wireguard-openbsd/lib/libssl/ssl_methods.c, branch jd/histogram WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl/ssl_methods.c?h=jd%2Fhistogram 2020-02-06T16:05:58Z Add a workaround to make SSL_set_session() work with TLSv1.3. 2020-02-06T16:05:58Z jsing jsing@openbsd.org 2020-02-06T16:05:58Z urn:sha1:da308e267707a97104dd070e5d8a341f46926ece While we do not currently do session resumption, just return the TLS_client_method() or TLS_server_method() when asked for a method that does TLSv1.3. ok tb@ (who also arrived at the same diff) Remove the ssl_get_message function pointer from SSL_METHOD_INTERNAL. 2020-01-23T10:48:37Z jsing jsing@openbsd.org 2020-01-23T10:48:37Z urn:sha1:dc77a1b6be2178ef3b10b1095ac8144db9bc6da5 ssl_get_message is essentially a switch between ssl3_get_message and dtls1_get_message, both only used by the legacy stack. Instead, use SSL_IS_DTLS() in ssl3_get_message to call the DTLS function when necessary. ok beck@ inoguchi@ tb@ Implement pending for TLSv1.3. 2020-01-23T05:08:30Z jsing jsing@openbsd.org 2020-01-23T05:08:30Z urn:sha1:7003a9ccf9b2c90d12adb857fcb34e53b53c9868 Makes `openssl s_client -peekaboo` work with TLSv1.3. ok beck@ tb@ Switch back to a function pointer for ssl_pending. 2020-01-23T03:17:40Z jsing jsing@openbsd.org 2020-01-23T03:17:40Z urn:sha1:8dc90bba8e974cb04a5df610612ea39231af0ebe This will allow the TLSv1.3 stack to provide its own implementation. Nuke a completely bogus comment from SSL_pending() whilst here. ok beck@ Wire up the TLSv1.3 server. 2020-01-22T15:47:22Z jsing jsing@openbsd.org 2020-01-22T15:47:22Z urn:sha1:0dbd9f910b9ea15a5bf5b9a51ac2fa1d241ebb1e This currently only has enough code to handle fallback to the legacy TLS stack for TLSv1.2 or earlier, however allows for further development and testing. ok beck@ Hook up the TLSv1.3 legacy shutdown code. 2020-01-22T02:34:39Z jsing jsing@openbsd.org 2020-01-22T02:34:39Z urn:sha1:df62dce5d1984bf3c43ad497bd22d70c17f3f8d8 Missed in an earlier commit. Split the TLSv1.3 guards into separate client and server guards. 2020-01-22T01:21:43Z jsing jsing@openbsd.org 2020-01-22T01:21:43Z urn:sha1:7214807f44f621693bd895b83ec6fd2c0890412d ok beck@ tb@ Bring back the ssl_shutdown internal method pointer. 2019-11-17T19:07:07Z jsing jsing@openbsd.org 2019-11-17T19:07:07Z urn:sha1:1a6e11778a7cc2b1a70586edfc4b1ddf72794d13 For now ssl3_shutdown() is called in all cases, however TLSv1.3 will soon get its own version. ok beck@ Provide version agnostic DTLS methods. 2019-03-17T17:28:08Z jsing jsing@openbsd.org 2019-03-17T17:28:08Z urn:sha1:71023d34a807e30782fc2437cecdd0794d70d29f ok tb@ Correct guards. 2019-02-14T18:53:15Z jsing jsing@openbsd.org 2019-02-14T18:53:15Z urn:sha1:64a0a0c801a0d245e3a7871e39c017343ff585b0