1. d3bc980 Avoid questionable use of the value of a pointer by Bernd Edlinger · 8 years ago
  2. 0b1f266 Fixup previous merge. by Bernd Edlinger · 8 years ago
  3. 5528d68 Set specific error is we have no valid signature algorithms set by Dr. Stephen Henson · 8 years ago
  4. b0e9ab9 Signature algorithm enhancement. by Dr. Stephen Henson · 8 years ago
  5. 8f12296 Disallow zero length signature algorithms by Dr. Stephen Henson · 8 years ago
  6. 224b4e3 Don't allow DSA for TLS 1.3 by Dr. Stephen Henson · 8 years ago
  7. 095a982 For TLS 1.3 reject SHA1 TLS signatures by Dr. Stephen Henson · 8 years ago
  8. e892e32 Reject compressed point format with TLS 1.3 by Dr. Stephen Henson · 8 years ago
  9. 599b586 Add SuiteB support to tls_choose_sigalg() by Dr. Stephen Henson · 8 years ago
  10. 75c13e7 Tidy up certificate type handling. by Dr. Stephen Henson · 8 years ago
  11. 79020b2 Add some more consistency checks in tls_decrypt_ticket. by Bernd Edlinger · 8 years ago
  12. a8bb912 Set default validity flags. by Dr. Stephen Henson · 8 years ago
  13. 9195ddc remove md array: it is not used any more. by Dr. Stephen Henson · 8 years ago
  14. 5a8916d Explicitly disallow DSA for TLS 1.3 by Dr. Stephen Henson · 8 years ago
  15. ad4dd36 Use tls_choose_sigalg for client auth. by Dr. Stephen Henson · 8 years ago
  16. 717a265 Add client side support to tls_choose_sigalg. by Dr. Stephen Henson · 8 years ago
  17. 7b3a4d6 Fix warning by Dr. Stephen Henson · 8 years ago
  18. 59088e4 Set current certificate to selected certificate. by Dr. Stephen Henson · 8 years ago
  19. a34a9df Skip curve check if sigalg doesn't specify a curve. by Dr. Stephen Henson · 8 years ago
  20. a497cf2 Use CERT_PKEY pointer instead of index by Dr. Stephen Henson · 8 years ago
  21. f365a3e Use cert_index and sigalg by Dr. Stephen Henson · 8 years ago
  22. 0972bc5 Add sigalg for earlier TLS versions by Dr. Stephen Henson · 8 years ago
  23. 4a419f6 Change tls_choose_sigalg so it can set errors and alerts. by Dr. Stephen Henson · 8 years ago
  24. 57b0d65 Use TLSEXT_KEYNAME_LENGTH in tls_decrypt_ticket. by Bernd Edlinger · 8 years ago
  25. d0ff28f Replace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGN by Dr. Stephen Henson · 8 years ago
  26. 8fd19b2 Check index >= 0 as 0 is a valid index. by Dr. Stephen Henson · 8 years ago
  27. 6d047e0 SSL_get_shared_sigalgs: handle negative idx parameter by Peter Wu · 8 years ago
  28. 21f198e Fix "no-ec" by Richard Levitte · 8 years ago
  29. 93a77f9 Add function tls_choose_sigalg(). by Dr. Stephen Henson · 8 years ago
  30. 222da97 Majority rules, use session_ctx vs initial_ctx by Todd Short · 8 years ago
  31. f1adb00 Tidy up Suite B logic by Dr. Stephen Henson · 8 years ago
  32. 6cbebb5 Remove peer_md and use peer_sigalg instead. by Dr. Stephen Henson · 8 years ago
  33. 44b6318 Simplify sigalgs code. by Dr. Stephen Henson · 8 years ago
  34. 17ae384 Add digest and key indices to table. by Dr. Stephen Henson · 8 years ago
  35. 8f88cb5 Add TLS 1.3 signing curve check by Dr. Stephen Henson · 8 years ago
  36. 2b4418e Only allow PSS signatures with RSA keys and TLS 1.3 by Dr. Stephen Henson · 8 years ago
  37. f742cda Store table entry to peer signature algorithm. by Dr. Stephen Henson · 8 years ago
  38. 787ebca Update macros. by Dr. Stephen Henson · 8 years ago
  39. cdf516d Fix TLS 1.2 and no sigalgs. by Dr. Stephen Henson · 8 years ago
  40. 4d43ee2 Replace TLS_SIGALGS with SIGALG_LOOKUP by Dr. Stephen Henson · 8 years ago
  41. 8a43a42 Support TLS 1.3 signature scheme names. by Dr. Stephen Henson · 8 years ago
  42. edbfba1 Extend TLS 1.3 signature table. by Dr. Stephen Henson · 8 years ago
  43. 018031f Use shared signature algorithm list to find type. by Dr. Stephen Henson · 8 years ago
  44. 42ef7ae Add SSL_get_peer_signature_type_nid() function. by Dr. Stephen Henson · 8 years ago
  45. 5554fac Store peer signature type. by Dr. Stephen Henson · 8 years ago
  46. b2eb699 More complete PSS support. by Dr. Stephen Henson · 8 years ago
  47. 98c792d Use uint16_t for signature scheme. by Dr. Stephen Henson · 8 years ago
  48. 40f805a Various style fixes following review feedback by Matt Caswell · 8 years ago
  49. 61c3264 Remove unneccessary comments by Matt Caswell · 8 years ago
  50. ddf6ec0 Make the "ticket" function return codes clearer by Matt Caswell · 8 years ago
  51. 0819129 Use the correct session resumption mechanism by Matt Caswell · 8 years ago
