aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/statem
Commit message (Expand)AuthorAgeFilesLines
* Update copyright yearMatt Caswell2021-02-184-4/+4
* Implement EVP_PKEY_param_check_quick() and use it in libsslMatt Caswell2021-02-151-1/+7
* Deprecate the libssl level SRP APIsMatt Caswell2021-02-122-2/+2
* Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk2021-02-091-1/+0
* Simplify the EVP_PKEY_XXX_fromdata_XX methods.Shane Lontis2021-02-081-2/+2
* Remove OPENSSL_NO_EC guards from libsslMatt Caswell2021-02-058-64/+2
* Make supported_groups code independent of EC and DHMatt Caswell2021-02-052-12/+20
* Ensure default supported groups works even with no-ec and no-dhMatt Caswell2021-02-053-10/+0
* Remove OPENSSL_NO_DH guards from libsslMatt Caswell2021-02-052-10/+3
* Update copyright yearRichard Levitte2021-01-286-6/+6
* TLS client: allow cert verify callback return -1 for SSL_ERROR_WANT_RETRY_VERIFYDr. David von Oheimb2021-01-262-30/+43
* Update SERVER_HELLO_MAX_LENGTHMichael Baentsch2021-01-181-1/+4
* Clean away extraneous library specific FETCH_FAILED reason codesRichard Levitte2021-01-124-10/+19
* Fix for negative return value from `SSL_CTX_sess_accept()`anupamam132021-01-091-1/+2
* Drop OPENSSL_NO_RSA everywhereRichard Levitte2020-12-202-13/+0
* Modify is_tls13_capable() to take account of the servername cbMatt Caswell2020-12-091-2/+13
* TLS: Use EVP_PKEY_get_group_name() to get the group nameRichard Levitte2020-12-081-3/+1
* tag unused function arguments as ossl_unusedPauli2020-12-034-9/+15
* Update copyright yearMatt Caswell2020-11-263-3/+3
* Deprecate RSA harderRichard Levitte2020-11-183-1/+4
* Only disabled what we need to in a no-dh buildMatt Caswell2020-11-181-5/+1
* Remove DH usage from tls_process_cke_dheMatt Caswell2020-11-181-12/+1
* Remove DH usage in tls_construct_server_key_exchange()Matt Caswell2020-11-181-18/+22
* Avoid the use of a DH object in tls_construct_cke_dhe()Matt Caswell2020-11-181-21/+27
* Deprecate SSL_CTRL_SET_TMP_DH and other related ctrlsMatt Caswell2020-11-181-2/+3
* Convert TLS ServerKeyExchange processing to use an EVP_PKEYMatt Caswell2020-11-181-39/+33
* Convert TLS auto DH parameters to use EVP_PKEYMatt Caswell2020-11-181-5/+2
* SSL: refactor all SSLfatal() callsRichard Levitte2020-11-119-1627/+761
* SSL: refactor ossl_statem_fatal() and SSLfatal()Richard Levitte2020-11-112-13/+16
* Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() callRichard Levitte2020-11-114-10/+9
* Adjust error reason for ssl_get_min_max_version() failureBenjamin Kaduk2020-11-021-2/+2
* Ensure we raise SSLfatal on errorMatt Caswell2020-10-261-1/+1
* Rename EVP_PKEY_set1_tls_encodedpoint to EVP_PKEY_set1_encoded_public_keyMatt Caswell2020-10-204-14/+14
* Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callbackMatt Caswell2020-10-161-1/+1
* Concentrate deprecated libssl API usage in one fileMatt Caswell2020-10-161-6/+1
* Update copyright yearMatt Caswell2020-10-151-1/+1
* [ssl] Support ssl_encapsulate on server sideNicola Tuveri2020-10-141-25/+81
* [ssl] Support ssl_decapsulate on client sideNicola Tuveri2020-10-141-18/+37
* Run the withlibctx.pl scriptMatt Caswell2020-10-015-42/+32
* Disallow certs with explicit curve in verification chainTomas Mraz2020-09-171-0/+1
* DTLS: free allocated memory on error pathsPauli2020-09-161-2/+6
* Fix safestack issues in ocsp.hMatt Caswell2020-09-132-4/+0
* Fix safestack issues in x509.hMatt Caswell2020-09-135-10/+0
* Fix safestack issues in ssl.hMatt Caswell2020-09-135-8/+0
* also zero pad DHE public key in ClientKeyExchange message for interopFelix Monninger2020-09-011-5/+9
* Check whether we have MD5-SHA1 and whether we need itMatt Caswell2020-08-291-6/+49
* Improve some error messages if a digest is not availableMatt Caswell2020-08-291-1/+1
* Ensure libssl creates libctx aware MAC keysMatt Caswell2020-08-292-10/+14
* Add EVP signature with libctx methods.Shane Lontis2020-08-095-18/+24
* Add X509 related libctx changes.Shane Lontis2020-07-242-2/+16