1. a5bb1aa Clear alpn_selected_len for clients, too by Benjamin Kaduk · 8 years ago
  2. e0926ef De-obfuscate by Benjamin Kaduk · 8 years ago
  3. aebe9e3 Fix some -Wshadow warnings by Benjamin Kaduk · 8 years ago
  4. d61461a Use the callbacks from the SSL object instead of the SSL_CTX object by Pauli · 8 years ago
  5. d3bc980 Avoid questionable use of the value of a pointer by Bernd Edlinger · 8 years ago
  6. 42c28b6 Use the new TLSv1.3 certificate_required alert where appropriate by Matt Caswell · 8 years ago
  7. 652a6b7 Check that the PSK extension is last by Matt Caswell · 8 years ago
  8. 0b1f266 Fixup previous merge. by Bernd Edlinger · 8 years ago
  9. 6aad939 this change will prevent undefined behavior when src and dst are equal (memcpy), effectively allowing setting length only in both functions. by Roberto Guimaraes · 8 years ago
  10. 4f7b76b Fix no-comp by Matt Caswell · 8 years ago
  11. 524420d Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundary by Matt Caswell · 8 years ago
  12. b8c4961 Provide a function to test whether we have unread records pending by Matt Caswell · 8 years ago
  13. 9015d34 Get pointer type right in BIO_ssl_shutdown() by Rich Salz · 8 years ago
  14. 4321969 Tweak the TLSv1.3 record overflow limits by Matt Caswell · 8 years ago
  15. febb0af Fix double free in cookie generation. by Kurt Roeckx · 8 years ago
  16. e6941c7 Don't call memcmp with a NULL pointer by Matt Caswell · 8 years ago
  17. cfef502 Add basic TLSv1.3 cookie support by Matt Caswell · 8 years ago
  18. 312e938 Fix a memory leak on an error path by Matt Caswell · 8 years ago
  19. 5528d68 Set specific error is we have no valid signature algorithms set by Dr. Stephen Henson · 8 years ago
  20. b0e9ab9 Signature algorithm enhancement. by Dr. Stephen Henson · 8 years ago
  21. 8f12296 Disallow zero length signature algorithms by Dr. Stephen Henson · 8 years ago
  22. 224b4e3 Don't allow DSA for TLS 1.3 by Dr. Stephen Henson · 8 years ago
  23. 42f50fd Silence some more clang warnings by Matt Caswell · 8 years ago
  24. 30d1bab Silence some clang warnings by Matt Caswell · 8 years ago
  25. 09f2887 Update early data API for writing to unauthenticated clients by Matt Caswell · 8 years ago
  26. 0665b4e Rename SSL_write_early() to SSL_write_early_data() by Matt Caswell · 8 years ago
  27. f533fbd Rename SSL_read_early() to SSL_read_early_data() by Matt Caswell · 8 years ago
  28. 3eaa417 Make SSL_write_early_finish() an internal only function by Matt Caswell · 8 years ago
  29. f7e393b Various fixes required to allow SSL_write/SSL_read during early data by Matt Caswell · 8 years ago
  30. d7f8783 Enable the server to call SSL_write() without stopping the ability to call SSL_read_early() by Matt Caswell · 8 years ago
  31. 564547e Enable the client to call SSL_read() without stopping the ability to call SSL_write_early() by Matt Caswell · 8 years ago
  32. 4004ce5 Introduce a new early_data state in the state machine by Matt Caswell · 8 years ago
  33. bc908c6 Improve the early data sanity check in SSL_do_handshake() by Matt Caswell · 8 years ago
  34. 0a5ece5 Tighten sanity checks when calling early data functions by Matt Caswell · 8 years ago
  35. f5b519c Make SSL_get_early_data_status() take a const by Matt Caswell · 8 years ago
  36. 46dcb94 Make SSL_get_max_early_data() and SSL_CTX_get_max_early_data() take a const by Matt Caswell · 8 years ago
  37. fcc4757 Add a SSL_SESSION_get_max_early_data() function by Matt Caswell · 8 years ago
  38. 7daf715 Don't attempt to write more early_data than we know the server will accept by Matt Caswell · 8 years ago
  39. f637004 Only accept early_data if the negotiated ALPN is the same by Matt Caswell · 8 years ago
  40. a832b5e Skip early_data if appropriate after a HelloRetryRequest by Matt Caswell · 8 years ago
  41. 38df5a4 Don't accept early_data if we are going to issue a HelloRetryRequest by Matt Caswell · 8 years ago
  42. 538bea6 Add extra validation parsing the server-to-client early_data extension by Matt Caswell · 8 years ago
  43. 329114f Remove some TLSv1.3 TODOs that are no longer relevant by Matt Caswell · 8 years ago
  44. 2c604cb Validate the ticket age for resumed sessions by Matt Caswell · 8 years ago
  45. bfa9a9a Provide a default value for max_early_data by Matt Caswell · 8 years ago
  46. 70ef40a Check max_early_data against the amount of early data we actually receive by Matt Caswell · 8 years ago
  47. 67f78ea Make sure we reset the read sequence when skipping records by Matt Caswell · 8 years ago
  48. 1010936 Disallow handshake messages in the middle of early_data by Matt Caswell · 8 years ago
