Sign in
flutter
/
third_party
/
openssl
/
db0e0abb88b6bd5bfa5637ee84e59dcb5a232008
/
ssl
a5bb1aa
Clear alpn_selected_len for clients, too
by Benjamin Kaduk
· 8 years ago
e0926ef
De-obfuscate
by Benjamin Kaduk
· 8 years ago
aebe9e3
Fix some -Wshadow warnings
by Benjamin Kaduk
· 8 years ago
d61461a
Use the callbacks from the SSL object instead of the SSL_CTX object
by Pauli
· 8 years ago
d3bc980
Avoid questionable use of the value of a pointer
by Bernd Edlinger
· 8 years ago
42c28b6
Use the new TLSv1.3 certificate_required alert where appropriate
by Matt Caswell
· 8 years ago
652a6b7
Check that the PSK extension is last
by Matt Caswell
· 8 years ago
0b1f266
Fixup previous merge.
by Bernd Edlinger
· 8 years ago
6aad939
this change will prevent undefined behavior when src and dst are equal (memcpy), effectively allowing setting length only in both functions.
by Roberto Guimaraes
· 8 years ago
4f7b76b
Fix no-comp
by Matt Caswell
· 8 years ago
524420d
Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundary
by Matt Caswell
· 8 years ago
b8c4961
Provide a function to test whether we have unread records pending
by Matt Caswell
· 8 years ago
9015d34
Get pointer type right in BIO_ssl_shutdown()
by Rich Salz
· 8 years ago
4321969
Tweak the TLSv1.3 record overflow limits
by Matt Caswell
· 8 years ago
febb0af
Fix double free in cookie generation.
by Kurt Roeckx
· 8 years ago
e6941c7
Don't call memcmp with a NULL pointer
by Matt Caswell
· 8 years ago
cfef502
Add basic TLSv1.3 cookie support
by Matt Caswell
· 8 years ago
312e938
Fix a memory leak on an error path
by Matt Caswell
· 8 years ago
5528d68
Set specific error is we have no valid signature algorithms set
by Dr. Stephen Henson
· 8 years ago
b0e9ab9
Signature algorithm enhancement.
by Dr. Stephen Henson
· 8 years ago
8f12296
Disallow zero length signature algorithms
by Dr. Stephen Henson
· 8 years ago
224b4e3
Don't allow DSA for TLS 1.3
by Dr. Stephen Henson
· 8 years ago
42f50fd
Silence some more clang warnings
by Matt Caswell
· 8 years ago
30d1bab
Silence some clang warnings
by Matt Caswell
· 8 years ago
09f2887
Update early data API for writing to unauthenticated clients
by Matt Caswell
· 8 years ago
0665b4e
Rename SSL_write_early() to SSL_write_early_data()
by Matt Caswell
· 8 years ago
f533fbd
Rename SSL_read_early() to SSL_read_early_data()
by Matt Caswell
· 8 years ago
3eaa417
Make SSL_write_early_finish() an internal only function
by Matt Caswell
· 8 years ago
f7e393b
Various fixes required to allow SSL_write/SSL_read during early data
by Matt Caswell
· 8 years ago
d7f8783
Enable the server to call SSL_write() without stopping the ability to call SSL_read_early()
by Matt Caswell
· 8 years ago
564547e
Enable the client to call SSL_read() without stopping the ability to call SSL_write_early()
by Matt Caswell
· 8 years ago
4004ce5
Introduce a new early_data state in the state machine
by Matt Caswell
· 8 years ago
bc908c6
Improve the early data sanity check in SSL_do_handshake()
by Matt Caswell
· 8 years ago
0a5ece5
Tighten sanity checks when calling early data functions
by Matt Caswell
· 8 years ago
f5b519c
Make SSL_get_early_data_status() take a const
by Matt Caswell
· 8 years ago
46dcb94
Make SSL_get_max_early_data() and SSL_CTX_get_max_early_data() take a const
by Matt Caswell
· 8 years ago
fcc4757
Add a SSL_SESSION_get_max_early_data() function
by Matt Caswell
· 8 years ago
7daf715
Don't attempt to write more early_data than we know the server will accept
by Matt Caswell
· 8 years ago
f637004
Only accept early_data if the negotiated ALPN is the same
by Matt Caswell
· 8 years ago
a832b5e
Skip early_data if appropriate after a HelloRetryRequest
by Matt Caswell
· 8 years ago
38df5a4
Don't accept early_data if we are going to issue a HelloRetryRequest
by Matt Caswell
· 8 years ago
538bea6
Add extra validation parsing the server-to-client early_data extension
by Matt Caswell
· 8 years ago
329114f
Remove some TLSv1.3 TODOs that are no longer relevant
by Matt Caswell
· 8 years ago
2c604cb
Validate the ticket age for resumed sessions
by Matt Caswell
· 8 years ago
bfa9a9a
Provide a default value for max_early_data
by Matt Caswell
· 8 years ago
70ef40a
Check max_early_data against the amount of early data we actually receive
by Matt Caswell
· 8 years ago
67f78ea
Make sure we reset the read sequence when skipping records
by Matt Caswell
· 8 years ago
1010936
Disallow handshake messages in the middle of early_data
