summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2020-03-12Use internal versions of SSL3_BUFFER, SSL3_RECORD and DTLS1_RECORD_DATA.jsing9-53/+83
2020-03-10Use ctx->hs->secrets rather than the S3I(s) version.jsing2-4/+4
2020-03-10Remove some unnecessary handshake enums/functions.jsing4-26/+4
2020-03-10Add a return value check to tls13_buffer_extend().jsing1-1/+4
2020-03-10Remove the enc function pointers.jsing6-22/+12
2020-03-06RFC 8446, section 4.1.3: If a TLSv1.2 client receives a ServerHello fortb1-1/+27
2020-03-06TLSv1.3 servers that intend to downgrade are required to set the lasttb1-4/+8
2020-02-23The decryption_failed alert must not be sent by compliant implementations.tb1-2/+2
2020-02-23According to RFC 8446, Section 4.4.4, recipients of incorrect Finishedtb2-4/+4
2020-02-21Remove the s2n macro now that it is finally unused.jsing1-4/+1
2020-02-21Convert the SSL/TLS record creation code to CBB.jsing1-18/+28
2020-02-21Convert the DTLS header creation code to CBB.jsing1-20/+27
2020-02-21Remove some commented code, remove some pointless comments and move somejsing1-17/+6
2020-02-21Convert dtls1_build_sequence_number() to CBB.jsing1-7/+15
2020-02-21Move l2n/l2n8 into s3_cbc.c, since this is the only code that uses it.jsing2-16/+16
2020-02-21Remove prefix_len, since it is always zero.jsing1-4/+3
2020-02-21Remove now unused variable.jsing1-3/+1
2020-02-19Refactor do_ssl3_write().jsing1-97/+98
2020-02-18drop unused include <openssl/curve25519.h>tb4-10/+4
2020-02-16Avoid potential NULL dereference when parsing a server keyshare extension.jsing1-1/+4
2020-02-16Avoid leak for tmp.x25519inoguchi2-5/+11
2020-02-15Move the TLSv1.3 code that interfaces with the legacy APIs/stack into ajsing3-309/+330
2020-02-15Remove #include that is not needed.jsing1-3/+1
2020-02-06Re-enable the TLSv1.3 client since the known issues have been addressed.jsing1-3/+1
2020-02-06Add a workaround to make SSL_set_session() work with TLSv1.3.jsing1-1/+9
2020-02-06Add support for handling hello retry requests in the TLSv1.3 client.jsing1-5/+100
2020-02-06Correctly handle key share extensions in a hello retry request.jsing2-4/+11
2020-02-05Refactor the server hello processing code in the TLSv1.3 client.jsing2-22/+46
2020-02-05Remove the hello retry request processing code that was previously added.jsing2-65/+16
2020-02-05Provide tls1_transcript_unfreeze() to avoid the need for manual flagsjsing2-3/+10
2020-02-05Pull the handshake message transcript code into its own function.jsing2-7/+14
2020-02-05Rework tls13_legacy_handshake_message_{recv,sent}_cb() to usetb3-16/+22
2020-02-04Add support for TLSv1.3 key shares with secp256r1 and secp384r1 groups.jsing1-5/+98
2020-02-04Free the transcript as soon as we initialise the transcript hash.jsing2-2/+4
2020-02-01Correctly unpack client key shares.jsing2-14/+11
2020-02-01Disable TLSv1.3 client while some known issues are being addressed.jsing1-1/+3
2020-01-30Provide struct/functions for handling TLSv1.3 key shares.jsing8-130/+299
2020-01-30Factor out/rewrite the ECDHE EC point key exchange code.jsing5-173/+188
2020-01-29Remove dead prototypes.jsing1-10/+1
2020-01-29If the TLSv1.3 code has not recorded an error and something already existsjsing3-3/+9
2020-01-29Remove unused stub implementation of tls13_accept(). The correcttb1-11/+1
2020-01-26Fix SSL_CIPHER_descriptioninoguchi1-2/+2
2020-01-26When an SSL method is set, bump the max version back to that of thejsing1-1/+10
2020-01-26When switching back to a legacy client or server, ensure we reset thejsing2-2/+4
2020-01-26Fix basement bug where record layer would not correctly deal withbeck1-1/+4
2020-01-26Add server side support for requesting client certificates in tls 1.3beck1-4/+173
2020-01-26Add client certificate support for tls 1.3beck2-15/+149
2020-01-26Add sigalgs for server side to enable client certificate processingbeck1-5/+34
2020-01-26Move pad and verify context into tls13_lib.cbeck4-68/+60
2020-01-25Add an underbar for consistency.tb1-2/+2
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.