aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
...
* Add remaining TLS1.3 ciphersuitesDr. Stephen Henson2017-02-081-1/+64
* Use contants for Chacha/Poly, redo algorithm expressions.Dr. Stephen Henson2017-02-081-4/+8
* Add CCM mode support for TLS 1.3Dr. Stephen Henson2017-02-083-22/+41
* Add NID_auth_any and NID_kx_any NIDs.Dr. Stephen Henson2017-02-081-2/+4
* Add SSL_kANY and SSL_aANYDr. Stephen Henson2017-02-082-0/+11
* Combined patch against master branch for the following issues:Bernd Edlinger2017-02-031-0/+5
* Fix "no-ec"Richard Levitte2017-02-031-0/+6
* Initialise alg_k and alg_aRichard Levitte2017-02-021-1/+1
* Don't filter TLS 1.3 ciphersuites by signing or key exchange algorithmDr. Stephen Henson2017-02-021-23/+28
* Update cipher definitionDr. Stephen Henson2017-02-021-2/+1
* Remove special case for TLS 1.3.Dr. Stephen Henson2017-02-021-16/+2
* For TLS 1.3 retrieve previously set certificate indexDr. Stephen Henson2017-02-021-5/+8
* make errorsDr. Stephen Henson2017-02-021-0/+2
* Set signature algorithm when choosing cipherDr. Stephen Henson2017-02-021-0/+6
* Add function tls_choose_sigalg().Dr. Stephen Henson2017-02-022-0/+63
* Cosmetic changeDr. Stephen Henson2017-02-021-6/+3
* Add support for logging out TLSv1.3 secretsCory Benfield2017-02-024-35/+38
* Majority rules, use session_ctx vs initial_ctxTodd Short2017-01-315-13/+10
* Tidy up Suite B logicDr. Stephen Henson2017-01-311-16/+16
* Remove peer_md and use peer_sigalg instead.Dr. Stephen Henson2017-01-314-8/+3
* Simplify sigalgs code.Dr. Stephen Henson2017-01-312-65/+19
* Add digest and key indices to table.Dr. Stephen Henson2017-01-312-20/+49
* Don't check certificate type against ciphersuite for TLS 1.3Dr. Stephen Henson2017-01-311-11/+17
* Add TLS 1.3 signing curve checkDr. Stephen Henson2017-01-311-23/+35
* Only allow PSS signatures with RSA keys and TLS 1.3Dr. Stephen Henson2017-01-311-0/+3
* Store table entry to peer signature algorithm.Dr. Stephen Henson2017-01-313-50/+42
* Free up the memory for the NewSessionTicket extensionsMatt Caswell2017-01-301-0/+2
* Make sure we free and cleanse the pms value in all code pathsMatt Caswell2017-01-301-3/+1
* Update macros.Dr. Stephen Henson2017-01-301-4/+7
* fix style issuesDr. Stephen Henson2017-01-301-2/+1
* Fix TLS 1.2 and no sigalgs.Dr. Stephen Henson2017-01-301-1/+19
* Replace TLS_SIGALGS with SIGALG_LOOKUPDr. Stephen Henson2017-01-302-101/+83
* Support TLS 1.3 signature scheme names.Dr. Stephen Henson2017-01-301-10/+21
* Extend TLS 1.3 signature table.Dr. Stephen Henson2017-01-301-18/+41
* Use shared signature algorithm list to find type.Dr. Stephen Henson2017-01-301-8/+10
* Add SSL_get_peer_signature_type_nid() function.Dr. Stephen Henson2017-01-301-0/+8
* Store peer signature type.Dr. Stephen Henson2017-01-304-24/+23
* More complete PSS support.Dr. Stephen Henson2017-01-301-42/+29
* Use uint16_t for signature scheme.Dr. Stephen Henson2017-01-304-28/+29
* use RSA_PSS_SALTLEN_DIGEST constantDr. Stephen Henson2017-01-303-7/+7
* Expand comment in tls_process_hello_req()Matt Caswell2017-01-301-4/+5
* Add a TODO around validating the ticket ageMatt Caswell2017-01-301-0/+2
* Various style fixes following review feedbackMatt Caswell2017-01-304-21/+19
* Remove unneccessary commentsMatt Caswell2017-01-302-10/+10
* Use for loop in WPACKET_fill_lengths instead of do...whileMatt Caswell2017-01-301-4/+2
* Move the SSL3_CK_CIPHERSUITE_FLAG out of public headerMatt Caswell2017-01-302-1/+4
* If we have no suitable PSK kex modes then don't attempt to resumeMatt Caswell2017-01-305-11/+20
* Fix <= TLS1.2 breakMatt Caswell2017-01-302-2/+2
* Make calls to SSL_renegotiate() error out for TLSv1.3Matt Caswell2017-01-301-4/+10
* Make the "ticket" function return codes clearerMatt Caswell2017-01-303-40/+42