summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_locl.h
AgeCommit message (Expand)Author
2022-07-10Annotate the security callback and the security ex_data as deliberatelyTheo Buehler
2022-07-07Unifdef LIBRESSL_HAS_SECURITY_LEVEL and remove some workaroundsTheo Buehler
2022-07-02Stop using ssl{_ctx,}_security() outside of ssl_seclevel.cTheo Buehler
2022-07-02Rename uses 'curve' to 'group' and rework tls1 group API.Theo Buehler
2022-06-30Check security level for supported groups.Theo Buehler
2022-06-30Add checks to ensure we do not initiate or negotiate handshakes withTheo Buehler
2022-06-29Make ssl_cert_add{0,1}_chain_cert() take ssl/ctxTheo Buehler
2022-06-29ssl_cert_set{0,1}_chain() take ssl/ctxTheo Buehler
2022-06-29Refactor use_certificate_chain_* to take ssl/ctx instead of a certTheo Buehler
2022-06-29Add functions that check security level in certs and cert chains.Theo Buehler
2022-06-29Parse the @SECLEVEL=n annotation in cipher stringsTheo Buehler
2022-06-29Add support for sending QUIC transport parametersBob Beck
2022-06-29whitespace nitTheo Buehler
2022-06-29Also check the security level of the 'tmp dh'Theo Buehler
2022-06-29Check the security of DH key sharesTheo Buehler
2022-06-29Rename one s to ssl for consistencyTheo Buehler
2022-06-28Add prototypes for ssl{_ctx,}_security()Theo Buehler
2022-06-28Implement the default security level callbackTheo Buehler
2022-06-28Add security callback, level and ex_data fields to SSL_CERTTheo Buehler
2022-06-07Switch sid_ctx_length in SSL, SSL_CTX and SSL_SESSION to a size_tTheo Buehler
2022-06-07Switch SSL_SESSION's session_id_length to a size_tTheo Buehler
2022-06-07Switch the SSL_SESSION's master_key_length to a size_tTheo Buehler
2022-06-06Tweak comment describing the SSL_SESSION ASN.1Theo Buehler
2022-06-06Fix spaces before tabsTheo Buehler
2022-06-03Add a use_psk_dhe_ke flag to the TLSv1.3 handshake structTheo Buehler
2022-03-17Remove const from tls1_transcript_hash_value()Joel Sing
2022-03-12Factor out change cipher spec handing code in the legacy stack.Joel Sing
2022-02-21Factor out alert handing code in the legacy stack.Joel Sing
2022-02-05Bye bye S3I.Joel Sing
2022-02-03Cleanup/simplify ssl_cert_type()Joel Sing
2022-01-11Remove peer_pkeys from SSL_SESSION.Joel Sing
2022-01-11Rename 'peer' to 'peer_cert' in SSL_SESSION.Joel Sing
2022-01-11Plumb decode errors through key share parsing code.Joel Sing
2022-01-09Swap arguments to ssl_check_srvr_ecc_cert_and_alg()Joel Sing
2022-01-08Merge SESS_CERT into SSL_SESSION.Joel Sing
2022-01-08Remove commented out CERT_* defines.Joel Sing
2022-01-08Rename CERT to SSL_CERT and CERT_PKEY to SSL_CERT_PKEY.Joel Sing
2022-01-07Rename dh_tmp to dhe_params.Joel Sing
2022-01-07Convert legacy server to tls_key_share.Joel Sing
2022-01-06Convert legacy TLS client to tls_key_share.Joel Sing
2022-01-05Rename tls13_key_share to tls_key_share.Joel Sing
2021-12-04Clean up and refactor server side DHE key exchange.Joel Sing
2021-12-04Move the minimum DHE key size check into ssl_kex_peer_params_dhe()Joel Sing
2021-12-04Check DH public key in ssl_kex_peer_public_dhe().Joel Sing
2021-11-29Factor out/rewrite DHE key exchange.Joel Sing
2021-10-25Use ssl_force_want_read() in the DTLS code.Joel Sing
2021-10-25Fold SSL_SESSION_INTERNAL back into SSL_SESSION.Joel Sing
2021-10-23Add SSL_get0_verified_chain - needed by some new stuffBob Beck
2021-10-23Add new OpenSSL API SSL_CTX_set_num_tickets and friends.Bob Beck
2021-10-23Mop up enc_read_ctx and read_hash.Joel Sing