summaryrefslogtreecommitdiffstats
path: root/lib/libssl/tls13_server.c
AgeCommit message (Expand)AuthorFilesLines
2020-06-06Implement a rolling hash of the ClientHello message, Enforce RFC 8446beck1-2/+46
2020-06-04Align tls13_server_select_certificate() withtb1-3/+7
2020-06-02distracting whitespacetb1-5/+5
2020-05-29Improve server certificate selection for TLSv1.3.jsing1-16/+83
2020-05-29Wire up the servername callback in the TLSv1.3 server.jsing1-1/+16
2020-05-23Wire up SSL_MODE_AUTO_RETRY mode to retrying after PHH messages.jsing1-1/+4
2020-05-23Do not assume that server_group != 0 or tlsext_supportedgroups != NULLtb1-1/+3
2020-05-22Ensure we only attach an ocsp staple to a leaf certificate, becausebeck1-2/+7
2020-05-21Actually set the hrr flag when sending a HelloRetryRequest.jsing1-1/+3
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.jsing1-3/+3
2020-05-19Add support for TLS 1.3 server to send certificate statusbeck1-3/+3
2020-05-16Avoid sending an empty certificate list from the TLSv1.3 server.jsing1-5/+8
2020-05-13Switch back to the legacy stack where the maximum is less than TLSv1.3.jsing1-2/+2
2020-05-11Set the record layer legacy version from the TLSv1.3 server.jsing1-1/+5
2020-05-11Use ssl_get_new_session() in the TLSv1.3 server.jsing1-4/+3
2020-05-10Send dummy ChangeCipherSpec messages from the TLSv1.3 servertb1-1/+24
2020-05-10Honour SSL_VERIFY_FAIL_IF_NO_PEER_CERT in the TLSv1.3 server.jsing1-6/+10
2020-05-10Provide alert defines for TLSv1.3 and use in the TLSv1.3 code.jsing1-11/+11
2020-05-09Back out server side CCS sending. It breaks TLSv1.3 client communicationtb1-24/+1
2020-05-09Send dummy ChangeCipherSpec messages from the TLSv1.3 servertb1-1/+24
2020-05-09Make the test for the legacy_compression_method vector in the ClientHellotb1-12/+7
2020-05-09Add support for HelloRetryRequests in the TLSv1.3 server.jsing1-8/+41
2020-05-09crazy whitespace on one linetb1-2/+2
2020-05-09Refactor tls13_server_hello_sent().jsing1-30/+36
2020-04-28Move legacy stack interfacing functions into tls13_legacy.c.jsing1-95/+4
2020-04-27Shuffle some functions around.jsing1-228/+221
2020-04-25Switch to NEGOTIATED when using WITHOUT_HRR.jsing1-4/+9
2020-04-22Improve TLSv1.3 state machine for HelloRetryRequest handling.jsing1-6/+6
2020-04-21Handle TLSv1.3 key shares other than X25519 on the server side.jsing1-11/+15
2020-04-17Generate client key share using our preferred group.jsing1-2/+2
2020-03-10Use ctx->hs->secrets rather than the S3I(s) version.jsing1-2/+2
2020-03-10Remove some unnecessary handshake enums/functions.jsing1-13/+1
2020-02-23According to RFC 8446, Section 4.4.4, recipients of incorrect Finishedtb1-2/+2
2020-02-18drop unused include <openssl/curve25519.h>tb1-3/+1
2020-02-05Remove the hello retry request processing code that was previously added.jsing1-8/+2
2020-02-04Free the transcript as soon as we initialise the transcript hash.jsing1-1/+2
2020-01-30Provide struct/functions for handling TLSv1.3 key shares.jsing1-8/+12
2020-01-29If the TLSv1.3 code has not recorded an error and something already existsjsing1-1/+2
2020-01-26When switching back to a legacy client or server, ensure we reset thejsing1-1/+2
2020-01-26Add server side support for requesting client certificates in tls 1.3beck1-4/+173
2020-01-26Add client certificate support for tls 1.3beck1-13/+1
2020-01-26Move pad and verify context into tls13_lib.cbeck1-46/+5
2020-01-24Complete the initial TLSv1.3 implementation.jsing1-12/+296
2020-01-24Store the legacy session identifier from the ClientHello so we can actuallyjsing1-1/+10
2020-01-24Switch to encrypted records in the TLSv1.3 server.jsing1-2/+74
2020-01-23Implement client hello processing in the TLSv1.3 server.jsing1-5/+49
2020-01-23Correct several issues in the current TLSv1.3 server code.jsing1-6/+15
2020-01-23Implement sending client certificate requests for 1.3 serverbeck1-1/+13
2020-01-23Build the encrypted extensions for the 1.3 serverbeck1-2/+8
2020-01-23Add code to build and send a server hello for tls 1.3beck1-3/+40
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.