aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
Commit message (Expand)AuthorAgeFilesLines
* revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 i...Dr. Stephen Henson2012-12-101-1/+5
* allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY modeDr. Stephen Henson2012-12-091-5/+1
* Use default point formats extension for server side as well as clientDr. Stephen Henson2012-11-261-44/+38
* reject zero length point format list or supported curves extensionsDr. Stephen Henson2012-11-221-2/+4
* fix typo and warningDr. Stephen Henson2012-11-191-3/+3
* new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for so...Dr. Stephen Henson2012-11-081-0/+4
* Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson2012-09-111-0/+12
* Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie2012-09-111-36/+59
* store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson2012-09-071-0/+5
* Add compilation flag to disable certain protocol checks and allow use ofDr. Stephen Henson2012-08-291-0/+43
* Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson2012-08-151-27/+245
* Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson2012-07-271-21/+194
* Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson2012-07-241-0/+39
* check EC tmp key matches preferencesDr. Stephen Henson2012-07-241-0/+20
* typoDr. Stephen Henson2012-07-241-1/+1
* stop warningDr. Stephen Henson2012-07-191-1/+1
* New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson2012-07-181-16/+92
* no need to check s->server as default_nid is never used for TLS 1.2 client au...Dr. Stephen Henson2012-07-031-1/+1
* Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson2012-07-031-13/+38
* Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson2012-06-291-0/+5
* Function tls1_check_ec_server_key is now redundant as we makeDr. Stephen Henson2012-06-281-8/+0
* Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson2012-06-281-19/+182
* don't use pseudo digests for default values of keysDr. Stephen Henson2012-06-271-2/+2
* Reorganise supported signature algorithm extension processing.Dr. Stephen Henson2012-06-251-106/+231
* Add support for application defined signature algorithms for use withDr. Stephen Henson2012-06-221-18/+147
* Fix memory leak.Ben Laurie2012-06-111-0/+2
* Parse authz correctly.Ben Laurie2012-06-061-0/+4
* Version skew reduction: trivia (I hope).Ben Laurie2012-06-031-2/+2
* RFC 5878 support.Ben Laurie2012-05-301-3/+202
* Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson2012-04-241-3/+24
* correct error codesDr. Stephen Henson2012-04-181-2/+2
* Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson2012-04-061-2/+19
* Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson2012-04-051-51/+33
* Tidy up EC parameter check code: instead of accessing internal structuresDr. Stephen Henson2012-04-041-31/+153
* Initial revision of ECC extension handling.Dr. Stephen Henson2012-03-281-98/+254
* use client version when deciding whether to send supported signature algorith...Dr. Stephen Henson2012-03-211-1/+1
* oops, revert unrelated patchesDr. Stephen Henson2012-03-141-18/+12
* update FAQ, NEWSDr. Stephen Henson2012-03-141-12/+18
* New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson2012-03-061-23/+51
* PR: 2739Dr. Stephen Henson2012-02-271-1/+4
* PR: 2704Dr. Stephen Henson2012-02-101-18/+34
* return error if md is NULLDr. Stephen Henson2012-01-221-0/+2
* Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>Dr. Stephen Henson2012-01-051-0/+5
* Submitted by: Adam Langley <agl@chromium.org>Dr. Stephen Henson2012-01-041-0/+6
* only send heartbeat extension from server if client sent oneDr. Stephen Henson2012-01-031-11/+14
* PR: 2658Dr. Stephen Henson2011-12-311-0/+211
* fix error discrepancyDr. Stephen Henson2011-12-071-1/+1
* Fix NPN implementation for renegotiation.Bodo Möller2011-11-241-1/+10
* Add TLS exporter.Ben Laurie2011-11-151-0/+1
* Add DTLS-SRTP.Ben Laurie2011-11-151-0/+53