aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Check validity, not just signing for all certificatesDr. Stephen Henson2017-02-211-2/+2
* Set default validity flags.Dr. Stephen Henson2017-02-211-10/+30
* remove md array: it is not used any more.Dr. Stephen Henson2017-02-213-107/+27
* fix spelling of Camellia in commentPauli2017-02-211-2/+2
* Implementation of the ARIA cipher as described in RFC 5794.Pauli2017-02-211-4/+1
* Explicitly disallow DSA for TLS 1.3Dr. Stephen Henson2017-02-171-5/+12
* Updates following review feedbackMatt Caswell2017-02-173-3/+1
* Don't use an enum in the return type for a public API functionMatt Caswell2017-02-172-3/+3
* Fix a shadowed global variable warningMatt Caswell2017-02-172-8/+8
* Updates following review feedbackMatt Caswell2017-02-174-7/+9
* Limit the number of KeyUpdate messages we can processMatt Caswell2017-02-173-0/+13
* Actually update the keys when a KeyUpdate message is sent or receivedMatt Caswell2017-02-176-51/+141
* If we receive an "update_requested" KeyUpdate then respond with a KeyUpdateMatt Caswell2017-02-173-0/+20
* Add the ability for a server to receive a KeyUpdate messageMatt Caswell2017-02-171-1/+17
* Add a SSL_get_key_update_type() functionMatt Caswell2017-02-171-0/+5
* Add the ability for a client to send a KeyUpdate messageMatt Caswell2017-02-172-6/+19
* Add the ability for a client to receive a KeyUpdate messageMatt Caswell2017-02-174-0/+33
* Add SSL_trace() support for KeyUpdate messagesMatt Caswell2017-02-171-1/+17
* Provide a function to send a KeyUpdate messageMatt Caswell2017-02-176-14/+67
* Use tls_choose_sigalg for client auth.Dr. Stephen Henson2017-02-164-66/+19
* Add client side support to tls_choose_sigalg.Dr. Stephen Henson2017-02-161-24/+54
* Remove an OPENSSL_assert() and replace with a soft assert and checkMatt Caswell2017-02-161-2/+3
* Don't change the state of the ETM flags until CCS processingMatt Caswell2017-02-169-23/+36
* Fix warningDr. Stephen Henson2017-02-161-1/+6
* Set current certificate to selected certificate.Dr. Stephen Henson2017-02-151-0/+1
* Rework error handling of custom_ext_meth_add towards strong exception safety.Bernd Edlinger2017-02-151-5/+1
* Skip curve check if sigalg doesn't specify a curve.Dr. Stephen Henson2017-02-151-2/+2
* Use CERT_PKEY pointer instead of indexDr. Stephen Henson2017-02-155-28/+21
* Simplify tls_construct_server_key_exchangeDr. Stephen Henson2017-02-151-72/+58
* Use cert_index and sigalgDr. Stephen Henson2017-02-157-104/+23
* Add sigalg for earlier TLS versionsDr. Stephen Henson2017-02-152-20/+145
* Change tls_choose_sigalg so it can set errors and alerts.Dr. Stephen Henson2017-02-154-7/+6
* add ssl_has_certDr. Stephen Henson2017-02-152-13/+13
* Use TLSEXT_KEYNAME_LENGTH in tls_decrypt_ticket.Bernd Edlinger2017-02-141-2/+2
* Fix no-ec compilationMatt Caswell2017-02-142-1/+8
* Remove a double call to ssl3_send_alert()Matt Caswell2017-02-141-2/+1
* Fix a bogus uninit variable warningMatt Caswell2017-02-141-1/+1
* Add a bytestogroup macroMatt Caswell2017-02-143-3/+6
* Various style fixes following review feedbackMatt Caswell2017-02-143-11/+11
* Add trace support for HelloRetryRequestMatt Caswell2017-02-141-10/+38
* Implement support for resumption with a HelloRetryRequestMatt Caswell2017-02-145-99/+160
* Add client side support for parsing Hello Retry RequestMatt Caswell2017-02-145-52/+199
* Add server side support for creating the Hello Retry Request messageMatt Caswell2017-02-147-23/+165
* Make the context available to the extensions parse and construction funcsMatt Caswell2017-02-144-218/+259
* mem leak on error path and error propagation fixYuchi2017-02-141-1/+1
* Replace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGNDr. Stephen Henson2017-02-107-53/+33
* Check index >= 0 as 0 is a valid index.Dr. Stephen Henson2017-02-101-1/+1
* Don't read uninitialised data for short session IDs.David Benjamin2017-02-091-4/+12
* SSL_get_shared_sigalgs: handle negative idx parameterPeter Wu2017-02-091-0/+1
* Fix crash in tls13_encMatt Caswell2017-02-081-1/+12