by Matt Caswell
· 8 years ago
c117af6
Fix seg fault when sending early_data using CCM ciphersuites
by Matt Caswell
· 8 years ago
b2cc7f3
Implement client side parsing of the early_data extension
by Matt Caswell
· 8 years ago
fe5e20f
Fix changing of the cipher state when dealing with early data
by Matt Caswell
· 8 years ago
1ea4d09
Construct the server side early_data extension
by Matt Caswell
· 8 years ago
d781d24
Provide an SSL_read_early() function for reading early data
by Matt Caswell
· 8 years ago
6cb4226
Change the cipher state when sending early data
by Matt Caswell
· 8 years ago
d49e23e
Implement the early data changes required in tls13_change_cipher_state()
by Matt Caswell
· 8 years ago
0a87d0a
Parse the early_data extension
by Matt Caswell
· 8 years ago
a4f376a
Construct the early_data extension
by Matt Caswell
· 8 years ago
49e7fe1
Provide functions to write early data
by Matt Caswell
· 8 years ago
5d5b3fb
Parse the ticket_early_data_info extension
by Matt Caswell
· 8 years ago
29fac54
Teach SSL_trace() about the early_data_info extension
by Matt Caswell
· 8 years ago
3fc8d85
Construct the ticket_early_data_info extension
by Matt Caswell
· 8 years ago
f33f9dd
Fix a compression bug
by Matt Caswell
· 8 years ago
c19602b
Ensure that we never select compression in TLSv1.3
by Matt Caswell
· 8 years ago
a3004c8
Check for zero records and return immediately
by Jon Spillett
· 8 years ago
607c926
Code health: ssl/ssl_locl.h unused macros
by Andy
· 8 years ago
2f0ca54
Remove some obsolete/obscure internal define switches:
by Emilia Kasper
· 8 years ago
38f2837
Remove some commented out code in libssl
by Matt Caswell
· 8 years ago
2722ff5
Remove some #if 0 code in ssl, crypto/bio
by Todd Short
· 8 years ago
14097b6
Code health: Stop using timeb.h / ftime() (VMS only)
by Richard Levitte
· 8 years ago
b53338c
Clean up references to FIPS
by Emilia Kasper
· 8 years ago
fa7e9ed
Remove unnecessary memset after PR #2583 avoids accessing
by Bernd Edlinger
· 8 years ago
df15c84
Remove some dead code from libssl
by Matt Caswell
· 8 years ago
fa64210
Trace support for TLS 1.3 certificate request message
by Dr. Stephen Henson
· 8 years ago
03f44b9
Initial incomplete TLS 1.3 certificate request support.
by Dr. Stephen Henson
· 8 years ago
26a556e
Add missing blank lines and cosmetic improvements
by Dr. Stephen Henson
· 8 years ago
5032abd
TLS 1.3 support for ssl_print_ticket()
by Dr. Stephen Henson
· 8 years ago
2621235
print out alpn extension
by Dr. Stephen Henson
· 8 years ago
5243484
Add ffdhe groups to trace output
by Dr. Stephen Henson
· 8 years ago
b9d7199
Print numerical value of named roups
by Dr. Stephen Henson
· 8 years ago
f1dae5f
Add entry for PSK extension
by Dr. Stephen Henson
· 8 years ago
6e7c553
Add trace entries for remaining TLS 1.3 ciphersuites
by Dr. Stephen Henson
· 8 years ago
095a982
For TLS 1.3 reject SHA1 TLS signatures
by Dr. Stephen Henson
· 8 years ago
e892e32
Reject compressed point format with TLS 1.3
by Dr. Stephen Henson
· 8 years ago
599b586
Add SuiteB support to tls_choose_sigalg()
by Dr. Stephen Henson
· 8 years ago
75c13e7
Tidy up certificate type handling.
by Dr. Stephen Henson
· 8 years ago
4ee7d3f
Implement SSL_read_ex() and SSL_write_ex() as documented.
by Kurt Roeckx
· 8 years ago
6b1bb98
Add SSL_CTX early callback
by Benjamin Kaduk
· 8 years ago
ddf9725
Prepare for WORK_MORE_C
by Benjamin Kaduk
· 8 years ago
90134d9
Refactor SSL_bytes_to_cipher_list()
by Benjamin Kaduk
· 8 years ago
ccb8e6e
Export SSL_bytes_to_cipher_list()
by Benjamin Kaduk
· 8 years ago
60d685d
Let ssl_get_cipher_by_char yield not-valid ciphers
by Benjamin Kaduk
· 8 years ago
650c6e4
Add more first-class support for SCSVS
by Benjamin Kaduk
· 8 years ago
cb7a1f5
Move CLIENTHELLO_MSG up in the header
by Benjamin Kaduk
· 8 years ago
26f4268
Store the number of extensions in CLIENTHELLO_MSG
by Benjamin Kaduk
· 8 years ago
fc5ece2
output number of exts from tls_collect_extensions()
by Benjamin Kaduk
· 8 years ago
79020b2
Add some more consistency checks in tls_decrypt_ticket.
by Bernd Edlinger
· 8 years ago
a0179d0
Fix i2d_SSL_SESSION pp output parameter should point to end of asn1 data.
by Bernd Edlinger
· 8 years ago
38e8f3c
Check validity, not just signing for all certificates
by Dr. Stephen Henson
· 8 years ago
a8bb912
Set default validity flags.
by Dr. Stephen Henson
· 8 years ago
9195ddc
remove md array: it is not used any more.
by Dr. Stephen Henson
· 8 years ago
Next »