Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2019-11-18 | Add regress for the updating of sever and client application secrets | beck | 1 | -2/+47 | |
2019-11-17 | Change tls13_record_layer_phh() to take a CBS as this avoids ownership | jsing | 2 | -8/+6 | |
issues and makes call sites cleaner. ok beck@ | |||||
2019-11-17 | Correct update of application traffic secrets to use an empty context | beck | 1 | -3/+7 | |
rather than the hash of an empty context ok jsing@ | |||||
2019-11-17 | Bring back the ssl_shutdown internal method pointer. | jsing | 3 | -4/+21 | |
For now ssl3_shutdown() is called in all cases, however TLSv1.3 will soon get its own version. ok beck@ | |||||
2019-11-17 | Add a reference for the non-standard post-handshake handshake (PHH). | tb | 1 | -2/+2 | |
ok beck, jsing | |||||
2019-11-17 | Ensure that we are never operating in plaintext mode once the handshake | jsing | 1 | -1/+7 | |
is complete, which should never occur. ok beck@ | |||||
2019-11-17 | fail to usage if extra argv are present | deraadt | 1 | -8/+4 | |
noticed by jsing and beck, ok tedu | |||||
2019-11-17 | Provide framework for sending alerts and post-handshake handshake messages. | jsing | 2 | -15/+174 | |
Discussed at length with beck@ ok beck@ tb@ | |||||
2019-11-17 | indent with a tab instead of 8 spaces | tb | 1 | -2/+2 | |
2019-11-17 | Move the TLSv1.3 server message handling stubs. | jsing | 2 | -125/+125 | |
2019-11-17 | Add the initial framework for the TLSv1.3 server. | jsing | 3 | -3/+84 | |
ok beck@ | |||||
2019-11-17 | tls13_connect() should be static. | jsing | 1 | -2/+2 | |
2019-11-17 | Fix backoff to legacy when in client auth mode. | beck | 1 | -2/+2 | |
ok jsing@ | |||||
2019-11-17 | Drop back to the legacy tls method if we are doing client authenticaiton | beck | 1 | -1/+7 | |
from a tls 1.3 connection, for now. ok jsing@ | |||||
2019-11-17 | Separate the callbacks for recieved and completed post handshake messages | beck | 3 | -10/+22 | |
from the record layer ok jsing@ | |||||
2019-11-16 | Allow 1.3 ciphers in libtls. | beck | 1 | -2/+2 | |
ok jsing@ | |||||
2019-11-16 | Revert previous deduplication diff, I broke portable in a strange way. | beck | 1 | -47/+58 | |
I'll figure it out a bit later. Found and diagnosed by inoguchi@ | |||||
2019-11-16 | Allow portable to override the default CA bundle location | beck | 2 | -3/+7 | |
ok kinichiro@ jsing@ | |||||
2019-11-15 | Deduplicate some extension processing code. | beck | 1 | -58/+47 | |
ok tb@ inoguchi@ | |||||
2019-11-14 | Add missing cross-reference to NOTES section. | millert | 1 | -3/+3 | |
OK kn@ tb@ | |||||
2019-11-13 | refactor the nc pool loop to not shut down the socket early, and | beck | 1 | -36/+64 | |
to handle tls_shutdown correctly if using TLS, doing tls_shutdown correctly if we are using the -N flag ok sthen@ | |||||
2019-11-10 | It has been called to my attention that the cookie monster ascii art | beck | 1 | -17/+7 | |
in this test which I had obtained from a site purporting it to be free for use with artist attribtion might not be. After looking at at some other muppett ascii art for inspiration I am replacing this with my own ascii art muppet to replace the previously used cookie monster. The copyright for the art is the same as my code. | |||||
2019-11-09 | Add test for req -addext in appstest.sh | inoguchi | 1 | -1/+2 | |
2019-11-06 | Check return value and remove unnecessary variable | inoguchi | 1 | -7/+7 | |
- Check NCONF_new() return value - Remove unnecessary 'i' comments from jsing@ | |||||
2019-11-06 | Add -addext option to openssl(1) req subcommand | inoguchi | 1 | -3/+133 | |
First step of adding -addext option to openssl(1) req from OpenSSL 1.1.1d. ok jsing@ | |||||
2019-11-06 | use curly braces for consistency | tb | 1 | -2/+2 | |
2019-11-05 | Remove trailing space in appstest.sh | inoguchi | 1 | -15/+15 | |
2019-11-05 | Add test for cms in appstest.sh | inoguchi | 1 | -1/+57 | |
2019-11-04 | Allow ip addresses as argument to SSL_set1_host() but be careful to not | otto | 1 | -2/+14 | |
poison the context. ok and help jsing@ tb@ | |||||
2019-11-04 | Fix an out of bound read/write when using a proxy. | millert | 2 | -11/+21 | |
From Lucas AT sexy DOT is. OK job@ kn@ | |||||
2019-11-04 | Indent labels for diffability. | jsing | 1 | -5/+5 | |
2019-11-04 | Remove spaces between * and variable names. | jsing | 1 | -25/+25 | |
2019-11-04 | Remove explicit NULL checks before *_free() calls. | jsing | 1 | -21/+14 | |
2019-11-04 | Hook openssl(1) cms back up. | jsing | 3 | -4/+8 | |
2019-11-04 | Currently we need to include pem.h before cms.h... | jsing | 1 | -2/+3 | |
2019-11-04 | Remove engine argument from load_cert() calls. | jsing | 1 | -8/+8 | |
This was cleaned up after cms went to the attic. |