aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Use default point formats extension for server side as well as clientDr. Stephen Henson2012-11-261-44/+38
* change inaccurate error messageDr. Stephen Henson2012-11-261-1/+1
* set auto ecdh parameter selction for Suite BDr. Stephen Henson2012-11-261-0/+2
* add Suite B 128 bit mode offering only combination 2Dr. Stephen Henson2012-11-241-2/+10
* Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson2012-11-222-0/+17
* reject zero length point format list or supported curves extensionsDr. Stephen Henson2012-11-221-2/+4
* curves can be set in both client and serverDr. Stephen Henson2012-11-211-2/+0
* use correct return values when callin cmdDr. Stephen Henson2012-11-211-3/+7
* make dependDr. Stephen Henson2012-11-191-15/+55
* fix typo and warningDr. Stephen Henson2012-11-194-7/+7
* add SSL_CONF functions and documentationDr. Stephen Henson2012-11-164-3/+621
* new command line option -stdname to ciphers utilityDr. Stephen Henson2012-11-162-0/+8
* add "missing" TLSv1.2 cipher aliasDr. Stephen Henson2012-11-151-2/+3
* new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for so...Dr. Stephen Henson2012-11-082-0/+18
* If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" asDr. Stephen Henson2012-09-303-2/+31
* * ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately inRichard Levitte2012-09-211-1/+1
* Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson2012-09-127-10/+51
* Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson2012-09-112-8/+12
* Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie2012-09-114-39/+81
* new ctrl to retrive value of received temporary key in server key exchange me...Dr. Stephen Henson2012-09-082-0/+41
* store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson2012-09-073-0/+28
* perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson2012-08-316-49/+62
* give more meaningful error if presented with wrong certificate type by serverDr. Stephen Henson2012-08-303-2/+19
* Add compilation flag to disable certain protocol checks and allow use ofDr. Stephen Henson2012-08-293-1/+62
* oops, typoDr. Stephen Henson2012-08-281-2/+2
* New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passesDr. Stephen Henson2012-08-284-1/+122
* Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson2012-08-1513-78/+367
* Rename Suite B functions for consistency.Dr. Stephen Henson2012-08-031-15/+2
* Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson2012-07-276-36/+228
* Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson2012-07-246-34/+57
* check EC tmp key matches preferencesDr. Stephen Henson2012-07-245-3/+34
* typoDr. Stephen Henson2012-07-241-1/+1
* Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson2012-07-235-2/+155
* set ciphers to NULL before calling cert_cbDr. Stephen Henson2012-07-201-1/+1
* stop warningDr. Stephen Henson2012-07-191-1/+1
* add ssl_locl.h to err header files, rebuild ssl error stringsDr. Stephen Henson2012-07-191-115/+115
* New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson2012-07-185-41/+119
* update trace messagesDr. Stephen Henson2012-07-181-4/+24
* Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson2012-07-085-8/+155
* Install srtp.hRichard Levitte2012-07-051-1/+1
* Add d1_srtp and t1_trce.Richard Levitte2012-07-051-2/+2
* new function SSL_is_server to which returns 1 is the corresponding SSL contex...Dr. Stephen Henson2012-07-032-0/+6
* no need to check s->server as default_nid is never used for TLS 1.2 client au...Dr. Stephen Henson2012-07-031-1/+1
* Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson2012-07-035-26/+99
* Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson2012-06-299-0/+56
* Function tls1_check_ec_server_key is now redundant as we makeDr. Stephen Henson2012-06-283-13/+0
* Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson2012-06-286-27/+241
* don't use pseudo digests for default values of keysDr. Stephen Henson2012-06-272-4/+4
* Reorganise supported signature algorithm extension processing.Dr. Stephen Henson2012-06-256-109/+250
* Add support for application defined signature algorithms for use withDr. Stephen Henson2012-06-227-28/+215