summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2020-05-11Propagate record overflows to the record layer and alert.Joel Sing
2020-05-11Add record version checks.Joel Sing
2020-05-11Set the record layer legacy version from the TLSv1.3 server.Joel Sing
2020-05-11Provide an alert sent record layer callback.Joel Sing
2020-05-11Move the record layer callbacks into a struct.Joel Sing
2020-05-11Use ssl_get_new_session() in the TLSv1.3 server.Joel Sing
2020-05-10Send dummy ChangeCipherSpec messages from the TLSv1.3 serverTheo Buehler
2020-05-10Honour SSL_VERIFY_FAIL_IF_NO_PEER_CERT in the TLSv1.3 server.Joel Sing
2020-05-10Provide alert defines for TLSv1.3 and use in the TLSv1.3 code.Joel Sing
2020-05-10Provide an easy way to get debug information from TLSv1.3 handshakes.Joel Sing
2020-05-10Use size_t for OCSP response length.Joel Sing
2020-05-10Only reset TLS extension state when parsing client hello or server hello.Joel Sing
2020-05-10Correct tlsext_ocsp_resplen check.Joel Sing
2020-05-09Back out server side CCS sending. It breaks TLSv1.3 client communicationTheo Buehler
2020-05-09Forcibly ensure that only PSS may be used with RSA in TLS 1.3.Bob Beck
2020-05-09Send dummy ChangeCipherSpec messages from the TLSv1.3 serverTheo Buehler
2020-05-09Send dummy ChangeCipherSpec messages from the TLSv1.3 client.Joel Sing
2020-05-09Correct return value check to handle TLS13_IO_EOF case.Joel Sing
2020-05-09Add a middlebox_compat flag and condition session ID randomisation on it.Joel Sing
2020-05-09catch the other place this needs to changeBob Beck
2020-05-09now that 3.1.1 is out the door as a stable release bump the developmentBob Beck
2020-05-09Add support for certificate status requests in TLS 1.3 clientBob Beck
2020-05-09Make the test for the legacy_compression_method vector in the ClientHelloTheo Buehler
2020-05-09Drop a redundant test. It's effectively doing the same test twiceTheo Buehler
2020-05-09On receiving an overlong session ID terminate with an illegal_parameterTheo Buehler
2020-05-09Add support for HelloRetryRequests in the TLSv1.3 server.Joel Sing
2020-05-09crazy whitespace on one lineTheo Buehler
2020-05-09Pull the sending of alerts up into tls13_handshake_perform().Joel Sing
2020-05-09Refactor tls13_server_hello_sent().Joel Sing
2020-05-07On receiving a handshake or alert record with empty inner plaintext,Theo Buehler
2020-05-06Bump LibreSSL version to 3.1.1Theo Buehler
2020-05-03Accept two ChangeCipherSpec messages during a TLSv1.3 handshake.Joel Sing
2020-05-02Add const to TLS1.3 internal vectorsKinichiro Inoguchi
2020-04-30Disallow setting the AES-GCM IV length to 0Theo Buehler
2020-04-30drop duplicate word;Ingo Schwarze
2020-04-30If no "xxx.mute" control is found, try "xxx_mute"Alexandre Ratchov
2020-04-29tls13_record_layer internal functions to static in libsslKinichiro Inoguchi
2020-04-29tls13_handshake internal functions to static in libsslKinichiro Inoguchi
2020-04-28Move legacy stack interfacing functions into tls13_legacy.c.Joel Sing
2020-04-28Rename tls13_client_synthetic_handshake_message() and move to tls13_lib.c.Joel Sing
2020-04-27Shuffle some functions around.Joel Sing
2020-04-27Disallow the use of zero length IVs in AES-GCM viaTheo Buehler
2020-04-26Minimal maintenance to make this mess slightly less confusing:Ingo Schwarze
2020-04-26fix the description; from andras farkasJason McIntyre
2020-04-25A comma is not appropriate here, use a semicolonJeremie Courreges-Anglas
2020-04-25Switch to NEGOTIATED when using WITHOUT_HRR.Joel Sing
2020-04-25Discourage use of RES_USE_INET6Jeremie Courreges-Anglas
2020-04-25Fix RES_USE_INET6 descriptionJeremie Courreges-Anglas
2020-04-25Move unsupported, obsolete ciphers and deprecated aliases out ofIngo Schwarze
2020-04-25tweak the wording to make it clearer under which conditions exactlyIngo Schwarze