aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Provide SSL_CTX.stats.sess_accept for switched ctxsBenjamin Kaduk2017-10-301-1/+14
* Normalize on session_ctx for stats where possibleBenjamin Kaduk2017-10-302-11/+15
* Use atomics for SSL_CTX statisticsBenjamin Kaduk2017-10-304-31/+62
* Simplify the stack reservationPaul Yang2017-10-262-8/+2
* Fix error handling in SSL_newBernd Edlinger2017-10-251-5/+6
* Various clean-upsKaoruToda2017-10-202-3/+5
* Remove parentheses of return.KaoruToda2017-10-1819-291/+291
* Add missing RAND_DRBG lockingBenjamin Kaduk2017-10-181-2/+15
* Fix reseeding issues of the public RAND_DRBGDr. Matthias St. Pierre2017-10-181-3/+6
* Tweak the comment regarding record version check with respect to TLSv1.3Matt Caswell2017-10-161-3/+4
* Sanity check the HRR version fieldMatt Caswell2017-10-161-0/+7
* Don't do version neg on an HRRMatt Caswell2017-10-163-16/+23
* Fix bug where early_data does not work if no SNI callback is presentMatt Caswell2017-10-121-0/+5
* Move supportedgroup ext-block fields out of NO_ECBenjamin Kaduk2017-10-111-2/+2
* crypto/x509v3/v3_utl.c, ssl/ssl_cert.c: fix Coverity problems.Andy Polyakov2017-10-101-3/+5
* Don't change client random in Client Hello in its second flightTatsuhiro Tsujikawa2017-10-101-2/+3
* Since return is inconsistent, I removed unnecessary parentheses andKaoruToda2017-10-0912-33/+33
* Merge tls1_check_curve into tls1_check_group_idDr. Stephen Henson2017-10-063-39/+27
* Change curves to groups where relevantDr. Stephen Henson2017-10-064-37/+37
* Use separate functions for supported and peer groups listsDr. Stephen Henson2017-10-065-45/+43
* Remove an incorrect commentMatt Caswell2017-10-041-3/+0
* Session resume broken switching contextsTodd Short2017-10-044-91/+117
* Remove unnecessary #include <openssl/lhash.h> directives.Pauli2017-09-293-3/+0
* Use safestack.h exclusively internally.Pauli2017-09-281-1/+0
* Add stack space reservations.Pauli2017-09-282-3/+9
* Add and use function tls1_in_list to avoid code duplication.Dr. Stephen Henson2017-09-261-30/+30
* Use tls1_group_id_lookup in tls1_curve_allowedDr. Stephen Henson2017-09-261-5/+3
* Rename tls1_get_curvelist.Dr. Stephen Henson2017-09-265-80/+46
* Rewrite compression and group checks.Dr. Stephen Henson2017-09-262-135/+122
* New function ssl_generate_param_groupDr. Stephen Henson2017-09-264-63/+40
* Replace tls1_ec_curve_id2nid.Dr. Stephen Henson2017-09-267-41/+45
* Rename tls_curve_info to TLS_GROUP_INFO, move to ssl_locl.hDr. Stephen Henson2017-09-262-15/+15
* Return group id in tls1_shared_groupDr. Stephen Henson2017-09-264-22/+17
* Return correct Suite B curve, fix comment.Dr. Stephen Henson2017-09-261-2/+2
* Use size of entries, not size of the pointer.Kurt Roeckx2017-09-231-1/+1
* Use curve_id not the nidKurt Roeckx2017-09-231-4/+4
* Store groups as uint16_tDr. Stephen Henson2017-09-229-153/+152
* Cleanup whitespace in ssl_lib.c (tabs to spaces)Dr. Matthias St. Pierre2017-09-211-24/+24
* Fix strict-warnings buildPatrick Steuer2017-09-211-1/+1
* Allow use of RSA-PSS certificates in TLS 1.2Dr. Stephen Henson2017-09-201-2/+8
* Allow RSA certificates to be used for RSA-PSSDr. Stephen Henson2017-09-201-10/+30
* Add RSA-PSS key certificate type.Dr. Stephen Henson2017-09-203-13/+11
* Provide getters for min/max proto versionChristian Heimes2017-09-151-0/+8
* Fix no-ec no-dh buildBenjamin Kaduk2017-09-141-1/+5
* Revert "GH614: Use memcpy()/strdup() when possible"Pauli2017-09-141-1/+1
* SSL Trace improvementsFdaSilvaYY2017-09-101-39/+58
* Introduce named constants for the ClientHello callback.David Benjamin2017-09-081-6/+8
* Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.David Benjamin2017-09-083-22/+26
* Restore historical behavior for absent ServerHello extensionsBenjamin Kaduk2017-09-071-2/+2
* add callback handler for setting DTLS timer intervalAlfred E. Heggestad2017-09-062-9/+46