aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Use the index that matches the key type (either SSL_PKEY_RSA_PSS_SIGN or SSL_...Noah Robbin2018-01-081-4/+23
* Use size of server key when selecting signature algorithm.Noah Robbin2018-01-081-0/+34
* Stop using unimplemented cipher classes.Bernd Edlinger2018-01-061-4/+0
* Permit the "supported_groups" extension in ServerHellosBenjamin Kaduk2018-01-031-1/+27
* Fix trace of TLSv1.3 Certificate Request messageMatt Caswell2018-01-021-0/+4
* Fix minor 'the the' typosDaniel Bevenius2018-01-021-1/+1
* Disable partial writes for early dataMatt Caswell2017-12-281-4/+9
* Don't flush the ClientHello if we're going to send early dataMatt Caswell2017-12-287-19/+32
* Alternate fix for ../test/recipes/80-test_ssl_old.t with no-ecBernd Edlinger2017-12-272-35/+1
* Remove outdated commentsPaul Yang2017-12-261-5/+0
* Add master DRBG for reseedingDr. Matthias St. Pierre2017-12-171-1/+1
* Remove spaces at end of line in ssl/statemPaul Yang2017-12-174-4/+4
* Add comments to NULL func ptrs in bio_method_stDaniel Bevenius2017-12-181-3/+3
* Fix invalid function type casts.Bernd Edlinger2017-12-153-36/+88
* Make sure we treat records written after HRR as TLSv1.3Matt Caswell2017-12-141-1/+2
* Issue a CCS from the client if we received an HRRMatt Caswell2017-12-141-4/+14
* Fix server side HRR flushingMatt Caswell2017-12-141-2/+6
* Delay flush until after CCS with early_dataMatt Caswell2017-12-142-17/+22
* Ensure CCS sent before early_data has the correct record versionMatt Caswell2017-12-141-1/+3
* Send supported_versions in an HRRMatt Caswell2017-12-143-1/+17
* Make sure supported_versions appears in an HRR tooMatt Caswell2017-12-141-1/+2
* Update state machine to send CCS based on whether we did an HRRMatt Caswell2017-12-148-36/+51
* Fix an HRR bugMatt Caswell2017-12-141-3/+7
* Merge HRR into ServerHelloMatt Caswell2017-12-147-204/+126
* Send a CCS after ServerHello in TLSv1.3 if using middlebox compat modeMatt Caswell2017-12-142-3/+15
* Send a CCS from a client in an early_data handshakeMatt Caswell2017-12-141-8/+27
* Send a CCS from the client in a non-early_data handshakeMatt Caswell2017-12-141-0/+6
* Remove TLSv1.3 specific write transition for ClientHelloMatt Caswell2017-12-141-4/+0
* Drop CCS messages received in the TLSv1.3 handshakeMatt Caswell2017-12-143-3/+41
* Send TLSv1.2 as the record version when using TLSv1.3Matt Caswell2017-12-141-1/+2
* Implement session id TLSv1.3 middlebox compatibility modeMatt Caswell2017-12-146-35/+100
* Update ServerHello to new draft-22 formatMatt Caswell2017-12-1410-98/+230
* Make BIO_METHOD struct definitions consistentDaniel Bevenius2017-12-091-1/+2
* Correct minor typo in ssl_locl.h commentDaniel Bevenius2017-12-081-1/+1
* Convert the remaining functions in the record layer to use SSLfatal()Matt Caswell2017-12-085-26/+92
* Convert dlts1_write_bytes() to use SSLfatal()Matt Caswell2017-12-081-15/+29
* More record layer conversions to use SSLfatal()Matt Caswell2017-12-085-129/+194
* Convert ssl3_read_bytes() to use SSLfatal()Matt Caswell2017-12-081-60/+58
* Update ssl3_get_record() to use SSLfatal()Matt Caswell2017-12-084-129/+151
* In OPENSSL_init_ssl(), run the base ssl init before OPENSSL_init_crypto()Richard Levitte2017-12-081-3/+3
* Consistent formatting for sizeof(foo)Rich Salz2017-12-077-16/+16
* Fix the check_fatal macroMatt Caswell2017-12-061-1/+1
* Fix bug in TLSv1.3 PSK processingMatt Caswell2017-12-061-5/+8
* Fix some formatting nitsMatt Caswell2017-12-044-8/+9
* Remove spurious whitespaceMatt Caswell2017-12-041-1/+0
* Update an error reason code to be ERR_R_SHOULD_NOT_HAVE_BEEN_CALLEDMatt Caswell2017-12-041-1/+1
* Add some more cleanupsMatt Caswell2017-12-047-64/+66
* Assert that SSLfatal() only gets called onceMatt Caswell2017-12-042-1/+6
* Add some sanity checks for the fatal error conditionMatt Caswell2017-12-042-7/+45
* Fix up a few places in the state machine that got missed with SSLfatal()Matt Caswell2017-12-045-39/+50