aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
Commit message (Expand)AuthorAgeFilesLines
* Add callbacks supporting generation and retrieval of supplemental data entrie...Scott Deboy2013-09-061-193/+0
* Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling2013-09-051-0/+89
* Make no-ec compilation work.Dr. Stephen Henson2013-08-171-4/+15
* Various custom extension fixes.Trevor Perrin2013-07-311-0/+8
* Support ALPN.Adam Langley2013-07-221-1/+167
* Cosmetic touchups.Trevor2013-06-281-5/+5
* Cleanup of custom extension stuff.Trevor2013-06-181-8/+24
* Add support for arbitrary TLS extensions.Trevor2013-06-121-0/+127
* Make TLS 1.2 ciphers work again.Dr. Stephen Henson2013-04-041-1/+1
* Enable TLS 1.2 ciphers in DTLS 1.2.Dr. Stephen Henson2013-03-281-3/+4
* Enable various DTLS extensions.Dr. Stephen Henson2013-03-261-22/+13
* Use enc_flags when deciding protocol variations.Dr. Stephen Henson2013-03-181-5/+5
* DTLS revision.Dr. Stephen Henson2013-03-181-0/+42
* Add and use a constant-time memcmp.Ben Laurie2013-02-061-1/+1
* Fix warning: lenmax isn't used any more.Dr. Stephen Henson2013-01-241-2/+0
* Remove extraneous brackets (clang doesn't like them).Ben Laurie2013-01-191-1/+1
* Can't check a size_t for < 0.Ben Laurie2013-01-191-1/+3
* Use client version when deciding which cipher suites to disable.Dr. Stephen Henson2012-12-181-1/+1
* revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 i...Dr. Stephen Henson2012-12-101-1/+5
* allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY modeDr. Stephen Henson2012-12-091-5/+1
* Use default point formats extension for server side as well as clientDr. Stephen Henson2012-11-261-44/+38
* reject zero length point format list or supported curves extensionsDr. Stephen Henson2012-11-221-2/+4
* fix typo and warningDr. Stephen Henson2012-11-191-3/+3
* new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for so...Dr. Stephen Henson2012-11-081-0/+4
* Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson2012-09-111-0/+12
* Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie2012-09-111-36/+59
* store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson2012-09-071-0/+5
* Add compilation flag to disable certain protocol checks and allow use ofDr. Stephen Henson2012-08-291-0/+43
* Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson2012-08-151-27/+245
* Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson2012-07-271-21/+194
* Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson2012-07-241-0/+39
* check EC tmp key matches preferencesDr. Stephen Henson2012-07-241-0/+20
* typoDr. Stephen Henson2012-07-241-1/+1
* stop warningDr. Stephen Henson2012-07-191-1/+1
* New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson2012-07-181-16/+92
* no need to check s->server as default_nid is never used for TLS 1.2 client au...Dr. Stephen Henson2012-07-031-1/+1
* Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson2012-07-031-13/+38
* Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson2012-06-291-0/+5
* Function tls1_check_ec_server_key is now redundant as we makeDr. Stephen Henson2012-06-281-8/+0
* Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson2012-06-281-19/+182
* don't use pseudo digests for default values of keysDr. Stephen Henson2012-06-271-2/+2
* Reorganise supported signature algorithm extension processing.Dr. Stephen Henson2012-06-251-106/+231
* Add support for application defined signature algorithms for use withDr. Stephen Henson2012-06-221-18/+147
* Fix memory leak.Ben Laurie2012-06-111-0/+2
* Parse authz correctly.Ben Laurie2012-06-061-0/+4
* Version skew reduction: trivia (I hope).Ben Laurie2012-06-031-2/+2
* RFC 5878 support.Ben Laurie2012-05-301-3/+202
* Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson2012-04-241-3/+24
* correct error codesDr. Stephen Henson2012-04-181-2/+2
* Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson2012-04-061-2/+19