aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/ssl_conf.c
Commit message (Expand)AuthorAgeFilesLines
* Only enable KTLS if it is explicitly configuredMatt Caswell2021-04-121-1/+2
* Update copyright yearMatt Caswell2021-02-181-1/+1
* Rename OSSL_ENCODER_CTX_new_by_EVP_PKEY and OSSL_DECODER_CTX_new_by_EVP_PKEYTomas Mraz2021-02-171-3/+3
* Remove OPENSSL_NO_EC guards from libsslMatt Caswell2021-02-051-10/+5
* Add the nist group names as aliases for the normal TLS group namesMatt Caswell2021-02-051-1/+0
* Implement a replacement for SSL_set_tmp_dh()Matt Caswell2020-11-181-16/+32
* Disable the DHParameters config option in a no-deprecated buildMatt Caswell2020-11-181-2/+3
* SSL: refactor all SSLfatal() callsRichard Levitte2020-11-111-8/+5
* Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() callRichard Levitte2020-11-111-3/+3
* Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre2020-10-151-1/+1
* Run the withlibctx.pl scriptMatt Caswell2020-10-011-4/+3
* Fix safestack issues in x509.hMatt Caswell2020-09-131-2/+0
* Add X509 related libctx changes.Shane Lontis2020-07-241-5/+17
* Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni2020-07-211-0/+7
* SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov2020-05-071-2/+3
* In OpenSSL builds, declare STACK for datatypes ...Rich Salz2020-04-241-0/+2
* X509_LOOKUP_store: new X509_LOOKUP_METHOD that works by OSSL_STORE URIRichard Levitte2019-11-031-6/+48
* Explicitly test against NULL; do not use !p or similarRich Salz2019-10-091-5/+6
* Reorganize local header filesDr. Matthias St. Pierre2019-09-281-1/+1
* Add option to disable Extended Master SecretTodd Short2019-02-151-1/+2
* Following the license change, modify the boilerplates in ssl/Richard Levitte2018-12-061-1/+1
* Fix usage of deprecated SSL_set_tmp_ecdh()Antoine Salon2018-11-301-7/+3
* Add the ability to configure anti-replay via SSL_CONFMatt Caswell2018-07-021-2/+9
* Allow configuation of the number of TLSv1.3 session tickets via SSL_CONFMatt Caswell2018-05-171-1/+17
* Improve backwards compat with 1.0.2 for ECDHParametersMatt Caswell2018-04-241-2/+3
* Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell2018-03-141-0/+13
* Update copyright yearMatt Caswell2018-02-131-1/+1
* Add TLSv1.3 post-handshake authentication (PHA)Todd Short2018-02-011-1/+6
* Send a CCS after ServerHello in TLSv1.3 if using middlebox compat modeMatt Caswell2017-12-141-1/+1
* Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell2017-12-141-1/+5
* Use ChaCha only if prioritized by clntTodd Short2017-11-301-1/+5
* e_os.h removal from other headers and source files.Pauli2017-08-301-1/+2
* Do not allow non-dhe kex_modes by defaultMatt Caswell2017-07-071-0/+4
* Ignore -named_curve auto value to improve backwards compatibilityTomas Mraz2017-06-081-0/+8
* Fix #2400 Add NO_RENEGOTIATE optionTodd Short2017-06-061-0/+4
* TLS1.3 PaddingTodd Short2017-05-021-1/+21
* SSL_CONF support for certificate_authoritiesDr. Stephen Henson2017-04-031-4/+18
* Test mac-then-encryptEmilia Kasper2016-11-281-0/+1
* Rename the Elliptic Curves extension to supported_groupsMatt Caswell2016-11-101-3/+10
* Add the SSL_METHOD for TLSv1.3 and all other base changes requiredMatt Caswell2016-11-021-0/+4
* Indent ssl/Emilia Kasper2016-08-181-10/+7
* Spelling... and more spellingFdaSilvaYY2016-06-221-1/+1
* Copyright consolidation 01/10Rich Salz2016-05-171-53/+5
* New SSL test frameworkEmilia Kasper2016-04-051-2/+2
* Remove #error from include files.Rich Salz2016-03-201-3/+1
* Remove outdated DEBUG flags.Rich Salz2016-02-181-6/+0
* Move to REF_DEBUG, for consistency.Rich Salz2016-02-111-3/+0
* Restore -no_comp switch for backwards compatible behaviourViktor Dukhovni2016-02-051-1/+3
* RT3234: disable compressionEmilia Kasper2016-02-031-2/+2
* Allow disabling the min and max versionKurt Roeckx2016-01-101-0/+1