summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_srvr.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Pass the session ID down to the session/ticket handling code as a CBS.jsing2019-04-221-3/+2
* Inline and remove the tlsext_tick_md macro.jsing2019-04-221-2/+2
* Defer sigalgs selection until the certificate is known.jsing2019-03-251-2/+2
* Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains.jsing2019-03-251-4/+4
* Rename tls1_handshake_hash*() to tls1_transcript_hash*().jsing2019-02-091-3/+3
* Rename TLS extension handling to use less "hello".jsing2019-01-181-3/+3
* Remove an ugly hack in the client certificate verification code that workstb2018-12-071-48/+44
* Fix DTLS transcript handling for HelloVerifyRequest.jsing2018-11-211-5/+2
* Add check function to verify that pkey is usable with a sigalg.beck2018-11-111-3/+3
* quiet warning on other compilersbcook2018-11-111-3/+3
* Free the server tls transcript in case session reuse did not work.bluhm2018-11-111-3/+4
* Add support for RSA PSS algorithims being used in sigalgs.beck2018-11-111-1/+15
* Convert signatures and verifcation to use the EVP_DigestXXX apibeck2018-11-111-18/+40
* Stop keeping track of sigalgs by guessing it from digest and pkey,beck2018-11-101-23/+12
* Ensure we only choose sigalgs from our prefernce list, not the whole listbeck2018-11-091-2/+3
* Add the ability to have a separate priority list for sigalgs.beck2018-11-091-2/+2
* Reimplement the sigalgs processing code into a new implementationbeck2018-11-091-23/+13
* Clean up and simplify the handshake transcript code.jsing2018-11-081-51/+23
* Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.jsing2018-11-081-7/+1
* Ensure the handshake transcript is cleaned up.jsing2018-11-081-1/+7
* Convert ssl3_get_cert_verify() to CBS and clean up somewhat.jsing2018-08-271-74/+72
* Add some missing statics.jsing2018-08-271-2/+2
* Simplify new session ticket encoding/generation.jsing2018-08-271-63/+38
* Simplify session ticket parsing/handling.jsing2018-08-241-8/+7
* Pull up the parsing of a ClientHello.jsing2018-08-241-20/+20
* Clean up handshake message start/finish functions.jsing2018-08-241-17/+17
* Correct session ticket encryption.jsing2018-08-221-4/+11
* Rename and collapse tls12_get_sigandhash_cbb().jsing2018-08-191-3/+2
* Convert ssl3_send_newsession_ticket() to CBB.jsing2018-08-191-55/+64
* Simplify the add signature code/logic in ssl3_send_server_key_exchange().jsing2018-08-161-13/+8
* Convert ssl3_send_server_key_exchange() to CBB.jsing2018-08-161-44/+45
* Actually check the return values for EVP_Sign* and EVP_Verify*.jsing2018-08-141-7/+11
* Simplify server kex exchange signature generation.jsing2018-08-101-61/+33
* Now that all of the server-side client key exchange processing functionsjsing2018-06-101-53/+40
* Allocate a dedicated buffer for use when deriving a shared key duringjsing2018-06-031-10/+18
* Convert ssl3_get_client_kex_ecdhe_ecp() to CBS.jsing2018-06-021-44/+42
* Clean out a pile of cruft from ssl3_get_client_kex_ecdhe_ecp().jsing2018-05-191-93/+38
* Convert ssl3_get_client_kex_gost() to CBS.jsing2018-05-191-21/+23
* More clean up of the RSA key exchange code.jsing2018-05-131-24/+34
* Nuke SSL_OP_TLS_ROLLBACK_BUG - this is a workaround for buggy clients fromjsing2018-04-111-30/+15
* Initialize variables to avoid compiler warningsinoguchi2018-01-281-2/+2
* Complete the TLS extension handling rewrite for the server-side.jsing2018-01-271-9/+10
* Fold dtls1_accept() into ssl_accept(), removing a lot of duplicated code.jsing2017-10-121-16/+137
* Fully convert ssl3_send_server_hello() to CBB.jsing2017-10-111-25/+17
* Make ssl_bytes_to_cipher_list() take a CBS, rather than a pointer andjsing2017-10-101-2/+3
* Fix some style/whitespace/indentation issues in ssl3_accept().jsing2017-10-081-25/+14
* Convert TLS signature algorithms extension handling to the new framework.jsing2017-08-121-4/+4
* Remove NPN support.jsing2017-08-121-98/+6
* Remove support for DSS/DSA, since we removed the cipher suites a whilejsing2017-08-121-12/+1
* Convert ssl3_send_certificate_request() to CBB.jsing2017-08-111-45/+46