  52. 1053a6e Implement Server side of PSK extension parsing by Matt Caswell · 8 years ago
  53. a9669dd Use correct signature algorithm list when sending or checking. by Dr. Stephen Henson · 8 years ago
  54. 3e37351 If client doesn't send curves list, don't assume all. by Rich Salz · 8 years ago
  55. 5eeb6c6 Fix no-ec following sigalgs refactor by Matt Caswell · 8 years ago
  56. 7a531ee Fix tls1_set_sigalgs() length calculation by Matt Caswell · 8 years ago
  57. 42ab223 Add some missing sigalgs by Matt Caswell · 8 years ago
  58. 1b520cb Fix a Travis failure by Matt Caswell · 8 years ago
  59. fe3066e Extend PSS signature support to TLSv1.2 by Matt Caswell · 8 years ago
  60. 710eb47 Add a TLS1.3 TODO for setting of sig algs by Matt Caswell · 8 years ago
  61. 523fb32 Ignore PKCS1 based sig algs in TLSv1.3 by Matt Caswell · 8 years ago
  62. 0490431 Verify that the sig algs extension has been sent for TLSv1.3 by Matt Caswell · 8 years ago
  63. 63c1df0 Remove some unneeded functions by Matt Caswell · 8 years ago
  64. 536199e Use NIDs instead of the old TLSv1.2 sigalgs hash and sig ids by Matt Caswell · 8 years ago
  65. 2ec6cb3 Remove a redundant function by Matt Caswell · 8 years ago
  66. 703bcee Convert Sigalgs processing to use ints by Matt Caswell · 8 years ago
  67. aff8c12 Move extension data into sub-structs by Rich Salz · 8 years ago
  68. 70af3d8 Avoid repeatedly scanning the list of extensions by Matt Caswell · 8 years ago
  69. ab83e31 Move client construction of ClientHello extensions into new framework by Matt Caswell · 8 years ago
  70. 6dd083f Move client parsing of ServerHello extensions into new framework by Matt Caswell · 8 years ago
  71. 7da160b Move ServerHello extension construction into the new extensions framework by Matt Caswell · 8 years ago
  72. 6b473ac Refactor ClientHello extension parsing by Matt Caswell · 8 years ago
  73. bebc0c7 Use the TLSv1.3 nonce construction by Matt Caswell · 8 years ago
  74. 884a790 Fix missing NULL checks in key_share processing by Matt Caswell · 8 years ago
  75. f5ca0b0 Fix some style issues identified during review by Matt Caswell · 8 years ago
  76. c805f61 Fix SSL_IS_TLS13(s) by Matt Caswell · 8 years ago
  77. 92760c2 Update state machine to be closer to TLS1.3 by Matt Caswell · 8 years ago
  78. 9362c93 Remove old style NewSessionTicket from TLSv1.3 by Matt Caswell · 8 years ago
  79. 9a51988 Move getting the curvelist for client and server out of the loop by Matt Caswell · 8 years ago
  80. 94ed2c6 Fixed various style issues in the key_share code by Matt Caswell · 8 years ago
  81. 323f212 Check key_exchange data length is not 0 by Matt Caswell · 8 years ago
  82. 2ee1271 Ensure the whole key_share extension is well formatted by Matt Caswell · 8 years ago
  83. ef7daaf Validate that the provided key_share is in supported_groups by Matt Caswell · 8 years ago
  84. 0f1e51e Start using the key_share data to derive the PMS by Matt Caswell · 8 years ago
  85. d7c42d7 Add processing of the key_share received in the ServerHello by Matt Caswell · 8 years ago
  86. bcec335 Add key_share info to the ServerHello by Matt Caswell · 8 years ago
  87. b1834ad Add the key_share processing to the server side by Matt Caswell · 8 years ago
  88. d2c27a2 Generate the key_shares extension on the client side by Matt Caswell · 8 years ago
  89. e72040c Remove heartbeat support by Richard Levitte · 8 years ago
  90. de4d764 Rename the Elliptic Curves extension to supported_groups by Matt Caswell · 8 years ago
  91. f2342b7 Address some supported_versions review comments by Matt Caswell · 8 years ago
  92. 16bce0e Address some review feedback comments for supported_versions by Matt Caswell · 8 years ago
  93. cd99883 Add server side support for supported_versions extension by Matt Caswell · 8 years ago
  94. b5b253b Add the ability to send the supported_versions extension by Matt Caswell · 8 years ago
  95. 902aca0 Make some CLIENTHELLO_MSG function arguments const by Matt Caswell · 8 years ago
  96. 3d33f3b Update a comment by Matt Caswell · 8 years ago
  97. 6438632 Add some function documentation and update some existing comments by Matt Caswell · 8 years ago
  98. de7d61d Improve some comment documentation following the extensions refactor by Matt Caswell · 8 years ago
  99. b1b4b54 Fix various style issues in the extension parsing refactor by Matt Caswell · 8 years ago
  100. 1ab3836 Refactor ClientHello processing so that extensions get parsed earlier by Matt Caswell · 8 years ago