Sign in
flutter
/
third_party
/
openssl
/
9d75dce3e1f94be6006500089491cb3284f70d06
/
ssl
/
statem
/
extensions_srvr.c
9d75dce
Add TLSv1.3 post-handshake authentication (PHA)
by Todd Short
· 7 years ago
c589c34
Add support for the TLS 1.3 signature_algorithms_cert extension
by Benjamin Kaduk
· 7 years ago
97ea1e7
Updates following review of SSL_stateless() code
by Matt Caswell
· 7 years ago
d0debc0
Add a timestamp to the cookie
by Matt Caswell
· 7 years ago
dd77962
Fix the cookie/key_share extensions for use with SSL_stateless()
by Matt Caswell
· 7 years ago
c36001c
Fix logic around when to send an HRR based on cookies
by Matt Caswell
· 7 years ago
43054d3
Add support for sending TLSv1.3 cookies
by Matt Caswell
· 7 years ago
56d3628
Remove spaces at end of line in ssl/statem
by Paul Yang
· 7 years ago
fc7129d
Update state machine to send CCS based on whether we did an HRR
by Matt Caswell
· 7 years ago
88050dd
Update ServerHello to new draft-22 format
by Matt Caswell
· 7 years ago
2894e9c
Fix bug in TLSv1.3 PSK processing
by Matt Caswell
· 7 years ago
29bfd5b
Add some more cleanups
by Matt Caswell
· 7 years ago
635c8f7
Fix up a few places in the state machine that got missed with SSLfatal()
by Matt Caswell
· 7 years ago
3ec8d11
Convert remaining functions in statem_srvr.c to use SSLfatal()
by Matt Caswell
· 7 years ago
f63a17d
Convert the state machine code to use SSLfatal()
by Matt Caswell
· 7 years ago
cf72c75
Implement Maximum Fragment Length TLS extension.
by FdaSilvaYY
· 7 years ago
f48d826
Change curves to groups where relevant
by Dr. Stephen Henson
· 7 years ago
ff6d20a
Use separate functions for supported and peer groups lists
by Dr. Stephen Henson
· 7 years ago
34e5292
Rename tls1_get_curvelist.
by Dr. Stephen Henson
· 8 years ago
612f9d2
New function ssl_generate_param_group
by Dr. Stephen Henson
· 8 years ago
43b95d7
Replace tls1_ec_curve_id2nid.
by Dr. Stephen Henson
· 8 years ago
9e84a42
Store groups as uint16_t
by Dr. Stephen Henson
· 8 years ago
630369d
Add server side sanity checks of SNI/ALPN for use with early_data
by Matt Caswell
· 8 years ago
add8d0e
Enable the ability to use an external PSK for sending early_data
by Matt Caswell
· 8 years ago
44e6995
Fix some Typos and indents
by FdaSilvaYY
· 8 years ago
e374335
Don't modify resumed session objects
by Benjamin Kaduk
· 8 years ago
d4504fe
Fix early_data with an HRR
by Matt Caswell
· 8 years ago
e3c0d76
Do not allow non-dhe kex_modes by default
by Matt Caswell
· 8 years ago
011d768
Fix some bugs in the TLSv1.3 PSK code
by Matt Caswell
· 8 years ago
3a7c56b
Add TLSv1.3 server side external PSK support
by Matt Caswell
· 8 years ago
0de6d66
Move ciphersuite selection before session resumption in TLSv1.3
by Matt Caswell
· 8 years ago
db0f35d
Fix #2400 Add NO_RENEGOTIATE option
by Todd Short
· 8 years ago
fb34a0f
Try to be more consistent about the alerts we send
by Matt Caswell
· 8 years ago
b186a59
Fail if we receive a response to an extension that we didn't request
by Matt Caswell
· 8 years ago
b6fdc12
Send a missing_extension alert if key_share/supported groups not present
by Matt Caswell
· 8 years ago
721586e
Fix some alert codes
by Matt Caswell
· 8 years ago
cf53cbe
Fix 'no-ec'
by Richard Levitte
· 8 years ago
12635aa
Updates to supported_groups following review feedback
by Matt Caswell
· 8 years ago
6af8754
Send the supported_groups extension in EE where applicable
by Matt Caswell
· 8 years ago
d1186c3
Fix minor compiler issues.
