summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_transcript.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2021-05-10Expose EC_POINT_{get,set}_affine_coordinates(3) andtb2-7/+11
EC_POINT_set_compressed_coordinates(3) ok jsing
2021-05-10Expose EC_GROUP_{get,set}_curve(3)tb2-3/+4
ok jsing
2021-05-09Add draft-ietf-sidrops-rpki-rsc OIDjob2-0/+2
Listed under 'SMI Security for S/MIME CMS Content Type (1.2.840.113549.1.9.16.1)' https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-1 OK tb@
2021-05-09Prepare to provide EVP_Digest{Sign,Verify}tb2-3/+35
These are one-shot versions combining EVP_Digest{Sign,Verify}{Update,Final}. and are part of the OpenSSL 1.1.1 API. While they simplify callers in some situations slightly, their real use is for EdDSA that by design can't be split into Update/Final steps. Based on OpenSSL commit 7539418981c140648a620d72edd7398564878b5c ok inoguchi
2021-05-05Replace DTLS w_epoch with epoch from TLSv1.2 record layer.jsing5-29/+20
ok inoguchi@ tb@
2021-05-05Rewrite TLSv1.2 key block handling.jsing5-134/+247
For TLSv1.2 a single key block is generated, then partitioned into individual secrets for use as IVs and keys. The previous implementation splits this across two functions tls1_setup_key_block() and tls1_change_cipher_state(), which means that the IV and key sizes have to be known in multiple places. This implementation generates and partitions the key block in a single step, meaning that the secrets are then simply handed out when requested. ok inoguchi@ tb@
2021-05-04Rename shutdown_all() to shutdown_peers() for consistency.tb1-3/+3
2021-05-03Use limits.h instead of sys/limits.h in dtlstest.c for portableinoguchi1-2/+2
discussed and input from jsing@
2021-05-03Modify regress ssl_get_shared_ciphers for portableinoguchi2-6/+6
- Split out the intermediate path (../certs/) to Makefile - Change 'shutdown' to 'shutdown_all' ok tb@
2021-05-03Hook openssl-ruby test to regress treetb1-1/+2