| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Prepare to provide SSL_get_signature_nid() and friends. | jsing | 2021-06-30 | 2 | -2/+81 |
* | Move some structs from public to private headers. | jsing | 2021-06-30 | 3 | -125/+108 |
* | document and deprecate the macros X509_extract_key(3) | schwarze | 2021-06-30 | 1 | -6/+35 |
* | Correct sigalg hash usage when signing content for client verify. | jsing | 2021-06-30 | 1 | -3/+2 |
* | Pull sigalg selection up into ssl3_send_client_verify(). | jsing | 2021-06-29 | 1 | -14/+11 |
* | Track sigalg used by ourselves and our peer in the legacy stack. | jsing | 2021-06-29 | 2 | -2/+6 |
* | Pull up and dedup the TLS version check in ssl_sigalg_pkey_ok(). | jsing | 2021-06-29 | 1 | -5/+6 |
* | Simplify RSA PSS key size comment. | jsing | 2021-06-29 | 1 | -5/+2 |
* | Use appropriate TLS version when building client sigalg extensions. | jsing | 2021-06-29 | 1 | -2/+6 |
* | Change ssl_sigalg_from_value() to take SSL * instead of a TLS version. | jsing | 2021-06-29 | 1 | -7/+6 |
* | Make various sigalg functions static now that they're only used internally. | jsing | 2021-06-29 | 2 | -10/+5 |
* | Convert legacy stack server to ssl_sigalg_for_peer(). | jsing | 2021-06-29 | 1 | -47/+29 |
* | Convert legacy stack client to ssl_sigalg_for_peer(). | jsing | 2021-06-29 | 1 | -34/+12 |
* | Provide a ssl_sigalg_for_peer() function and use in the TLSv1.3 code. | jsing | 2021-06-29 | 4 | -15/+33 |
* | Move the RSA-PSS check for TLSv1.3 to ssl_sigalg_pkey_ok(). | jsing | 2021-06-29 | 6 | -34/+29 |
* | Factor out handling of legacy default signature algorithms. | jsing | 2021-06-29 | 1 | -32/+27 |
* | Mop up now unused variables. | jsing | 2021-06-29 | 1 | -7/+2 |
* | Require a ServerHello following a HelloRetryRequest to use the same cipher. | jsing | 2021-06-29 | 1 | -2/+11 |
* | Reject zero-length non-application data fragments in the legacy stack. | jsing | 2021-06-29 | 1 | -1/+11 |
* | Use the order action->sender == ctx->mode everywhere for consistency. | tb | 2021-06-28 | 1 | -3/+3 |
* | ctx->alert is not a boolean, so compare it explicitly against 0. | tb | 2021-06-28 | 1 | -3/+3 |
* | The state machine now takes care of setting the legacy state, | tb | 2021-06-28 | 1 | -11/+1 |
* | Expand info callback support for TLSv1.3 | tb | 2021-06-28 | 2 | -7/+187 |
* | Track the sigalgs used by ourselves and our peer. | jsing | 2021-06-27 | 3 | -9/+14 |
* | Have ssl3_send_client_verify() pass *pkey to called functions. | jsing | 2021-06-27 | 1 | -22/+11 |
* | Change ssl_sigalgs_from_value() to perform sigalg list selection. | jsing | 2021-06-27 | 6 | -32/+31 |
* | Rename ssl_sigalg() to ssl_sigalg_from_value(). | jsing | 2021-06-27 | 6 | -17/+18 |
* | Change ssl_sigalgs_build() to perform sigalg list selection. | jsing | 2021-06-27 | 4 | -28/+29 |
* | Tidy some comments and simplify some code. | jsing | 2021-06-27 | 1 | -15/+7 |
* | Keep sigalg initialiser order consistent - key type, then hash. | jsing | 2021-06-27 | 2 | -20/+20 |
* | Add test coverage for TLSv1.3 client hellos. | jsing | 2021-06-27 | 1 | -13/+166 |
* | Add test coverage for DTLSv1.2 client hellos. | jsing | 2021-06-27 | 1 | -7/+102 |
* | Improve test coverage for SSL_OP_NO_DTLSv1. | jsing | 2021-06-27 | 1 | -1/+9 |
* | Correct handling of SSL_OP_NO_DTLSv1. | jsing | 2021-06-27 | 1 | -3/+3 |
* | Teach hexdump() how to identify differing bytes. | jsing | 2021-06-27 | 1 | -9/+13 |
* | More appropriately set cipher_list_len when AES acceleration is available. | jsing | 2021-06-27 | 1 | -5/+6 |
* | Tweak some data types and sprinkle some const. | jsing | 2021-06-27 | 1 | -15/+15 |
* | Fix .Xr order. From mandoc -Tlint. | tb | 2021-06-26 | 2 | -7/+7 |
* | Garbage collect prototoype for ssl_parse_serverhello_tlsext() which | tb | 2021-06-23 | 1 | -3/+1 |
* | zap wonky commas; | jmc | 2021-06-22 | 1 | -5/+5 |
* | Clarify tls_config_set_*_file() file I/O semantics | kn | 2021-06-22 | 1 | -13/+11 |
* | Add GnuTLS interoperability test in appstest.sh | inoguchi | 2021-06-21 | 1 | -1/+109 |
* | zap trailing whitespace | tb | 2021-06-19 | 1 | -4/+7 |
* | Correctly handle epoch wrapping in dtls1_get_bitmap(). | jsing | 2021-06-19 | 2 | -4/+5 |
* | Add DTLS test cases that use non-zero initial epochs. | jsing | 2021-06-19 | 2 | -5/+44 |
* | Provide the ability to set the initial DTLS epoch value. | jsing | 2021-06-19 | 4 | -7/+29 |
* | Initialise the epoch for the DTLS processed and unprocessed queues. | jsing | 2021-06-19 | 1 | -1/+4 |
* | Add more complex DTLS tests for delay/reordering. | jsing | 2021-06-19 | 1 | -17/+160 |
* | Expand comment that details why two DTLS tests currently fail. | jsing | 2021-06-19 | 1 | -2/+5 |
* | Provide the ability to delay/reorder DTLS packets. | jsing | 2021-06-19 | 1 | -14/+147 |