| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2019-04-25 | Use calloc/freezero when allocating and freeing the session ticket data. |   jsing | 1 | -4/+6 |
| 2019-04-25 | Use EVP_CIPHER_CTX_{new,free}() and HMAC_CTX_{new,free}() instead of | jsing | 1 | -24/+29 |
| 2019-04-25 | Rename some variables in tls_decrypt_ticket(). | jsing | 1 | -18/+18 |
| 2019-04-23 | Convert tls_decrypt_ticket() to CBS. | jsing | 1 | -44/+72 |
| 2019-04-22 | Provide a derr label (decode/decrypt error) in tls1_decrypt_ticket(). | jsing | 1 | -41/+29 |
| 2019-04-22 | Pass the session ID down to the session/ticket handling code as a CBS. | jsing | 4 | -35/+36 |
| 2019-04-22 | Inline and remove the tlsext_tick_md macro. | jsing | 3 | -6/+5 |
| 2019-04-21 | Clean up tls1_process_ticket(). | jsing | 1 | -37/+41 |
| 2019-04-21 | Cleanup more of tls_decrypt_ticket(). | jsing | 1 | -5/+9 |
| 2019-04-21 | Start cleaning up tls_decrypt_ticket(). | jsing | 1 | -58/+63 |
| 2019-04-13 | Avoid leak in SSL_dup_CA_list() |   tb | 1 | -8/+14 |
| 2019-04-09 | Recommend SSL_CTX_add1_chain_cert(3) rather than |   schwarze | 1 | -12/+11 |
| 2019-04-09 | Document SSL_CTX_clear_mode(3) and SSL_clear_mode(3). | schwarze | 1 | -22/+48 |
| 2019-04-05 | By design, our state machine is a DAG contrary to the state machine in | tb | 4 | -7/+29 |
| 2019-04-05 | Import SSL_CTX_add1_chain_cert(3) from OpenSSL branch 1.1.1, which is still | schwarze | 5 | -17/+264 |
| 2019-04-05 | Zap two dead #defines that were unused since jsing deleted the | tb | 1 | -5/+1 |
| 2019-04-04 | Implement legacy fallback for the TLS 1.3 client. | jsing | 3 | -8/+87 |
| 2019-04-04 | Clean up the cipher/digest table mess. | jsing | 3 | -179/+45 |
| 2019-04-04 | Bump libssl/libtls minors due to symbol addition. | jsing | 1 | -1/+1 |
| 2019-04-04 | Provide SSL chain/cert chain APIs. | jsing | 3 | -2/+161 |
| 2019-04-04 | This case also needs to be fatal. | jsing | 1 | -1/+2 |
| 2019-04-01 | mark ERR_R_INTERNAL_ERROR instead of assert or _exit, sigh |   deraadt | 1 | -3/+3 |
| 2019-04-01 | Correct subtle bug in sigalgs, only care about curve_nid if we are |   beck | 1 | -4/+4 |
| 2019-03-31 | Clean up and simplify the client verify code: | jsing | 1 | -50/+49 |
| 2019-03-25 | Strip out all of the pkey to sigalg and sigalg to pkey linkages. | jsing | 5 | -59/+8 |
| 2019-03-25 | tls1_process_sigalgs() is no longer needed. | jsing | 2 | -57/+2 |
| 2019-03-25 | Defer sigalgs selection until the certificate is known. | jsing | 9 | -48/+124 |
| 2019-03-25 | Rework ssl_ctx_use_certificate_chain_bio() to use the CERT_PKEY chain. | jsing | 1 | -46/+26 |
| 2019-03-25 | Remove ssl_get_server_send_cert() which is now unused. | jsing | 2 | -14/+2 |
| 2019-03-25 | Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains. | jsing | 4 | -40/+36 |
| 2019-03-25 | Add a chain member to CERT_PKEY and provide functions for manipulating it. | jsing | 2 | -3/+74 |
| 2019-03-24 | If ssl_cipher_apply_rule() is given a specific cipher suite, match on it. | jsing | 1 | -3/+4 |
| 2019-03-24 | do not call assert(), which has a tendency to leave traces of stuff in | deraadt | 1 | -2/+3 |
| 2019-03-19 | Avoid an internal 2 byte overread in ssl_sigalgs(). | jsing | 1 | -7/+2 |
| 2019-03-19 | Revert TLS1_get{,_client}_version simplification because DTLS. | jsing | 4 | -14/+15 |
| 2019-03-18 | * note that the handshake must be completed first | schwarze | 1 | -4/+15 |
| 2019-03-18 | In ssl.h rev. 1.165, tb@ provided version agnostic DTLS methods. | schwarze | 1 | -3/+26 |
| 2019-03-17 | bump minors after symbol addition | tb | 1 | -1/+1 |
| 2019-03-17 | Provide version agnostic DTLS methods. | jsing | 3 | -2/+27 |
| 2019-03-17 | Correct return value handling in tls13_handshake_recv_action(). | jsing | 1 | -2/+4 |
| 2019-03-17 | Partially clean up the TLS1_get_{,client}_version macros. | jsing | 4 | -15/+14 |
| 2019-03-17 | Remove the alert level from the TLSv1.3 alert callback. | jsing | 3 | -7/+6 |
| 2019-03-04 | Don't index a void pointer, fixes compilation with visual studio. |   millert | 1 | -2/+3 |
| 2019-02-28 | Implement non-SSL_MODE_ENABLE_PARTIAL_WRITE in tls13_legacy_write_bytes(). | jsing | 1 | -3/+34 |
| 2019-02-28 | Automatically complete the handshake from tls13_legacy_{read,write}_bytes() | jsing | 3 | -3/+17 |
| 2019-02-28 | Set the SSL state as part of tls13_legacy_connect(). | jsing | 1 | -2/+5 |
| 2019-02-28 | Add appropriate length checks to tls13_legacy_{read,write}_bytes() | jsing | 1 | -3/+9 |
| 2019-02-28 | Remove unused record_type from TLSv1.3 handshake actions. | jsing | 1 | -16/+1 |
| 2019-02-26 | Correct return values for non-fatal alerts. | jsing | 1 | -3/+3 |
| 2019-02-26 | Correctly propagate EOF from BIO in tls13_legacy_wire_read(). | jsing | 1 | -1/+3 |
