index
:
openbsd
OPENBSD_2_0
OPENBSD_2_1
OPENBSD_2_2
OPENBSD_2_3
OPENBSD_2_4
OPENBSD_2_5
OPENBSD_2_6
OPENBSD_2_7
OPENBSD_2_8
OPENBSD_2_9
OPENBSD_3_0
OPENBSD_3_1
OPENBSD_3_2
OPENBSD_3_3
OPENBSD_3_4
OPENBSD_3_5
OPENBSD_3_6
OPENBSD_3_7
OPENBSD_3_8
OPENBSD_3_9
OPENBSD_4_0
OPENBSD_4_1
OPENBSD_4_2
OPENBSD_4_3
OPENBSD_4_4
OPENBSD_4_5
OPENBSD_4_6
OPENBSD_4_7
OPENBSD_4_8
OPENBSD_4_9
OPENBSD_5_0
OPENBSD_5_1
OPENBSD_5_2
OPENBSD_5_3
OPENBSD_5_4
OPENBSD_5_5
OPENBSD_5_6
OPENBSD_5_7
OPENBSD_5_8
OPENBSD_5_9
OPENBSD_6_0
OPENBSD_6_1
OPENBSD_6_2
OPENBSD_6_3
OPENBSD_6_4
OPENBSD_6_5
OPENBSD_6_6
OPENBSD_6_7
OPENBSD_6_8
OPENBSD_6_9
OPENBSD_7_0
OPENBSD_7_1
OPENBSD_7_2
OPENBSD_7_3
OPENBSD_7_4
OPENBSD_7_5
OPENBSD_7_6
master
A mirror of https://github.com/libressl/openbsd.git
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
src
/
lib
/
libssl
/
ssl_tlsext.c
(
follow
)
Commit message (
Expand
)
Author
Age
Files
Lines
...
*
Rename tls13_key_share to tls_key_share.
jsing
2022-01-05
1
-12
/
+12
*
Pull key share group/length CBB code up from tls13_key_share_public()
jsing
2022-01-04
1
-5
/
+18
*
Only allow zero length key shares when we know we're doing HRR.
jsing
2022-01-04
1
-3
/
+5
*
Improve SNI hostname validation.
jsing
2021-11-01
1
-7
/
+52
*
Fold SSL_SESSION_INTERNAL back into SSL_SESSION.
jsing
2021-10-25
1
-9
/
+9
*
Do not ignore SSL_TLSEXT_ERR_FATAL from the ALPN callback
tb
2021-09-10
1
-2
/
+18
*
Correct the is_server flag in the call to the debug callback to be correct.
beck
2021-09-02
1
-2
/
+2
*
Use appropriate TLS version when building client sigalg extensions.
jsing
2021-06-29
1
-2
/
+6
*
Change ssl_sigalgs_build() to perform sigalg list selection.
jsing
2021-06-27
1
-21
/
+3
*
Only use SSL_AD_* internally.
jsing
2021-06-11
1
-25
/
+25
*
Simplify tlsext_ecpf_parse()
tb
2021-06-08
1
-8
/
+4
*
Adjust alert for ECPF without uncompressed point format
tb
2021-06-08
1
-3
/
+4
*
Make local header inclusion consistent.
jsing
2021-05-16
1
-3
/
+2
*
Explicitly include <openssl/opensslconf.h> in files using OPENSSL_NO_*
jsing
2021-05-16
1
-1
/
+2
*
Only hash known CH extensions
tb
2021-04-22
1
-5
/
+5
*
Move finished and peer finished to the handshake struct.
jsing
2021-03-29
1
-2
/
+2
*
Move the TLSv1.3 handshake struct inside the shared handshake struct.
jsing
2021-03-21
1
-30
/
+30
*
Improve internal version handling.
jsing
2021-03-10
1
-77
/
+39
*
Remove bogus DTLS checks to disable ECC and OCSP.
jsing
2021-02-08
1
-7
/
+2
*
Replace SSL_IS_DTLS with SSL_is_dtls().
jsing
2020-10-14
1
-11
/
+11
*
Constipate srtp_known_profiles, pushing it into .data.rel.ro
guenther
2020-10-11
1
-4
/
+4
*
Constipate ssl3_ciphers and tls1[23]_sigalgs*, pushing them into
guenther
2020-10-11
1
-11
/
+11
*
Set alpn_selected_len = 0 when alpn_selected is NULL
inoguchi
2020-09-09
1
-1
/
+4
*
Only parse a client's status_request in the CH
tb
2020-08-03
1
-1
/
+4
*
Ensure clients only send a status_request in the CH
tb
2020-08-03
1
-3
/
+7
*
Correctly handle server requests for an OCSP response
tb
2020-08-03
1
-1
/
+12
*
zap trailing whitespace on one line
tb
2020-07-03
1
-2
/
+2
*
Make the message type available to the extension functions
tb
2020-07-03
1
-85
/
+89
*
Improve argument order for the internal tlsext API
tb
2020-07-03
1
-11
/
+11
*
Implement a rolling hash of the ClientHello message, Enforce RFC 8446
beck
2020-06-06
1
-1
/
+35
*
Mop up servername_done, which is unused.
jsing
2020-05-29
1
-2
/
+1
*
Fix some stylistic nits from jsing.
tb
2020-05-24
1
-8
/
+11
*
Enforce that SNI hostnames be correct as per rfc 6066 and 5980.
beck
2020-05-23
1
-16
/
+78
*
Do not assume that server_group != 0 or tlsext_supportedgroups != NULL
tb
2020-05-23
1
-8
/
+12
*
Only send ocsp staples if the client asked for ocsp certificate status.
beck
2020-05-19
1
-1
/
+2
*
Add support for TLS 1.3 server to send certificate status
beck
2020-05-19
1
-1
/
+23
*
Fix pesky whitespace.
jsing
2020-05-13
1
-2
/
+2
*
Use size_t for OCSP response length.
jsing
2020-05-10
1
-5
/
+2
*
Only reset TLS extension state when parsing client hello or server hello.
jsing
2020-05-10
1
-5
/
+7
*
Add support for certificate status requests in TLS 1.3 client
beck
2020-05-09
1
-6
/
+37
*
Add support for HelloRetryRequests in the TLSv1.3 server.
jsing
2020-05-09
1
-2
/
+32
*
Handle TLSv1.3 key shares other than X25519 on the server side.
jsing
2020-04-21
1
-5
/
+19
*
drop unused include <openssl/curve25519.h>
tb
2020-02-18
1
-2
/
+1
*
Avoid potential NULL dereference when parsing a server keyshare extension.
jsing
2020-02-16
1
-1
/
+4
*
Correctly handle key share extensions in a hello retry request.
jsing
2020-02-06
1
-3
/
+9
*
Correctly unpack client key shares.
jsing
2020-02-01
1
-4
/
+9
*
Provide struct/functions for handling TLSv1.3 key shares.
jsing
2020-01-30
1
-92
/
+17
*
Add sigalgs for server side to enable client certificate processing
beck
2020-01-26
1
-5
/
+34
*
Only discard the extension block for client hello and server hello
jsing
2020-01-25
1
-2
/
+3
*
Only send an RI extension for pre-TLSv1.3 versions.
jsing
2020-01-25
1
-2
/
+2
[prev]
[next]