summaryrefslogtreecommitdiffstats
path: root/ssl/statem/extensions.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Make sure we use the correct SSL object when making a callbackMatt Caswell2024-11-071-6/+7
* Copyright year updatesTomas Mraz2024-09-051-1/+1
* EVP_MD_size() updatesslontis2024-08-291-1/+1
* Fix the alert used on a missing key_shareMatt Caswell2024-08-211-6/+9
* Return SSL_AD_DECRYPT_ERROR alert on PSK binder validation failure (RFC 8446)Bhaskar Metiya2024-08-151-1/+1
* Check that a supported_versions extension is present in an HRRMatt Caswell2024-08-071-1/+15
* Fix handling of max_fragment_length extension for PSKFrederik Wedel-Heinen2024-06-201-9/+3
* Fix implementation of `PreferNoDHEKEX` option.Markus Minichmayr2023-11-301-13/+4
* Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the server to prefer non-dhe ...Markus Minichmayr2023-11-241-4/+13
* Don't ask for an invalid group in an HRRMatt Caswell2023-06-231-1/+5
* RFC7250 (RPK) supportTodd Short2023-03-281-1/+59
* Fix CertificateCompressionAlgorithm to be read as 2-octet-wideAlexander Sosedkin2022-11-081-1/+1
* Remove the old buffer management codeMatt Caswell2022-10-201-6/+0
* Add `for_comp` flag when retrieving certs for compressionTodd Short2022-10-181-4/+8
* Add support for compressed certificates (RFC8879)Todd Short2022-10-181-0/+125
* Use the configured max_send_fragment value in the write record layerMatt Caswell2022-10-121-4/+8
* Partial revert and reimplement "Enable brainpool curves for TLS1.3"Matt Caswell2022-10-071-1/+1
* Stop raising ERR_R_MALLOC_FAILURE in most placesRichard Levitte2022-10-051-1/+1
* Test TLS extension orderingTodd Short2022-09-281-1/+15
* Cleanup EBCDIC string defintionsTodd Short2022-09-091-7/+4
* SSL object refactoring using SSL_CONNECTION objectTomas Mraz2022-07-281-102/+124
* Remove duplicated #include headersJHH202022-05-041-1/+0
* Update copyright yearMatt Caswell2022-05-031-1/+1
* ssl: better support TSAN operationsPauli2022-01-191-2/+11
* Enable brainpool curves for TLS1.3Bernd Edlinger2021-11-261-1/+1
* ssl: fix indentationPauli2021-06-191-1/+1
* ssl: replace tabs with spacesPauli2021-06-191-1/+1
* tls: remove TODOsPauli2021-06-021-2/+0
* Rename all getters to use get/get0 in nameTomas Mraz2021-06-011-2/+2
* Cleanup the peer point formats on regotiationDmitry Belyavskiy2021-05-211-1/+11
* Improve RFC 8446 PSK key exchange mode complianceBenjamin Kaduk2021-05-121-1/+18
* Corrected missing definitions from NonStop SPT build.Randall S. Becker2021-04-011-0/+5
* Ensure buffer/length pairs are always in syncMatt Caswell2021-03-251-0/+1
* ssl sigalg extension: fix NULL pointer dereferencePeter Kaestle2021-03-251-0/+1
* ssl: support params arguments to init functionsPauli2021-03-111-1/+1
* Remove OPENSSL_NO_EC guards from libsslMatt Caswell2021-02-051-8/+0
* Ensure default supported groups works even with no-ec and no-dhMatt Caswell2021-02-051-4/+0
* Update copyright yearRichard Levitte2021-01-281-1/+1
* Fix for negative return value from `SSL_CTX_sess_accept()`anupamam132021-01-081-1/+2
* tag unused function arguments as ossl_unusedPauli2020-12-031-2/+2
* SSL: refactor all SSLfatal() callsRichard Levitte2020-11-111-71/+38
* Run the withlibctx.pl scriptMatt Caswell2020-10-011-7/+5
* Fix safestack issues in x509.hMatt Caswell2020-09-131-2/+0
* Ensure libssl creates libctx aware MAC keysMatt Caswell2020-08-291-2/+4
* Add EVP signature with libctx methods.Shane Lontis2020-08-091-2/+3
* Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz2020-06-091-1/+14
* In OpenSSL builds, declare STACK for datatypes ...Rich Salz2020-04-241-0/+2
* Update copyright yearMatt Caswell2020-04-231-1/+1
* Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libsslMatt Caswell2020-04-011-1/+2
* Don't acknowledge a servername following warning alert in servername cbMatt Caswell2020-01-301-0/+1