openbsd/src/lib/libssl/tls1.h, branch OPENBSD_6_8_BASE

Use IANA allocated GOST ClientCertificateTypes.

2020-06-05T18:14:05+00:00

IANA has allocated numbers for GOST ClientCertificateType. Use them in addition to private values (left in place for compatibility). Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Provide TLSEXT_TYPE_* aliases for TLS 1.3.

2020-01-02T06:23:16+00:00

OpenSSL decided to use their own names for two of the TLS 1.3 extensions, rather than using the names given in the RFC. Provide aliases for these so that code written to work with OpenSSL also works with LibreSSL (otherwise everyone gets to provide their own workarounds). Issue noted by d3x0r on github. ok inoguchi@ tb@

Revert TLS1_get{,_client}_version simplification because DTLS.

2019-03-19T16:53:03+00:00

Partially clean up the TLS1_get_{,client}_version macros.

2019-03-17T15:16:39+00:00

LibreSSL only supports TLSv1.0 and above, hence the checks the macros are performing are useless. Simplify them to their effective code. Also place both under #ifndef LIBRESSL_INTERNAL and use the variables directly in our code, which improves readability. ok tb@

Reimplement the sigalgs processing code into a new implementation

2018-11-09T00:34:55+00:00

that will be usable with TLS 1.3 with less eye bleed. ok jsing@ tb@

Add TLSv1.3 cipher suites (with appropriate guards).

2018-11-07T01:53:36+00:00

ok beck@ tb@

Add TLS extension type values for TLSv1.3 (under guards).

2018-11-06T20:48:08+00:00

ok tb@

Add TLS1_3_VERSION and SSL_OP_NO_TLSv1_3 defines under guards.

2018-11-06T01:37:23+00:00

ok beck@ bluhm@ tb@

Rename the TLS Supported Elliptic Curves extension to Supported Groups.

2018-11-05T20:41:30+00:00

RFC 7919 renamed the Supported Elliptic Curves TLS extension to Supported Groups and redefined it to include finite field DH (FFDH) in addition to elliptic curve DH (ECDH). As such, rename the TLS extension and change the associated code to refer to groups rather than curves. ok beck@ tb@

Provide SSL_CTX_get_tlsext_status_cb() and SSL_CTX_get_tlsext_status_arg().

2018-02-17T15:08:21+00:00