summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_tlsext.c
AgeCommit message (Expand)Author
2024-07-09Fix TLS key share check to not fire when using < TLS 1.3Bob Beck
2024-06-26remove psk_idx from tlsext_randomize_build_order()Theo Buehler
2024-06-26tls_extension_find(): make output index optionalTheo Buehler
2024-06-25Fix TLS extension shufflingTheo Buehler
2024-06-06ssl_tlsext: fix uninitialized variable warning with gccTheo Buehler
2024-04-16Fix key share negotiation in HRR caseTheo Buehler
2024-04-04Recommit a better version of the removal of the F5 workaroundTheo Buehler
2024-04-02Backout previous commit (intending that libressl client rejects a supportedStuart Henderson
2024-03-28Stop pandering to the loadbalancer industrial complex.Bob Beck
2024-03-27Fix up server processing of key shares.Bob Beck
2024-03-27Do not allow duplicate groups in supported groups.Bob Beck
2024-03-26Add an indicator that an extension has been processed.Bob Beck
2024-03-26Process supported groups before key share.Bob Beck
2024-03-25Simplify TLS extension parsing and processing.Joel Sing
2024-03-25Fix typo msg_types -> msg_typeTheo Buehler
2024-03-25Split TLS extension parsing from processing.Joel Sing
2024-03-25Decouple TLS extension table order from tlsext_randomize_build_order()Joel Sing
2023-04-28Too many stupid things whine about these being used uninitializedTheo Buehler
2023-04-27ssl_tlsext.c: Add an accessor for the tls extension type.Theo Buehler
2023-04-25Fix allocation sizeTheo Buehler
2023-04-24Free and calloc() the tlsext_build_order and remember its lengthTheo Buehler
2023-04-24Use TLSEXT_TYPE_alpn instead of the stupid long oneTheo Buehler
2023-04-23Randomize the order of TLS extensionsTheo Buehler
2022-11-26Make internal header file names consistentTheo Buehler
2022-10-02Get rid of SSL_CTX_INTERNAL and SSL_INTERNAL.Joel Sing
2022-08-15Avoid shadowing the cbs function parameter in tlsext_alpn_server_parse()Theo Buehler
2022-08-04Make tlsext_*_{build,needs,parse}() functions staticTheo Buehler
2022-07-24Rely on tlsext_parse() to set a decode_error alertTheo Buehler
2022-07-22Remove redundant length checks in parse functionsTheo Buehler
2022-07-20Simplify tlsext_supported_groups_server_parseTheo Buehler
2022-07-20Drop some unnecessary parentheses.Theo Buehler
2022-07-20Copy alpn_selected using CBSTheo Buehler
2022-07-20Factor out ALPN extension format checkTheo Buehler
2022-07-17Correct handling of QUIC transport parameters extension.Joel Sing
2022-07-17Correct TLSEXT_TYPE_quic_transport_parameters message types.Joel Sing
2022-07-02Stop using ssl{_ctx,}_security() outside of ssl_seclevel.cTheo Buehler
2022-07-02Rename uses 'curve' to 'group' and rework tls1 group API.Theo Buehler
2022-06-30Check security level for supported groups.Theo Buehler
2022-06-30Check whether the security level allows session tickets.Theo Buehler
2022-06-29Add support for sending QUIC transport parametersBob Beck
2022-06-29Check the security level when building sigalgsTheo Buehler
2022-06-04The parse stubs need to skip over the extension data.Theo Buehler
2022-06-03Add stubbed out handlers for the pre_shared_key extensionTheo Buehler
2022-06-03Implement handlers for the psk_key_exchange_modes extensions.Theo Buehler
2022-02-05Bye bye S3I.Joel Sing
2022-01-24Avoid use of uninitialized in tlsext_sni_server_parse()Theo Buehler
2022-01-11Plumb decode errors through key share parsing code.Joel Sing
2022-01-11Use SSL_AD_INTERNAL_ERROR for non-decoding alerts when parsing keyshares.Joel Sing
2022-01-11Simplify tlsext_keyshare_server_parse()Joel Sing
2022-01-06Convert legacy TLS client to tls_key_share.Joel Sing