summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_tlsext.c
AgeCommit message (Expand)Author
2022-08-15Avoid shadowing the cbs function parameter in tlsext_alpn_server_parse()Theo Buehler
2022-08-04Make tlsext_*_{build,needs,parse}() functions staticTheo Buehler
2022-07-24Rely on tlsext_parse() to set a decode_error alertTheo Buehler
2022-07-22Remove redundant length checks in parse functionsTheo Buehler
2022-07-20Simplify tlsext_supported_groups_server_parseTheo Buehler
2022-07-20Drop some unnecessary parentheses.Theo Buehler
2022-07-20Copy alpn_selected using CBSTheo Buehler
2022-07-20Factor out ALPN extension format checkTheo Buehler
2022-07-17Correct handling of QUIC transport parameters extension.Joel Sing
2022-07-17Correct TLSEXT_TYPE_quic_transport_parameters message types.Joel Sing
2022-07-02Stop using ssl{_ctx,}_security() outside of ssl_seclevel.cTheo Buehler
2022-07-02Rename uses 'curve' to 'group' and rework tls1 group API.Theo Buehler
2022-06-30Check security level for supported groups.Theo Buehler
2022-06-30Check whether the security level allows session tickets.Theo Buehler
2022-06-29Add support for sending QUIC transport parametersBob Beck
2022-06-29Check the security level when building sigalgsTheo Buehler
2022-06-04The parse stubs need to skip over the extension data.Theo Buehler
2022-06-03Add stubbed out handlers for the pre_shared_key extensionTheo Buehler
2022-06-03Implement handlers for the psk_key_exchange_modes extensions.Theo Buehler
2022-02-05Bye bye S3I.Joel Sing
2022-01-24Avoid use of uninitialized in tlsext_sni_server_parse()Theo Buehler
2022-01-11Plumb decode errors through key share parsing code.Joel Sing
2022-01-11Use SSL_AD_INTERNAL_ERROR for non-decoding alerts when parsing keyshares.Joel Sing
2022-01-11Simplify tlsext_keyshare_server_parse()Joel Sing
2022-01-06Convert legacy TLS client to tls_key_share.Joel Sing
2022-01-05Rename tls13_key_share to tls_key_share.Joel Sing
2022-01-04Pull key share group/length CBB code up from tls13_key_share_public()Joel Sing
2022-01-04Only allow zero length key shares when we know we're doing HRR.Joel Sing
2021-11-01Improve SNI hostname validation.Joel Sing
2021-10-25Fold SSL_SESSION_INTERNAL back into SSL_SESSION.Joel Sing
2021-09-10Do not ignore SSL_TLSEXT_ERR_FATAL from the ALPN callbackTheo Buehler
2021-09-02Correct the is_server flag in the call to the debug callback to be correct.Bob Beck
2021-06-29Use appropriate TLS version when building client sigalg extensions.Joel Sing
2021-06-27Change ssl_sigalgs_build() to perform sigalg list selection.Joel Sing
2021-06-11Only use SSL_AD_* internally.Joel Sing
2021-06-08Simplify tlsext_ecpf_parse()Theo Buehler
2021-06-08Adjust alert for ECPF without uncompressed point formatTheo Buehler
2021-05-16Make local header inclusion consistent.Joel Sing
2021-05-16Explicitly include <openssl/opensslconf.h> in files using OPENSSL_NO_*Joel Sing
2021-04-22Only hash known CH extensionsTheo Buehler
2021-03-29Move finished and peer finished to the handshake struct.Joel Sing
2021-03-21Move the TLSv1.3 handshake struct inside the shared handshake struct.Joel Sing
2021-03-10Improve internal version handling.Joel Sing
2021-02-08Remove bogus DTLS checks to disable ECC and OCSP.Joel Sing
2020-10-14Replace SSL_IS_DTLS with SSL_is_dtls().Joel Sing
2020-10-11Constipate srtp_known_profiles, pushing it into .data.rel.roPhilip Guenther
2020-10-11Constipate ssl3_ciphers and tls1[23]_sigalgs*, pushing them intoPhilip Guenther
2020-09-09Set alpn_selected_len = 0 when alpn_selected is NULLKinichiro Inoguchi
2020-08-03Only parse a client's status_request in the CHTheo Buehler
2020-08-03Ensure clients only send a status_request in the CHTheo Buehler