openbsd/src/lib/libssl/d1_srvr.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2018-11-05T05:45:15+00:00 Consolidate all of the SSL method structs/functions into a single file. 2018-11-05T05:45:15+00:00 jsing 2018-11-05T05:45:15+00:00 urn:sha1:fb9f160cf8d816f5dd783bf8cad3828d2aa35dbe Discussed with tb@ Nuke ssl_pending/ssl_shutdown function pointers. 2018-08-30T16:56:16+00:00 jsing 2018-08-30T16:56:16+00:00 urn:sha1:16b6459b65a2ea71c62cee66fa098dd1e7b7cd8d ssl3_pending() is used for all protocols and dtls1_shutdown() just calls ssl3_shutdown(), so just call the appropriate function directly instead. ok beck@ inoguchi@ tb@ Clean up handshake message start/finish functions. 2018-08-24T17:30:32+00:00 jsing 2018-08-24T17:30:32+00:00 urn:sha1:dd7cee845ba455372d9339ef09b4c365da4166ac Now that all handshake messages are created using CBB, remove the non-CBB ssl3_handshake_msg_start()/ssl3_handshake_msg_finish() functions. Rename the CBB variants by dropping the _cbb suffix. ok bcook@ inoguchi@ tb@ Remove function pointers for ssl_{read,write,peek}. 2018-04-07T17:02:34+00:00 jsing 2018-04-07T17:02:34+00:00 urn:sha1:434b34179d51a711f0e2f59be4e5da2817c6a71f Now that everything goes through the same code path, we can remove a layer of indirection and just call ssl3_{read,write,peek} directly. ok beck@ inoguchi@ Fold dtls1_accept() into ssl_accept(), removing a lot of duplicated code. 2017-10-12T15:52:50+00:00 jsing 2017-10-12T15:52:50+00:00 urn:sha1:5de8f2e32c9d9687504dd63a57dc56328c0604d9 With review/feedback from inoguchi@ Reduce non-functional differences between dtls1_accept() and 2017-10-08T16:56:51+00:00 jsing 2017-10-08T16:56:51+00:00 urn:sha1:27d175eed37a53f5fec3ea007fa00199f2eab56c ssl3_accept() - synchronise comments, whitespace, line wrapping, etc. Convert ssl3_send_change_cipher_spec() to use CBB and make it handle DTLS, 2017-10-08T16:24:02+00:00 jsing 2017-10-08T16:24:02+00:00 urn:sha1:ba9ebd2e46ba795dd4f082910e89df705f1e264b which allows us to drop dtls1_send_change_cipher_spec() entirely. ok inoguchi@ Move state from ssl->internal to the handshake structure. 2017-05-07T04:22:24+00:00 beck 2017-05-07T04:22:24+00:00 urn:sha1:2439ee31e965a96d3685f362e5a32d365a9e5eaa while we are at it, convert SSLerror to use a function internally, so that we may later allocate the handshake structure and check for it ok jsing@ Bring in an SSL_HANDSHAKE structure and commence the great shovelling 2017-05-06T22:24:58+00:00 beck 2017-05-06T22:24:58+00:00 urn:sha1:ba0818f10be313fb81078efbbc62472ce82b1372 ok jsing@, gcc@, regress@ Remove the handshake digests and related code, replacing remaining uses 2017-03-10T16:03:27+00:00 jsing 2017-03-10T16:03:27+00:00 urn:sha1:a4d074bf7284629ac9919a3fb2aeea504c0ee429 with the handshake hash. For now tls1_digest_cached_records() is retained to release the handshake buffer. ok beck@ inoguchi@