  49. c117af6 Fix seg fault when sending early_data using CCM ciphersuites by Matt Caswell · 8 years ago
  50. b2cc7f3 Implement client side parsing of the early_data extension by Matt Caswell · 8 years ago
  51. fe5e20f Fix changing of the cipher state when dealing with early data by Matt Caswell · 8 years ago
  52. 1ea4d09 Construct the server side early_data extension by Matt Caswell · 8 years ago
  53. d781d24 Provide an SSL_read_early() function for reading early data by Matt Caswell · 8 years ago
  54. 6cb4226 Change the cipher state when sending early data by Matt Caswell · 8 years ago
  55. d49e23e Implement the early data changes required in tls13_change_cipher_state() by Matt Caswell · 8 years ago
  56. 0a87d0a Parse the early_data extension by Matt Caswell · 8 years ago
  57. a4f376a Construct the early_data extension by Matt Caswell · 8 years ago
  58. 49e7fe1 Provide functions to write early data by Matt Caswell · 8 years ago
  59. 5d5b3fb Parse the ticket_early_data_info extension by Matt Caswell · 8 years ago
  60. 29fac54 Teach SSL_trace() about the early_data_info extension by Matt Caswell · 8 years ago
  61. 3fc8d85 Construct the ticket_early_data_info extension by Matt Caswell · 8 years ago
  62. f33f9dd Fix a compression bug by Matt Caswell · 8 years ago
  63. c19602b Ensure that we never select compression in TLSv1.3 by Matt Caswell · 8 years ago
  64. a3004c8 Check for zero records and return immediately by Jon Spillett · 8 years ago
  65. 607c926 Code health: ssl/ssl_locl.h unused macros by Andy · 8 years ago
  66. 2f0ca54 Remove some obsolete/obscure internal define switches: by Emilia Kasper · 8 years ago
  67. 38f2837 Remove some commented out code in libssl by Matt Caswell · 8 years ago
  68. 2722ff5 Remove some #if 0 code in ssl, crypto/bio by Todd Short · 8 years ago
  69. 14097b6 Code health: Stop using timeb.h / ftime() (VMS only) by Richard Levitte · 8 years ago
  70. b53338c Clean up references to FIPS by Emilia Kasper · 8 years ago
  71. fa7e9ed Remove unnecessary memset after PR #2583 avoids accessing by Bernd Edlinger · 8 years ago
  72. df15c84 Remove some dead code from libssl by Matt Caswell · 8 years ago
  73. fa64210 Trace support for TLS 1.3 certificate request message by Dr. Stephen Henson · 8 years ago
  74. 03f44b9 Initial incomplete TLS 1.3 certificate request support. by Dr. Stephen Henson · 8 years ago
  75. 26a556e Add missing blank lines and cosmetic improvements by Dr. Stephen Henson · 8 years ago
  76. 5032abd TLS 1.3 support for ssl_print_ticket() by Dr. Stephen Henson · 8 years ago
  77. 2621235 print out alpn extension by Dr. Stephen Henson · 8 years ago
  78. 5243484 Add ffdhe groups to trace output by Dr. Stephen Henson · 8 years ago
  79. b9d7199 Print numerical value of named roups by Dr. Stephen Henson · 8 years ago
  80. f1dae5f Add entry for PSK extension by Dr. Stephen Henson · 8 years ago
  81. 6e7c553 Add trace entries for remaining TLS 1.3 ciphersuites by Dr. Stephen Henson · 8 years ago
  82. 095a982 For TLS 1.3 reject SHA1 TLS signatures by Dr. Stephen Henson · 8 years ago
  83. e892e32 Reject compressed point format with TLS 1.3 by Dr. Stephen Henson · 8 years ago
  84. 599b586 Add SuiteB support to tls_choose_sigalg() by Dr. Stephen Henson · 8 years ago
  85. 75c13e7 Tidy up certificate type handling. by Dr. Stephen Henson · 8 years ago
  86. 4ee7d3f Implement SSL_read_ex() and SSL_write_ex() as documented. by Kurt Roeckx · 8 years ago
  87. 6b1bb98 Add SSL_CTX early callback by Benjamin Kaduk · 8 years ago
  88. ddf9725 Prepare for WORK_MORE_C by Benjamin Kaduk · 8 years ago
  89. 90134d9 Refactor SSL_bytes_to_cipher_list() by Benjamin Kaduk · 8 years ago
  90. ccb8e6e Export SSL_bytes_to_cipher_list() by Benjamin Kaduk · 8 years ago
  91. 60d685d Let ssl_get_cipher_by_char yield not-valid ciphers by Benjamin Kaduk · 8 years ago
  92. 650c6e4 Add more first-class support for SCSVS by Benjamin Kaduk · 8 years ago
  93. cb7a1f5 Move CLIENTHELLO_MSG up in the header by Benjamin Kaduk · 8 years ago
  94. 26f4268 Store the number of extensions in CLIENTHELLO_MSG by Benjamin Kaduk · 8 years ago
  95. fc5ece2 output number of exts from tls_collect_extensions() by Benjamin Kaduk · 8 years ago
  96. 79020b2 Add some more consistency checks in tls_decrypt_ticket. by Bernd Edlinger · 8 years ago
  97. a0179d0 Fix i2d_SSL_SESSION pp output parameter should point to end of asn1 data. by Bernd Edlinger · 8 years ago
  98. 38e8f3c Check validity, not just signing for all certificates by Dr. Stephen Henson · 8 years ago
  99. a8bb912 Set default validity flags. by Dr. Stephen Henson · 8 years ago
  100. 9195ddc remove md array: it is not used any more. by Dr. Stephen Henson · 8 years ago