summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_tlsext.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* LibreSSL 3.1.4 - Interoperability and bug fixes for the TLSv1.3 client:tb2020-08-101-6/+43
* Handle TLSv1.3 key shares other than X25519 on the server side.jsing2020-04-211-5/+19
* drop unused include <openssl/curve25519.h>tb2020-02-181-2/+1
* Avoid potential NULL dereference when parsing a server keyshare extension.jsing2020-02-161-1/+4
* Correctly handle key share extensions in a hello retry request.jsing2020-02-061-3/+9
* Correctly unpack client key shares.jsing2020-02-011-4/+9
* Provide struct/functions for handling TLSv1.3 key shares.jsing2020-01-301-92/+17
* Add sigalgs for server side to enable client certificate processingbeck2020-01-261-5/+34
* Only discard the extension block for client hello and server hellojsing2020-01-251-2/+3
* Only send an RI extension for pre-TLSv1.3 versions.jsing2020-01-251-2/+2
* Rename failure into alert_desc in tlsext_ocsp_server_parse().tb2020-01-221-5/+5
* fix previous: alert_desc needs to be an int.tb2020-01-221-2/+2
* Avoid modifying alert in the success path.tb2020-01-221-11/+17
* Revert previous deduplication diff, I broke portable in a strange way.beck2019-11-161-47/+58
* Deduplicate some extension processing code.beck2019-11-151-58/+47
* Relax parsing of TLS key share extensions on the server.jsing2019-05-291-5/+2
* Do not send an SNI extension when resuming a session that contains a serverjsing2019-05-291-1/+4
* Fix typo and label indent.jsing2019-05-281-3/+3
* Tidy up some names/structures following the renaming of TLS extensionjsing2019-05-281-35/+35
* In DTLS, use_srtp is part of the extended server hello while in TLSv1.3,tb2019-05-081-2/+3
* Defer sigalgs selection until the certificate is known.jsing2019-03-251-9/+6
* Revert TLS1_get{,_client}_version simplification because DTLS.jsing2019-03-191-5/+5
* Partially clean up the TLS1_get_{,client}_version macros.jsing2019-03-171-5/+5
* Revert r1.38 as it introduces use of a stack value post function return.jsing2019-02-031-50/+86
* unwrap a line introduced in previous.tb2019-01-311-3/+2
* Correct handling of TLS sigalgs extension for TLSv1.0/TLSv1.1.jsing2019-01-301-33/+19
* Deduplicate a bunch of replicated code in the extension handlingbeck2019-01-281-86/+50
* Add tls_extension_seen(), a utility to know if a particular extensionbeck2019-01-281-8/+13
* Add server side of versions, keyshare, and client and server of cookiebeck2019-01-241-19/+289
* move the extensions_seen into the handshake structbeck2019-01-241-4/+5
* Modify sigalgs extension processing to accomodate TLS 1.3.beck2019-01-231-3/+33
* revert previous, accidentally contained another diff in additionbeck2019-01-231-326/+22
* Modify sigalgs extension processing for TLS 1.3.beck2019-01-231-22/+326
* TLS 1.3 clients always need to send the supported groups extension.jsing2019-01-201-4/+5
* bump copyright years appopriatelybeck2019-01-181-3/+3
* Add client side of supported versions and keyshare extensions with basic regressbeck2019-01-181-1/+222
* Add support for RFC 8446 section 4.2 enforcing which extensions maybeck2019-01-181-8/+43
* Rename TLS extension handling to use less "hello".jsing2019-01-181-148/+147
* Add the ability to have a separate priority list for sigalgs.beck2018-11-091-2/+2
* Reimplement the sigalgs processing code into a new implementationbeck2018-11-091-6/+5
* Rename the TLS Supported Elliptic Curves extension to Supported Groups.jsing2018-11-051-39/+38
* Rework the TLS extension handling code to improve readability/flexibility,jsing2018-11-051-89/+112
* If we fail to decode an EC point format extension, send a decode_errorjsing2018-05-121-4/+6
* Complete the TLS extension rewrite on the client-side.jsing2018-02-081-69/+72
* Complete the TLS extension handling rewrite for the server-side.jsing2018-01-271-13/+69
* Clarify the comment re the F5 EC curves extension bug.jsing2018-01-271-5/+6
* Correct TLS extensions handling when no extensions are present.jsing2017-11-281-1/+13
* Fix various issues in the OCSP extension parsing code:jsing2017-09-251-20/+14
* When building the OCSP extension, only add the length prefixed extensionsjsing2017-09-251-6/+6
* Move the full extension building into tlsext_{client,server}hello_build(),jsing2017-08-301-13/+17