summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2022-01-04Refactor ssl3_get_server_kex_ecdhe() to separate parsing and validation.Joel Sing
2022-01-04Pull key share group/length CBB code up from tls13_key_share_public()Joel Sing
2022-01-04Only allow zero length key shares when we know we're doing HRR.Joel Sing
2021-12-26Hoist memset of CBB above EVP_MD_CTX_new() and HMAC_CTX_new() to avoidTheo Buehler
2021-12-26Correct SSL_get_peer_cert_chain() when used with the TLSv1.3 stack.Joel Sing
2021-12-16unifdef TLS13_USE_LEGACY_CLIENT_AUTHTheo Buehler
2021-12-15Use CBS_get_last_u8() to find the content type in TLSv1.3 records.Joel Sing
2021-12-15Provide various CBS_peek_* functions.Joel Sing
2021-12-15Provide CBS_get_u64().Joel Sing
2021-12-15Provide CBS_get_last_u8().Joel Sing
2021-12-09Convert t1_enc.c to opaque EVP_MD_CTX.Theo Buehler
2021-12-09Convert ssl_srvr.c to opaque EVP_MD_CTX.Theo Buehler
2021-12-09Convert ssl_clnt.c to opaque EVP_MD_CTXTheo Buehler
2021-12-09Convert s3_cbc.c to opaque EVP_MD_CTX.Theo Buehler
2021-12-04Clean up and refactor server side DHE key exchange.Joel Sing
2021-12-04Move the minimum DHE key size check into ssl_kex_peer_params_dhe()Joel Sing
2021-12-04Check DH public key in ssl_kex_peer_public_dhe().Joel Sing
2021-11-30Align ssl_kex_derive_ecdhe_ecp() with ssl_kex_derive_dhe()Theo Buehler
2021-11-30s/ECDHE/ECDH/Joel Sing
2021-11-29First pass of converting ssl_kex.c to opaque DH.Theo Buehler
2021-11-29Stop using BIO_s_file_inernal() in libssl.Theo Buehler
2021-11-29Convert server serialisation of DHE parameters/public key to new functions.Joel Sing
2021-11-29Factor out/rewrite DHE key exchange.Joel Sing
2021-11-26Stop reaching into EVP_PKEY in the rest of libssl.Theo Buehler
2021-11-26Simplify two weirdly formatted pieces of code in ssl_rsa.c and stopTheo Buehler
2021-11-26spellingJonathan Gray
2021-11-23Transform a mangled comment into something intelligible.Theo Buehler
2021-11-19libssl: don't reach for pkey->save_type.Theo Buehler
2021-11-14Fix a strange check in the auto DH codepathTheo Buehler
2021-11-09Switch to <endian.h> from <machine/endian.h> for better portability.Brent Cook
2021-11-08Replace <sys/limits.h> with <limits.h>Brent Cook
2021-11-02Do not take the strlen() of a NULL name. Defer the CBS_init() to later.Theo Buehler
2021-11-01Ensure SSL_set_tlsext_host_name() is given a valid hostname.Joel Sing
2021-11-01Improve SNI hostname validation.Joel Sing
2021-11-01Unifdef LIBRESSL_NEW_API. Now that the library is bumped, this isTheo Buehler
2021-10-31Bump majors after struct visibility changes, symbol removal and symbolTheo Buehler
2021-10-31Update Symbols.list to include API additionsTheo Buehler
2021-10-31libssl: stop reaching into the X509 struct and simplify some code byTheo Buehler
2021-10-31Add explicit CBS_contains_zero_byte() check in CBS_strdup().Joel Sing
2021-10-27Fix HISTORY section: 6.9 -> 7.0Theo Buehler
2021-10-25sort. alphanumerics have lower ASCII values than '_'Theo Buehler
2021-10-25Install SSL_read_early_data.3. I should have done this during the lastTheo Buehler
2021-10-25Add record processing limit to DTLS code.Joel Sing
2021-10-25Use ssl_force_want_read() in the DTLS code.Joel Sing
2021-10-25Fold SSL_SESSION_INTERNAL back into SSL_SESSION.Joel Sing
2021-10-24merge documentation for SSL_read_ex(3), SSL_peek_ex(3), and SSL_write_ex(3)Ingo Schwarze
2021-10-24Don't leak internal->verfied_chain, clean it up in ssl3_clear and free.Bob Beck
2021-10-23Add SSL_get0_verified_chain - needed by some new stuffBob Beck
2021-10-23fix wrong and missing return types and wrong macros in the SYNOPSIS;Ingo Schwarze
2021-10-23Add new OpenSSL API SSL_CTX_set_num_tickets and friends.Bob Beck