aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Stop server from expecting Certificate message when not requestedMatt Caswell2017-01-231-1/+2
* Stop client from sending Certificate message when not requestedMatt Caswell2017-01-231-0/+1
* Fix SSL_VERIFY_CLIENT_ONCEMatt Caswell2017-01-231-1/+1
* fix a memory leak in ssl3_generate_key_block fix the error handling in ssl3_c...Bernd Edlinger2017-01-231-3/+4
* If client doesn't send curves list, don't assume all.Rich Salz2017-01-181-60/+14
* Fix compilation with no-nextprotonegMatt Caswell2017-01-111-1/+1
* Fix no-ec following sigalgs refactorMatt Caswell2017-01-101-0/+10
* Fix tls1_set_sigalgs() length calculationMatt Caswell2017-01-101-12/+12
* Add some missing sigalgsMatt Caswell2017-01-101-0/+4
* Fix an uninit read picked up by TravisMatt Caswell2017-01-101-2/+2
* Fix a Travis failureMatt Caswell2017-01-101-1/+1
* Teach SSL_trace about the new sigalgsMatt Caswell2017-01-101-30/+33
* Extend PSS signature support to TLSv1.2Matt Caswell2017-01-105-56/+111
* Always use TLSv1.0 for record layer version in TLSv1.3Matt Caswell2017-01-101-1/+1
* Add a TLS1.3 TODO for setting of sig algsMatt Caswell2017-01-101-0/+1
* Ignore PKCS1 based sig algs in TLSv1.3Matt Caswell2017-01-101-3/+11
* Verify that the sig algs extension has been sent for TLSv1.3Matt Caswell2017-01-105-2/+26
* Fix client application traffic secretMatt Caswell2017-01-102-29/+41
* Temporarily ignore NewSessionTickets for TLS1.3Matt Caswell2017-01-101-0/+10
* Use the correct size for TLSv1.3 finished keysMatt Caswell2017-01-101-2/+2
* Ensure the record sequence number gets incrementedMatt Caswell2017-01-101-0/+11
* Remove some unneeded functionsMatt Caswell2017-01-102-50/+14
* Use NIDs instead of the old TLSv1.2 sigalgs hash and sig idsMatt Caswell2017-01-104-105/+111
* Remove a redundant functionMatt Caswell2017-01-102-26/+0
* Convert Sigalgs processing to use intsMatt Caswell2017-01-108-125/+214
* Sign CertificateVerify messages using PSS paddingMatt Caswell2017-01-101-27/+48
* Make CertificateVerify TLS1.3 awareMatt Caswell2017-01-104-12/+137
* Move Certificate Verify construction and processing into statem_lib.cMatt Caswell2017-01-105-233/+234
* Add a TODO(TLS1.3) around certificate selectionMatt Caswell2017-01-101-0/+6
* Mark a HelloRequest record as read if we ignore itMatt Caswell2017-01-101-0/+5
* Review commentsRich Salz2017-01-093-4/+4
* Use typedefs for PSK, NPN, ALPN callback functionsRich Salz2017-01-095-100/+24
* Move extension data into sub-structsRich Salz2017-01-0912-594/+628
* Fix various style issues following feedbackMatt Caswell2017-01-064-12/+12
* Rename the chain variable to chainidxMatt Caswell2017-01-064-146/+158
* Fix a double blank line style issueMatt Caswell2017-01-061-1/+0
* Initialise the al variableMatt Caswell2017-01-061-1/+1
* Update SSL_trace to understand TLSv1.3 CertificatesMatt Caswell2017-01-061-9/+24
* Implement TLSv1.3 style CertificateStatusMatt Caswell2017-01-068-64/+95
* Create Certificate messages in TLS1.3 formatMatt Caswell2017-01-067-144/+216
* Extends extension parsing to take the CertificateMatt Caswell2017-01-066-70/+106
* Extend tls_construct_extensions() to enable passing of a certificateMatt Caswell2017-01-066-73/+127
* Don't build OCSP stuff when OCSP is disabledRichard Levitte2017-01-041-0/+4
* Fix compilation with no-ecMatt Caswell2016-12-292-0/+10
* Fix extension for various no- optionsMatt Caswell2016-12-291-0/+14
* Fix the EC point formats extensionMatt Caswell2016-12-291-1/+1
* Fix erroneous goto lableRichard Levitte2016-12-191-1/+1
* Fix memory leak in tls_parse_stoc_key_shareKurt Roeckx2016-12-191-0/+1
* Fix a leak in SSL_clear()Matt Caswell2016-12-122-9/+9
* Only call memcpy when the length is larger than 0.Kurt Roeckx2016-12-081-2/+3