summaryrefslogtreecommitdiffstats
path: root/lib/libssl/ssl_srvr.c
AgeCommit message (Expand)AuthorFilesLines
2020-06-05Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.jsing1-1/+8
2020-06-01Send an illegal_parameter alert if a client sends us invalid DH keytb1-3/+15
2020-05-31Correct downgrade sentinels when a version pinned method is in use.jsing1-3/+3
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.jsing1-2/+2
2020-05-10Use size_t for OCSP response length.jsing1-2/+2
2020-05-09On receiving an overlong session ID terminate with an illegal_parametertb1-1/+6
2020-03-06TLSv1.3 servers that intend to downgrade are required to set the lasttb1-4/+8
2020-02-16Avoid leak for tmp.x25519inoguchi1-4/+7
2020-01-30Factor out/rewrite the ECDHE EC point key exchange code.jsing1-77/+21
2020-01-23Remove the ssl_get_message function pointer from SSL_METHOD_INTERNAL.jsing1-6/+5
2020-01-23If we are building a legacy server hello, check to see if we arebeck1-1/+20
2019-04-22Pass the session ID down to the session/ticket handling code as a CBS.jsing1-3/+2
2019-04-22Inline and remove the tlsext_tick_md macro.jsing1-2/+2
2019-03-25Defer sigalgs selection until the certificate is known.jsing1-2/+2
2019-03-25Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains.jsing1-4/+4
2019-02-09Rename tls1_handshake_hash*() to tls1_transcript_hash*().jsing1-3/+3
2019-01-18Rename TLS extension handling to use less "hello".jsing1-3/+3
2018-12-07Remove an ugly hack in the client certificate verification code that workstb1-48/+44
2018-11-21Fix DTLS transcript handling for HelloVerifyRequest.jsing1-5/+2
2018-11-11Add check function to verify that pkey is usable with a sigalg.beck1-3/+3
2018-11-11quiet warning on other compilersbcook1-3/+3
2018-11-11Free the server tls transcript in case session reuse did not work.bluhm1-3/+4
2018-11-11Add support for RSA PSS algorithims being used in sigalgs.beck1-1/+15
2018-11-11Convert signatures and verifcation to use the EVP_DigestXXX apibeck1-18/+40
2018-11-10Stop keeping track of sigalgs by guessing it from digest and pkey,beck1-23/+12
2018-11-09Ensure we only choose sigalgs from our prefernce list, not the whole listbeck1-2/+3
2018-11-09Add the ability to have a separate priority list for sigalgs.beck1-2/+2
2018-11-09Reimplement the sigalgs processing code into a new implementationbeck1-23/+13
2018-11-08Clean up and simplify the handshake transcript code.jsing1-51/+23
2018-11-08Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.jsing1-7/+1
2018-11-08Ensure the handshake transcript is cleaned up.jsing1-1/+7
2018-08-27Convert ssl3_get_cert_verify() to CBS and clean up somewhat.jsing1-74/+72
2018-08-27Add some missing statics.jsing1-2/+2
2018-08-27Simplify new session ticket encoding/generation.jsing1-63/+38
2018-08-24Simplify session ticket parsing/handling.jsing1-8/+7
2018-08-24Pull up the parsing of a ClientHello.jsing1-20/+20
2018-08-24Clean up handshake message start/finish functions.jsing1-17/+17
2018-08-22Correct session ticket encryption.jsing1-4/+11
2018-08-19Rename and collapse tls12_get_sigandhash_cbb().jsing1-3/+2
2018-08-19Convert ssl3_send_newsession_ticket() to CBB.jsing1-52/+61
2018-08-16Simplify the add signature code/logic in ssl3_send_server_key_exchange().jsing1-13/+8
2018-08-16Convert ssl3_send_server_key_exchange() to CBB.jsing1-44/+45
2018-08-14Actually check the return values for EVP_Sign* and EVP_Verify*.jsing1-7/+11
2018-08-10Simplify server kex exchange signature generation.jsing1-61/+33
2018-06-10Now that all of the server-side client key exchange processing functionsjsing1-53/+40
2018-06-03Allocate a dedicated buffer for use when deriving a shared key duringjsing1-10/+18
2018-06-02Convert ssl3_get_client_kex_ecdhe_ecp() to CBS.jsing1-44/+42
2018-05-19Clean out a pile of cruft from ssl3_get_client_kex_ecdhe_ecp().jsing1-93/+38
2018-05-19Convert ssl3_get_client_kex_gost() to CBS.jsing1-21/+23
2018-05-13More clean up of the RSA key exchange code.jsing1-24/+34
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.