summaryrefslogtreecommitdiffstats
path: root/lib
AgeCommit message (Expand)AuthorFilesLines
2020-01-23Implement sending client certificate requests for 1.3 serverbeck1-1/+13
2020-01-23Correctly handle TLSv1.3 ciphers suites in ssl3_choose_cipher().jsing4-5/+30
2020-01-23Build the encrypted extensions for the 1.3 serverbeck1-2/+8
2020-01-23If we are building a legacy server hello, check to see if we arebeck1-1/+20
2020-01-23Add checking int the client to check the magic values which arebeck3-3/+30
2020-01-23Add code to build and send a server hello for tls 1.3beck1-3/+40
2020-01-23Save the legacy session id in the client, and enforce that it is returnedbeck2-7/+18
2020-01-23Implement pending for TLSv1.3.jsing4-6/+42
2020-01-23Remove lies from the SSL_pending man page, Our implementation neverbeck1-22/+3
2020-01-23Switch back to a function pointer for ssl_pending.jsing3-14/+24
2020-01-23Add a TLS13_IO_ALERT return value so that we can explicitly signal whenjsing3-11/+22
2020-01-23Pass a CBB to TLSv1.3 send handlers.jsing4-50/+44
2020-01-22The length of the IV of EVP_chacha20 is currently 64 bits, not 96.tb1-3/+3
2020-01-22Wire up the TLSv1.3 server.jsing3-6/+182
2020-01-22Pass a handshake message content CBS to TLSv1.3 receive handlers.jsing5-85/+70
2020-01-22Fix things so that `make -DTLS1_3` works again.jsing1-1/+3
2020-01-22Send alerts on certificate verification failures of server certsbeck1-2/+2
2020-01-22Rename failure into alert_desc in tlsext_ocsp_server_parse().tb1-5/+5
2020-01-22fix previous: alert_desc needs to be an int.tb1-2/+2
2020-01-22Avoid modifying alert in the success path.tb1-11/+17
2020-01-22Enable the TLSv1.3 client in libssl.jsing1-2/+3
2020-01-22Correct includes check for libtls.jsing1-2/+2
2020-01-22Add checks to ensure that lib{crypto,ssl,tls} public headers have actuallyjsing3-3/+33
2020-01-22delete wasteful ;;deraadt1-2/+2
2020-01-22Move guards from public to internal headers, and fix not use values.beck2-8/+7
2020-01-22Simplify header installation by combining the HDRS and HDRS_GEN loops.jsing1-9/+2
2020-01-22Note in the man page that the default protocols list includes 1.3beck1-4/+4
2020-01-22Enable TLS version 1.3 in the default protocols for libtls.beck1-2/+2
2020-01-22Implement support for SSL_peek() in the TLSv1.3 record layer.jsing3-14/+39
2020-01-22After the ClientHello has been sent or received and before the peer'stb4-8/+22
2020-01-22Correctly set the legacy version when TLSv1.3 is building a client hello.jsing1-4/+11
2020-01-22Don't add an extra unknown error if we got a fatal alertbeck1-2/+3
2020-01-22The legacy_record_version must be set to TLS1_2_VERSION excepttb4-9/+30
2020-01-22Hook up the TLSv1.3 legacy shutdown code.jsing1-2/+2
2020-01-22Add minimal support for hello retry request for RFC conformance.beck4-11/+71
2020-01-22Split the TLSv1.3 guards into separate client and server guards.jsing3-6/+13
2020-01-22Implement close-notify and SSL_shutdown() handling for the TLSv1.3 client.jsing3-9/+76
2020-01-21Correct legacy fallback for TLSv1.3 client.jsing3-9/+30
2020-01-21Remove redundant ASN1_INTEGER_set call in PKCS7_set_typeinoguchi1-2/+1
2020-01-21Provide SSL_R_UNKNOWN.jsing3-5/+7
2020-01-21Clear and free the tls13_ctx that hangs off an SSL *s fromtb2-2/+8
2020-01-21Add alert processing in tls client code, by adding alert to thebeck3-19/+30
2020-01-20Add alerts to the tls 1.3 record layer and handshake layerbeck2-49/+29
2020-01-20Provide an error framework for use with the TLSv1.3 code.jsing5-7/+151
2020-01-20Add support for TLSv1.3 as a protocol to libtls.jsing4-11/+20
2020-01-17Free pss in RSA_freeinoguchi1-1/+2
2020-01-14bump to 3.1.0bcook1-3/+3
2020-01-13Document how to make getopt_long(3) process arguments in order and stopstsp1-2/+18
2020-01-12Avoid leak in error path of PKCS5_PBE_keyivgeninoguchi1-1/+2
2020-01-09Avoid leak in error path of asn1_parse2inoguchi1-17/+21
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.