A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2020-09-17T15:23:29+00:00 2020-09-17T15:23:29+00:00 jsing 2020-09-17T15:23:29+00:00 urn:sha1:ac608c91af9de9141849165d1599e500cf7010cc There are three places where we call tls1_get_{client,server}_method() and if that returns NULL, call dtls1_get_{client,server}_method(). Simplify this by combining the lookup into a single function. While here also use uint16_t for version types. ok inoguchi@ millert@ 2020-09-15T09:41:24+00:00 jsing 2020-09-15T09:41:24+00:00 urn:sha1:b1c0ef487c250fc4642e7e832c1057881273e6fd Now that get_ssl_method is no longer used, we can garbage collect the function pointer and some associated machinery. ok beck@ 2020-07-07T19:31:11+00:00 jsing 2020-07-07T19:31:11+00:00 urn:sha1:af06ca6427e355a07e5ee9751f9d0ef96f73e5a7 ssl_version is completely unused and get_timeout is the same everywhere. ok beck@ inoguchi@ tb@ 2020-07-07T19:24:23+00:00 jsing 2020-07-07T19:24:23+00:00 urn:sha1:c4b64f051678a521c080a0715d1052aeb6286d7e This can be done now that we have both TLSv1.3 client and server. ok beck@ inoguchi@ tb@ 2020-02-06T16:05:58+00:00 jsing 2020-02-06T16:05:58+00:00 urn:sha1:337afdf3cdc31fa52b550825eedb70f828a1aaab While we do not currently do session resumption, just return the TLS_client_method() or TLS_server_method() when asked for a method that does TLSv1.3. ok tb@ (who also arrived at the same diff) 2020-01-23T10:48:37+00:00 jsing 2020-01-23T10:48:37+00:00 urn:sha1:a0913f8b11765018808c519315bcbc52aa7a4f27 ssl_get_message is essentially a switch between ssl3_get_message and dtls1_get_message, both only used by the legacy stack. Instead, use SSL_IS_DTLS() in ssl3_get_message to call the DTLS function when necessary. ok beck@ inoguchi@ tb@ 2020-01-23T05:08:30+00:00 jsing 2020-01-23T05:08:30+00:00 urn:sha1:b59049aced9b6aa8315b28815a71d13bb3b5c7c6 Makes `openssl s_client -peekaboo` work with TLSv1.3. ok beck@ tb@ 2020-01-23T03:17:40+00:00 jsing 2020-01-23T03:17:40+00:00 urn:sha1:7ecf22796e9d8d8a9545f50ff1753233a503eccc This will allow the TLSv1.3 stack to provide its own implementation. Nuke a completely bogus comment from SSL_pending() whilst here. ok beck@ 2020-01-22T15:47:22+00:00 jsing 2020-01-22T15:47:22+00:00 urn:sha1:bcda89289e2804a6f20cf7527671c9745f929e58 This currently only has enough code to handle fallback to the legacy TLS stack for TLSv1.2 or earlier, however allows for further development and testing. ok beck@ 2020-01-22T02:34:39+00:00 jsing 2020-01-22T02:34:39+00:00 urn:sha1:8a5f0b4938aa181a953897e80c037c03a54b5a22 Missed in an earlier commit.