index
:
wireguard-openbsd
jd/histogram
jd/queueboosts
jd/simplify-queueing
master
WireGuard implementation for the OpenBSD kernel
Matt Dunwoodie
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
lib
/
libssl
/
tls13_server.c
(
follow
)
Commit message (
Expand
)
Author
Age
Files
Lines
*
Implement a rolling hash of the ClientHello message, Enforce RFC 8446
beck
2020-06-06
1
-2
/
+46
*
Align tls13_server_select_certificate() with
tb
2020-06-04
1
-3
/
+7
*
distracting whitespace
tb
2020-06-02
1
-5
/
+5
*
Improve server certificate selection for TLSv1.3.
jsing
2020-05-29
1
-16
/
+83
*
Wire up the servername callback in the TLSv1.3 server.
jsing
2020-05-29
1
-1
/
+16
*
Wire up SSL_MODE_AUTO_RETRY mode to retrying after PHH messages.
jsing
2020-05-23
1
-1
/
+4
*
Do not assume that server_group != 0 or tlsext_supportedgroups != NULL
tb
2020-05-23
1
-1
/
+3
*
Ensure we only attach an ocsp staple to a leaf certificate, because
beck
2020-05-22
1
-2
/
+7
*
Actually set the hrr flag when sending a HelloRetryRequest.
jsing
2020-05-21
1
-1
/
+3
*
Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.
jsing
2020-05-19
1
-3
/
+3
*
Add support for TLS 1.3 server to send certificate status
beck
2020-05-19
1
-3
/
+3
*
Avoid sending an empty certificate list from the TLSv1.3 server.
jsing
2020-05-16
1
-5
/
+8
*
Switch back to the legacy stack where the maximum is less than TLSv1.3.
jsing
2020-05-13
1
-2
/
+2
*
Set the record layer legacy version from the TLSv1.3 server.
jsing
2020-05-11
1
-1
/
+5
*
Use ssl_get_new_session() in the TLSv1.3 server.
jsing
2020-05-11
1
-4
/
+3
*
Send dummy ChangeCipherSpec messages from the TLSv1.3 server
tb
2020-05-10
1
-1
/
+24
*
Honour SSL_VERIFY_FAIL_IF_NO_PEER_CERT in the TLSv1.3 server.
jsing
2020-05-10
1
-6
/
+10
*
Provide alert defines for TLSv1.3 and use in the TLSv1.3 code.
jsing
2020-05-10
1
-11
/
+11
*
Back out server side CCS sending. It breaks TLSv1.3 client communication
tb
2020-05-09
1
-24
/
+1
*
Send dummy ChangeCipherSpec messages from the TLSv1.3 server
tb
2020-05-09
1
-1
/
+24
*
Make the test for the legacy_compression_method vector in the ClientHello
tb
2020-05-09
1
-12
/
+7
*
Add support for HelloRetryRequests in the TLSv1.3 server.
jsing
2020-05-09
1
-8
/
+41
*
crazy whitespace on one line
tb
2020-05-09
1
-2
/
+2
*
Refactor tls13_server_hello_sent().
jsing
2020-05-09
1
-30
/
+36
*
Move legacy stack interfacing functions into tls13_legacy.c.
jsing
2020-04-28
1
-95
/
+4
*
Shuffle some functions around.
jsing
2020-04-27
1
-228
/
+221
*
Switch to NEGOTIATED when using WITHOUT_HRR.
jsing
2020-04-25
1
-4
/
+9
*
Improve TLSv1.3 state machine for HelloRetryRequest handling.
jsing
2020-04-22
1
-6
/
+6
*
Handle TLSv1.3 key shares other than X25519 on the server side.
jsing
2020-04-21
1
-11
/
+15
*
Generate client key share using our preferred group.
jsing
2020-04-17
1
-2
/
+2
*
Use ctx->hs->secrets rather than the S3I(s) version.
jsing
2020-03-10
1
-2
/
+2
*
Remove some unnecessary handshake enums/functions.
jsing
2020-03-10
1
-13
/
+1
*
According to RFC 8446, Section 4.4.4, recipients of incorrect Finished
tb
2020-02-23
1
-2
/
+2
*
drop unused include <openssl/curve25519.h>
tb
2020-02-18
1
-3
/
+1
*
Remove the hello retry request processing code that was previously added.
jsing
2020-02-05
1
-8
/
+2
*
Free the transcript as soon as we initialise the transcript hash.
jsing
2020-02-04
1
-1
/
+2
*
Provide struct/functions for handling TLSv1.3 key shares.
jsing
2020-01-30
1
-8
/
+12
*
If the TLSv1.3 code has not recorded an error and something already exists
jsing
2020-01-29
1
-1
/
+2
*
When switching back to a legacy client or server, ensure we reset the
jsing
2020-01-26
1
-1
/
+2
*
Add server side support for requesting client certificates in tls 1.3
beck
2020-01-26
1
-4
/
+173
*
Add client certificate support for tls 1.3
beck
2020-01-26
1
-13
/
+1
*
Move pad and verify context into tls13_lib.c
beck
2020-01-26
1
-46
/
+5
*
Complete the initial TLSv1.3 implementation.
jsing
2020-01-24
1
-12
/
+296
*
Store the legacy session identifier from the ClientHello so we can actually
jsing
2020-01-24
1
-1
/
+10
*
Switch to encrypted records in the TLSv1.3 server.
jsing
2020-01-24
1
-2
/
+74
*
Implement client hello processing in the TLSv1.3 server.
jsing
2020-01-23
1
-5
/
+49
*
Correct several issues in the current TLSv1.3 server code.
jsing
2020-01-23
1
-6
/
+15
*
Implement sending client certificate requests for 1.3 server
beck
2020-01-23
1
-1
/
+13
*
Build the encrypted extensions for the 1.3 server
beck
2020-01-23
1
-2
/
+8
*
Add code to build and send a server hello for tls 1.3
beck
2020-01-23
1
-3
/
+40
[next]