summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2020-05-26minor cleanup ahead of the following work:schwarze1-12/+14
2020-05-26Add additional length checks for TLSv1.3 plaintext and inner plaintext.jsing1-1/+6
2020-05-24Fix some stylistic nits from jsing.tb1-8/+11
2020-05-23Enforce that SNI hostnames be correct as per rfc 6066 and 5980.beck2-17/+80
2020-05-23Enable SSL_MODE_AUTO_RETRY by default.jsing1-1/+2
2020-05-23Wire up SSL_MODE_AUTO_RETRY mode to retrying after PHH messages.jsing2-2/+8
2020-05-23Provide the option to retry or return after post-handshake messages.jsing2-4/+16
2020-05-23fix a confusingly wrapped linetb1-3/+3
2020-05-23Do not assume that server_group != 0 or tlsext_supportedgroups != NULLtb2-9/+15
2020-05-22Ensure we only attach an ocsp staple to a leaf certificate, becausebeck2-5/+16
2020-05-21Simplify: transform a dangling else into an early return andtb1-18/+18
2020-05-21Make ssl_set_cert_masks() more consistent and closer to readable.jsing1-44/+27
2020-05-21Avoid a shadowing issue by renaming cbs and cbb to cbb_hs and cbb_hs,tb1-8/+7
2020-05-21A failure of tls13_handshake_msg_new() could lead to a NULL dereftb1-11/+15
2020-05-21Actually set the hrr flag when sending a HelloRetryRequest.jsing1-1/+3
2020-05-20Revert 1.43 - this fix for PHH in blocking mode breaks SSL_accept andbeck1-2/+2
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.jsing8-46/+31
2020-05-19Only send ocsp staples if the client asked for ocsp certificate status.beck1-1/+2
2020-05-19Add support for TLS 1.3 server to send certificate statusbeck5-15/+38
2020-05-17Send alerts back correctly when handling key shares, includingbeck1-8/+19
2020-05-17Free handshake message correctly, noticed by tb@beck1-2/+2
2020-05-17Send a decode error alert if a server provides an empty certificate list.jsing1-2/+2
2020-05-16Return TLS13_IO_WANT_POLLIN after processing post-handshake messages.jsing1-2/+2
2020-05-16Ensure that a TLSv1.3 server has provided a certificate.jsing1-1/+9
2020-05-16Add TLS13_ERR_NO_CERTIFICATE.jsing2-3/+7
2020-05-16Avoid sending an empty certificate list from the TLSv1.3 server.jsing1-5/+8
2020-05-13Fix pesky whitespace.jsing1-2/+2
2020-05-13Remove a no longer relevant XXX comment.jsing1-3/+1
2020-05-13Switch back to the legacy stack where the maximum is less than TLSv1.3.jsing1-2/+2
2020-05-13Switch the legacy version to TLS1_2_VERSION when processing server hello.jsing1-2/+2
2020-05-12there should only be one i in gratuitoustb1-3/+3
2020-05-11Enable the TLSv1.3 server.jsing1-1/+5
2020-05-11Propagate record overflows to the record layer and alert.jsing3-6/+8
2020-05-11Add record version checks.jsing3-17/+27
2020-05-11Set the record layer legacy version from the TLSv1.3 server.jsing1-1/+5
2020-05-11Provide an alert sent record layer callback.jsing4-8/+29
2020-05-11Move the record layer callbacks into a struct.jsing3-35/+33
2020-05-11Use ssl_get_new_session() in the TLSv1.3 server.jsing1-4/+3
2020-05-10Send dummy ChangeCipherSpec messages from the TLSv1.3 servertb3-3/+41
2020-05-10Honour SSL_VERIFY_FAIL_IF_NO_PEER_CERT in the TLSv1.3 server.jsing3-8/+16
2020-05-10Provide alert defines for TLSv1.3 and use in the TLSv1.3 code.jsing7-65/+97
2020-05-10Provide an easy way to get debug information from TLSv1.3 handshakes.jsing2-3/+61
2020-05-10Use size_t for OCSP response length.jsing8-27/+35
2020-05-10Only reset TLS extension state when parsing client hello or server hello.jsing1-5/+7
2020-05-10Correct tlsext_ocsp_resplen check.jsing1-2/+2
2020-05-09Back out server side CCS sending. It breaks TLSv1.3 client communicationtb3-34/+3
2020-05-09Forcibly ensure that only PSS may be used with RSA in TLS 1.3.beck1-2/+8
2020-05-09Send dummy ChangeCipherSpec messages from the TLSv1.3 servertb3-3/+34
2020-05-09Send dummy ChangeCipherSpec messages from the TLSv1.3 client.jsing4-6/+45
2020-05-09Correct return value check to handle TLS13_IO_EOF case.jsing1-2/+2
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.