summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2019-01-21Move ssl_cipher_list_to_bytes() and ssl_bytes_to_cipher_list() totb2-116/+120
2019-01-21Provide the initial TLSv1.3 client implementation.jsing5-25/+192
2019-01-21Wire up the handshake message send and recv actions.jsing2-4/+44
2019-01-21In ssl_lib.c rev. 1.197, jsing@ added TLSv1.3 support to SSL_get_version(3).schwarze1-2/+4
2019-01-21The main handshake loop can be shared between client and server.jsing2-29/+15
2019-01-21Use ssl_cipher_is_permitted() in ssl_cipher_list_to_bytes().tb1-9/+6
2019-01-21Add ssl_cipher_is_permitted(), an internal helper function thattb3-2/+49
2019-01-21Correct some rwstate handling that I broke when refactoring.jsing1-3/+13
2019-01-21Provide TLS 1.3 cipher AEAD/hash and legacy I/O handling functions.jsing3-2/+210
2019-01-21Move struct tls13_ctx into a header since other things need access to it.jsing3-21/+21
2019-01-21Ensure we free TLS 1.3 handshake state.jsing1-6/+11
2019-01-21Teach ssl_version_string() about TLS1_3_VERSION.jsing1-1/+3
2019-01-21Store the record version and make it available for use.jsing2-10/+21
2019-01-20Fix header guardtb1-2/+5
2019-01-20Provide a handshake message handling implementation for TLS 1.3.jsing3-3/+213
2019-01-20Provide an initial implementation of the TLS 1.3 record layer.jsing3-6/+790
2019-01-20Provide a way to get just the record header.jsing2-7/+33
2019-01-20revert second hunk of previous that was committed by accidenttb1-2/+2
2019-01-20Add missing prototype for tls13_handshake_active_action().tb1-2/+4
2019-01-20Add some internal consistency checks to the handshake state handling.jsing1-9/+23
2019-01-20TLS 1.3 clients always need to send the supported groups extension.jsing1-4/+5
2019-01-20Add an explicit flag to indicate a successful handshake insteadtb1-8/+6
2019-01-19Sort HDRS/SRCS lists and use one line per source file for maintainability.jsing1-15/+43
2019-01-19Add handshake message type checking and special case certificate requests.jsing1-1/+30
2019-01-19Tweak return value handling in the TLSv1.3 handshake code.jsing2-44/+47
2019-01-19Provide a TLS record handling implementation.jsing3-2/+220
2019-01-19bump minors after symbol additiontb1-1/+1
2019-01-18copyrightbeck1-1/+2
2019-01-18bump copyright years appopriatelybeck1-3/+3
2019-01-18Add client side of supported versions and keyshare extensions with basic regressbeck4-4/+262
2019-01-18Expose some symbols in a new tls13_handshake.h for regression testing.tb3-99/+93
2019-01-18Remove this copy, we have decided we can do this in placebeck3-1633/+2
2019-01-18Add support for RFC 8446 section 4.2 enforcing which extensions maybeck1-8/+43
2019-01-18Rename TLS extension handling to use less "hello".jsing4-213/+221
2019-01-17Get rid of is_serverhello in preparation for other messagesbeck1-13/+24
2019-01-17Provide an extensible buffer implementation that uses a read callback.jsing3-3/+148
2019-01-17Add support to enforce restrictions on where extensions can appearbeck2-12/+38
2019-01-17Add a direct copy of the exension parsing code to be modified for tls13.beck3-2/+1596
2018-12-07Remove an ugly hack in the client certificate verification code that workstb1-48/+44
2018-12-03Send SSL_AD_DECODE alerts in the case of a bad hello request or antb1-7/+7
2018-11-29Refactor a tangle in ssl3_send_client_verify() into one function for eachtb1-118/+213
2018-11-21Fix DTLS transcript handling for HelloVerifyRequest.jsing4-18/+26
2018-11-19Revert previous - DTLSv1 uses MD5+SHA1 for RSA signature verification.jsing2-10/+4
2018-11-19Revert previous - the default sigalg for RSA key exchange is {sha1,rsa}.jsing1-4/+4
2018-11-17Fix DTLS, because DTLS still remains a special flower, allows regress to passbeck2-4/+10
2018-11-16revert previousbeck1-5/+3
2018-11-16Fix DTLS. Because the DTLS code is strange. I am really coming around tobeck1-3/+5
2018-11-16Unbreak legacy ciphers for prior to 1.1 by setting having a legacybeck4-10/+22
2018-11-14Fix wrong sizeof argument by using 'uint16_t *', with minor nit from tb@,mestre1-2/+2
2018-11-14In TLS1.2 we use evp_sha1 if we fall back this far, not evp_md5_sha1 as in 1.1beck1-2/+2