summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_lib.c
AgeCommit message (Expand)Author
2018-11-19Revert previous - DTLSv1 uses MD5+SHA1 for RSA signature verification.Joel Sing
2018-11-17Fix DTLS, because DTLS still remains a special flower, allows regress to passBob Beck
2018-11-14Fix wrong sizeof argument by using 'uint16_t *', with minor nit from tb@,Ricardo Mestre
2018-11-11Add SSL_set1_host(), a thin wrapper around X509_VERIFY_PARAM_set1_host().Theo Buehler
2018-11-10Stop keeping track of sigalgs by guessing it from digest and pkey,Bob Beck
2018-11-08Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.Joel Sing
2018-11-07Add TLSv1.3 cipher suites (with appropriate guards).Joel Sing
2018-09-05Use the newer/more sensible names for EVP_MD_CTX_* functions.Joel Sing
2018-09-05Correctly clear the current cipher state, when changing cipher state.Joel Sing
2018-08-30Nuke ssl_pending/ssl_shutdown function pointers.Joel Sing
2018-08-24Let SSL_copy_session_id() return an int for error checking.Theo Buehler
2018-04-25OpenSSL started adding const to functions all over the place. Make allTheo Buehler
2018-04-14make ENGINE_finish() succeed on NULL and simplify callers as inTheo Buehler
2018-04-07Remove function pointers for ssl_{read,write,peek}.Joel Sing
2018-03-17Bring in compatibility for OpenSSL 1.1 style init functions.Bob Beck
2018-03-17Provide SSL_CTX_get_default_passwd_cb{,_userdata}()Theo Buehler
2018-03-15Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_versionJeremie Courreges-Anglas
2018-02-22Provide SSL_is_server().Joel Sing
2018-02-22Provide SSL_up_ref().Joel Sing
2018-02-22Provide SSL_CTX_get_ciphers().Joel Sing
2018-02-17Provide SSL_get_client_random() and SSL_get_server_random()Joel Sing
2018-02-17Provide SSL_CTX_get0_certificate()Joel Sing
2018-02-14Provide SSL_CTX_up_ref().Joel Sing
2018-02-14Provide SSL_CTX_get0_param() and SSL_get0_param().Joel Sing
2017-10-11Convert ssl3_client_hello() to CBB.Joel Sing
2017-10-10Make ssl_bytes_to_cipher_list() take a CBS, rather than a pointer andJoel Sing
2017-08-30Bring back the NPN related symbols.Joel Sing
2017-08-28Completely remove NPN remnants.Joel Sing
2017-08-13Make SSL{,_CTX}_set_alpn_protos() do atomic updates and handle NULL.Doug Hogan
2017-08-12Remove NPN support.Joel Sing
2017-08-12Remove support for DSS/DSA, since we removed the cipher suites a whileJoel Sing
2017-08-11I don't think eay will ever fix this...Joel Sing
2017-08-11style(9) in ssl_set_cert_masks().Joel Sing
2017-08-10Clean up the EC key/curve configuration handling.Joel Sing
2017-08-09Pull out the code that identifies if we have an ECC cipher in the cipherJoel Sing
2017-05-07Move state from ssl->internal to the handshake structure.Bob Beck
2017-05-06Bring in an SSL_HANDSHAKE structure and commence the great shovellingBob Beck
2017-05-06Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.Joel Sing
2017-02-28Stop pretending that MD5 and SHA1 might not exist - rather than locatingJoel Sing
2017-02-15Avoid dereferencing a pointer when reporting an error about the sameJoel Sing
2017-02-07Change SSLerror() back to taking two args, with the first one being an SSL *.Bob Beck
2017-01-26Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglyBob Beck
2017-01-26Send the error function codes to rot in the depths of hell where they belongBob Beck
2017-01-26Remove most of SSL3_ENC_METHOD - we can just inline the function callsJoel Sing
2017-01-26Move relatively new version range code from ssl_lib.c into a separateJoel Sing
2017-01-26Remove ssl3_undef_enc_method - if we have internal bugs we want to segfaultJoel Sing
2017-01-25Limit enabled version range by the versions configured on the SSL_CTX/SSL,Joel Sing
2017-01-24BUF_MEM_free(), X509_STORE_free() and X509_VERIFY_PARAM_free() all checkJoel Sing
2017-01-24sk_free() checks for NULL so do not bother doing it from the callers.Joel Sing
2017-01-24sk_pop_free() checks for NULL so do not bother doing it from the callers.Joel Sing