summaryrefslogtreecommitdiff
path: root/lib/libssl/s3_lib.c
AgeCommit message (Expand)Author
2018-11-08Clean up and simplify the handshake transcript code.Joel Sing
2018-11-08Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.Joel Sing
2018-11-07Add TLSv1.3 cipher suites (with appropriate guards).Joel Sing
2018-11-05Rename the TLS Supported Elliptic Curves extension to Supported Groups.Joel Sing
2018-11-05Clean up the code that checks if we can choose an EC cipher suite.Joel Sing
2018-10-24Make more of libssl's record layer state internal.Joel Sing
2018-09-06Drop SSL_CIPHER_ALGORITHM2_AEAD flag.Joel Sing
2018-08-27Add some missing statics.Joel Sing
2018-08-24Clean up handshake message start/finish functions.Joel Sing
2018-06-02Remove the three remaining single DES cipher suites.Joel Sing
2018-04-07Nuke SSL3_FLAGS_DELAY_CLIENT_FINISHED and SSL3_FLAGS_POP_BUFFER.Joel Sing
2018-03-15Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_versionJeremie Courreges-Anglas
2018-02-17Provide SSL_CTX_get_tlsext_status_cb() and SSL_CTX_get_tlsext_status_arg().Joel Sing
2018-01-27Convert ssl3_put_cipher_by_char() to CBB.Joel Sing
2017-10-08Convert ssl3_send_change_cipher_spec() to use CBB and make it handle DTLS,Joel Sing
2017-09-25Annotate some API-side memory leaks for future resolution.Joel Sing
2017-08-28ECDHE-RSA-DES-CBC3-SHA should not be marked HIGH.Joel Sing
2017-08-28Remove the original (pre-IETF) chacha20-poly1305 cipher suites.Joel Sing
2017-08-12Remove NPN support.Joel Sing
2017-08-12Remove support for DSS/DSA, since we removed the cipher suites a whileJoel Sing
2017-08-11Convert ssl3_send_certificate_request() to CBB.Joel Sing
2017-08-10Clean up the EC key/curve configuration handling.Joel Sing
2017-08-09Consistently return from each SSL/SSL_CTX control case, rather thanJoel Sing
2017-08-09Split out the remaining SSL_CTX controls into individual functions.Joel Sing
2017-08-09Start splitting out SSL_CTX controls into individual functions, so thatJoel Sing
2017-08-09Be consistent and return from each SSL control case, rather than breakingJoel Sing
2017-08-09Split out the remaining SSL controls into individual functions.Joel Sing
2017-08-09Split more controls into individual functions.Joel Sing
2017-08-09Start splitting out controls into individual functions, so that they canJoel Sing
2017-08-09Remove unnecessary curly braces and unindent. Also add a few blank linesJoel Sing
2017-08-09Fix conditionals for DH controls.Joel Sing
2017-07-15Remove unused variable.Joel Sing
2017-05-07Drop cipher suites with DSS authentication - there is no good reason toJoel Sing
2017-05-07Move state from ssl->internal to the handshake structure.Bob Beck
2017-05-06Bring in an SSL_HANDSHAKE structure and commence the great shovellingBob Beck
2017-05-06Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.Joel Sing
2017-04-10Use freezero() for the internal opaque structures, instead of the currentJoel Sing
2017-04-10Use freezero() for X25519 keys - same result with more readable code.Joel Sing
2017-03-10Remove the handshake digests and related code, replacing remaining usesJoel Sing
2017-03-05Provide a rolling handshake hash that commences as soon as the cipherJoel Sing
2017-03-04Drop the second argument of dtls1_set_message_header() and make it a voidJoel Sing
2017-02-07Change SSLerror() back to taking two args, with the first one being an SSL *.Bob Beck
2017-02-05Define values for SSL_CTRL_SET_GROUPS{,_LIST} and wire them up to theJoel Sing
2017-01-26Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglyBob Beck
2017-01-26Send the error function codes to rot in the depths of hell where they belongBob Beck
2017-01-24sk_pop_free() checks for NULL so do not bother doing it from the callers.Joel Sing
2017-01-24Add support for setting the supported EC curves viaJoel Sing
2017-01-24There is no point returning then breaking...Joel Sing
2017-01-23Move options and mode from SSL_CTX and SSL to internal, since these can beJoel Sing
2017-01-23Split most of SSL_METHOD out into an internal variant, which is opaque.Joel Sing