by Todd Short
· 8 years ago
fe874d2
Move the extensions context codes into the public API
by Matt Caswell
· 8 years ago
6594189
Merge early_data_info extension into early_data
by Matt Caswell
· 8 years ago
312e938
Fix a memory leak on an error path
by Matt Caswell
· 8 years ago
30d1bab
Silence some clang warnings
by Matt Caswell
· 8 years ago
38df5a4
Don't accept early_data if we are going to issue a HelloRetryRequest
by Matt Caswell
· 8 years ago
2c604cb
Validate the ticket age for resumed sessions
by Matt Caswell
· 8 years ago
1ea4d09
Construct the server side early_data extension
by Matt Caswell
· 8 years ago
0a87d0a
Parse the early_data extension
by Matt Caswell
· 8 years ago
3fc8d85
Construct the ticket_early_data_info extension
by Matt Caswell
· 8 years ago
28a31a0
Don't change the state of the ETM flags until CCS processing
by Matt Caswell
· 8 years ago
aff9929
Implement support for resumption with a HelloRetryRequest
by Matt Caswell
· 8 years ago
7d061fc
Add server side support for creating the Hello Retry Request message
by Matt Caswell
· 8 years ago
6113835
Make the context available to the extensions parse and construction funcs
by Matt Caswell
· 8 years ago
1b8bacf
Add a TODO around validating the ticket age
by Matt Caswell
· 8 years ago
1a9f457
If we have no suitable PSK kex modes then don't attempt to resume
by Matt Caswell
· 8 years ago
1f5b44e
Miscellaneous style tweaks based on feedback received
by Matt Caswell
· 8 years ago
534a43f
Always ensure that session->cipher is set
by Matt Caswell
· 8 years ago
0247086
Implement server side of PSK extension construction
by Matt Caswell
· 8 years ago
1053a6e
Implement Server side of PSK extension parsing
by Matt Caswell
· 8 years ago
f4bbb37
Provide a key_share extension finaliser
by Matt Caswell
· 8 years ago
b2f7e8c
Add support for the psk_key_exchange_modes extension
by Matt Caswell
· 8 years ago
c7f4778
Move state machine knowledge out of the record layer
by Matt Caswell
· 8 years ago
703bcee
Convert Sigalgs processing to use ints
by Matt Caswell
· 8 years ago
aff8c12
Move extension data into sub-structs
by Rich Salz
· 8 years ago
8521ced
Rename the chain variable to chainidx
by Matt Caswell
· 8 years ago
f63e428
Implement TLSv1.3 style CertificateStatus
by Matt Caswell
· 8 years ago
e96e0f8
Create Certificate messages in TLS1.3 format
by Matt Caswell
· 8 years ago
f97d4c3
Extends extension parsing to take the Certificate
by Matt Caswell
· 8 years ago
30aeba4
Extend tls_construct_extensions() to enable passing of a certificate
by Matt Caswell
· 8 years ago
3cf96e8
Fix compilation with no-ec
by Matt Caswell
· 8 years ago
7fe97c0
Fix make update issues
by Matt Caswell
· 8 years ago
cbb0954
Introduce TLSEXT_STATUSTYPE_nothing constant
by Matt Caswell
· 8 years ago
d270de3
Change TLSEXT_IDX_* values into an enum
by Matt Caswell
· 8 years ago
1266eef
Various style updates following extensions refactor
by Matt Caswell
· 8 years ago
8924737
Fix travis mixed declarations and code error
by Matt Caswell
· 8 years ago
a1448c2
Remove some spurious whitespace
by Matt Caswell
· 8 years ago
70af3d8
Avoid repeatedly scanning the list of extensions
by Matt Caswell
· 8 years ago
24b8e4b
Simplify ClientHello extension parsing
by Matt Caswell
· 8 years ago
02f0274
Move ALPN processing into an extension finalisation function
by Matt Caswell
· 8 years ago
805a2e9
Provide server side extension init and finalisation functions
by Matt Caswell
· 8 years ago
ab83e31
Move client construction of ClientHello extensions into new framework
by Matt Caswell
· 8 years ago
6dd083f
Move client parsing of ServerHello extensions into new framework
by Matt Caswell
· 8 years ago
e56c33b
Rename some functions
by Matt Caswell
· 8 years ago
7da160b
Move ServerHello extension construction into the new extensions framework
by Matt Caswell
· 8 years ago
25670f3
Split extensions code into core extensions and server extensions code
by Matt Caswell
· 8 years ago