2018-02-011-1/+6