summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_srvr.c
AgeCommit message (Expand)Author
2024-06-25Implement RSA key exchange in constant time.Joel Sing
2024-02-03Zap a trailing blank that snuck into ssl3_get_client_hello()Theo Buehler
2024-02-03Remove GOST and STREEBOG support from libssl.Bob Beck
2023-12-29Neuter the SSL_set_debug(3) APITheo Buehler
2023-11-18Check for negative EVP_CIPHER_CTX_iv_length() return in libsslTheo Buehler
2023-07-08Hide all public symbols in libsslBob Beck
2023-06-11Convert legacy server kex to one-shot sign/verifyTheo Buehler
2023-06-11Easy EVP_Digest{Sign,Verify} conversions for legacy stackTheo Buehler
2022-12-26spelling fixes; from paul tagliamonteJason McIntyre
2022-11-26Make internal header file names consistentTheo Buehler
2022-10-02Get rid of SSL_CTX_INTERNAL and SSL_INTERNAL.Joel Sing
2022-10-01Move handshake message handling functions from ssl_both.c to client/server.Joel Sing
2022-08-17Deduplicate peer certificate chain processing code.Joel Sing
2022-07-03Simplify certificate list handling code in legacy server.Joel Sing
2022-07-02Rename uses 'curve' to 'group' and rework tls1 group API.Theo Buehler
2022-06-30Add checks to ensure we do not initiate or negotiate handshakes withTheo Buehler
2022-06-29Check the security of DH key sharesTheo Buehler
2022-06-29Check the security level when building sigalgsTheo Buehler
2022-06-28Free ciphers before assigning to themTheo Buehler
2022-06-07Add error checking to tls_session_secret_cb() callsTheo Buehler
2022-02-05Bye bye S3I.Joel Sing
2022-01-11Remove peer_pkeys from SSL_SESSION.Joel Sing
2022-01-11Rename 'peer' to 'peer_cert' in SSL_SESSION.Joel Sing
2022-01-11Plumb decode errors through key share parsing code.Joel Sing
2022-01-09Clean up ssl3_{send,get}_client_kex_gost()Joel Sing
2022-01-09Return 0/1 from ssl3_{send,get}_client_kex_gost()Joel Sing
2022-01-09Fix GOST skip certificate verify handling.Joel Sing
2022-01-08Merge SESS_CERT into SSL_SESSION.Joel Sing
2022-01-08Rename CERT to SSL_CERT and CERT_PKEY to SSL_CERT_PKEY.Joel Sing
2022-01-07Rename dh_tmp to dhe_params.Joel Sing
2022-01-07Convert legacy server to tls_key_share.Joel Sing
2022-01-04Return 0 on failure from send/get kex functions in the legacy stack.Joel Sing
2021-12-26Hoist memset of CBB above EVP_MD_CTX_new() and HMAC_CTX_new() to avoidTheo Buehler
2021-12-09Convert ssl_srvr.c to opaque EVP_MD_CTX.Theo Buehler
2021-12-04Clean up and refactor server side DHE key exchange.Joel Sing
2021-11-29Convert server serialisation of DHE parameters/public key to new functions.Joel Sing
2021-11-26Stop reaching into EVP_PKEY in the rest of libssl.Theo Buehler
2021-11-19libssl: don't reach for pkey->save_type.Theo Buehler
2021-10-25Fold SSL_SESSION_INTERNAL back into SSL_SESSION.Joel Sing
2021-10-23Provide a way to determine our maximum legacy version.Joel Sing
2021-10-23Fold DTLS1_STATE_INTERNAL into DTLS1_STATE.Joel Sing
2021-10-23Untangle ssl3_get_message() return values.Joel Sing
2021-09-03Ensure that a client hello does not have trailing data.Joel Sing
2021-08-30Clean up and simplify info and msg callbacks.Joel Sing
2021-06-29Track sigalg used by ourselves and our peer in the legacy stack.Joel Sing
2021-06-29Convert legacy stack server to ssl_sigalg_for_peer().Joel Sing
2021-06-29Move the RSA-PSS check for TLSv1.3 to ssl_sigalg_pkey_ok().Joel Sing
2021-06-27Change ssl_sigalgs_from_value() to perform sigalg list selection.Joel Sing
2021-06-27Rename ssl_sigalg() to ssl_sigalg_from_value().Joel Sing
2021-06-27Change ssl_sigalgs_build() to perform sigalg list selection.Joel Sing