aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Revert "Fix clang compile time error"Matt Caswell2017-05-041-6/+3
* Fix clang compile time errorTodd Short2017-05-041-3/+6
* Update the HKDF labels for draft-20Matt Caswell2017-05-032-17/+10
* Limit padded record to max plaintextTodd Short2017-05-031-28/+31
* Clarify serverinfo usage with Certificate messagesMatt Caswell2017-05-031-0/+4
* Add an SSL_ prefix to SERVERINFOV2 and SERVERINFOV1Matt Caswell2017-05-031-6/+6
* Only send custom extensions where we have received one in the ClientHelloMatt Caswell2017-05-031-5/+4
* Extend the SERVERINFO file format to include an extensions contextMatt Caswell2017-05-032-89/+154
* Fix comment around safari fingerprint checkMatt Caswell2017-05-021-0/+1
* TLS1.3 PaddingTodd Short2017-05-026-5/+143
* Return success in custom_ext_parse_old_cb_wrap if parse_cb is NULLGraham Edgecombe2017-04-261-0/+3
* Don't treat PACKET_remaining() as booleanTatsuhiro Tsujikawa2017-04-262-6/+6
* Break before && operatorTatsuhiro Tsujikawa2017-04-261-5/+5
* Call init and finalization functions per extension messageTatsuhiro Tsujikawa2017-04-264-46/+56
* Always duplicate the session on NewSessionTicket in TLSv1.3Matt Caswell2017-04-261-1/+9
* Add support for SSL_SESSION_is_resumable()Matt Caswell2017-04-262-13/+19
* Remove TLS1.3 TODO around testing for session id lengthMatt Caswell2017-04-261-1/+0
* Add a ciphersuite config sanity check for serversMatt Caswell2017-04-265-9/+40
* Add a ciphersuite config sanity check for clientsMatt Caswell2017-04-261-2/+20
* Don't overwrite the alert value if there is no alert to sendMatt Caswell2017-04-261-21/+21
* Don't attempt to send fragments > max_send_fragment in DTLSMatt Caswell2017-04-253-0/+10
* Remove special case code for SCTP reneg handlingMatt Caswell2017-04-257-129/+3
* Don't fail the connection in SSLv3 if server selects ECDHEMatt Caswell2017-04-244-8/+20
* if log fails, avoid pms getting double freeRich Salz2017-04-241-3/+3
* Ignore dups in X509_STORE_add_*Rich Salz2017-04-201-16/+5
* Fix minor compiler issues.Todd Short2017-04-194-21/+21
* ASN.1: adapt our use of INTxx et al by making them explicitely embeddedRichard Levitte2017-04-131-9/+9
* CT_POLICY_EVAL_CTX_set_time expects milliseconds, but given secondsRob Percival2017-04-121-1/+2
* Remove ECDH(E) ciphers from SSLv3Todd Short2017-04-111-20/+20
* Additional check to handle BAD SSL_write retryRich Salz2017-04-111-1/+2
* Allow an ALPN callback to pretend to not existBenjamin Kaduk2017-04-101-0/+3
* Publish our INT32, UINT32, INT64, UINT64 ASN.1 types and Z variantsRichard Levitte2017-04-101-1/+1
* Remove an out of date TODOMatt Caswell2017-04-071-5/+0
* Create an ENDPOINT enum type for use internallyMatt Caswell2017-04-074-33/+41
* Prefix custom extension API callback types with SSL_Matt Caswell2017-04-072-9/+9
* Various style tweaks based on feedbackMatt Caswell2017-04-071-14/+14
* Implement a new custom extensions APIMatt Caswell2017-04-077-193/+403
* Move the extensions context codes into the public APIMatt Caswell2017-04-078-119/+112
* Move ssl/t1_ext.c to ssl/statem/extensions_cust.cMatt Caswell2017-04-072-3/+3
* Convert SSL_SESSION_ASN1 to use size specific integersRichard Levitte2017-04-041-19/+19
* Constify SSL_dup_CA_list()Dr. Stephen Henson2017-04-031-1/+1
* Don't use client specific functions to retrieve CA listDr. Stephen Henson2017-04-032-2/+2
* SSL_CONF support for certificate_authoritiesDr. Stephen Henson2017-04-031-4/+18
* New certificate_authorities functionsDr. Stephen Henson2017-04-037-44/+76
* Fix calls to SSL_get_server_tmp_key() in TLSv1.3Matt Caswell2017-04-031-2/+2
* Tweak a style issueMatt Caswell2017-04-031-4/+3
* Restore s->early_data_state with the original valueTatsuhiro Tsujikawa2017-04-031-2/+4
* Don't handle handshake messages when writing early data on serverMatt Caswell2017-04-031-1/+7
* Fix a typo in the SSL_get_max_early_data() declarationsKazuki Yamaguchi2017-04-031-1/+1
* Update SSL_extension_supported()Matt Caswell2017-03-311-3/+16