summaryrefslogtreecommitdiff
path: root/src/lib/libssl/t1_lib.c (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* Bring in an SSL_HANDSHAKE structure and commence the great shovellingbeck2017-05-061-7/+7
* Change SSLerror() back to taking two args, with the first one being an SSL *.beck2017-02-071-13/+13
* Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglybeck2017-01-261-23/+12
* Send the error function codes to rot in the depths of hell where they belongbeck2017-01-261-13/+13
* Remove most of SSL3_ENC_METHOD - we can just inline the function callsjsing2017-01-261-40/+1
* sk_pop_free() checks for NULL so do not bother doing it from the callers.jsing2017-01-241-5/+3
* #if 0 the ecformats_list and eccurves_list - these are currently unused butjsing2017-01-241-2/+5
* Add support for setting the supported EC curves viajsing2017-01-241-13/+96
* Correct bounds checks used when generating the EC curves extension.jsing2017-01-241-3/+3
* Fix typo in brainpool curve name within a comment.jsing2017-01-241-2/+2
* Move options and mode from SSL_CTX and SSL to internal, since these can bejsing2017-01-231-4/+5
* Split most of SSL_METHOD out into an internal variant, which is opaque.jsing2017-01-231-3/+3
* send state and rstate from ssl_st into internal. There are accessorsbeck2017-01-231-2/+2
* Move a large part of ssl_st into internal, so we can see what squeals.beck2017-01-231-70/+70
* Move most of the fields in SSL_CTX to internal - the ones that remain arejsing2017-01-231-5/+6
* move the callbacks from ssl_st to internalbeck2017-01-231-15/+15
* Move callback function pointers and argument pointers from SSL_CTX tojsing2017-01-231-16/+22
* Move most of the SSL3_STATE fields to internal - the ones that remain arejsing2017-01-221-39/+39
* Move ALPN and NPN fields from SSL/SSL_CTX to internal.jsing2017-01-221-23/+29
* Move internal parts of ssl_session_st to internalbeck2017-01-221-24/+24
* Add support for ECDHE with X25519.jsing2016-12-211-2/+6
* Convert ssl3_get_server_hello() to CBS.jsing2016-12-181-5/+4
* Convert ssl3_get_server_kex_ecdhe() to CBS, simplifying tls1_check_curve()jsing2016-11-051-16/+4
* Remove support for fixed ECDH cipher suites - these is not widely supportedjsing2016-10-191-6/+4
* Check for and handle failure of HMAC_{Update,Final} or EVP_DecryptUpdate()guenther2016-10-021-5/+11
* Detect zero-length encrypted session data early, instead of when malloc(0)guenther2016-10-021-2/+2
* Avoid unbounded memory growth, which can be triggered by a clientjsing2016-09-221-9/+20
* Improve ticket validity checking when tlsext_ticket_key_cb() callbackguenther2016-09-221-4/+25
* Be more strict when parsing TLS extensions.jsing2016-08-271-17/+37
* deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.beck2016-05-301-2/+2
* http -> https for a few more IETF URLs in comments or man pagesmmcc2016-03-101-2/+2
* Remove most of the SSLv3 version checks and a few TLS v1.0.doug2015-09-121-11/+2
* Remove the ssl_prepare_{client,server}hello_tlsext() functions, which arejsing2015-09-011-13/+1
* Properly handle missing TLS extensions in client hello as a non-failure.bcook2015-08-191-1/+3
* Convert tls1_process_ticket to CBS.doug2015-07-241-28/+36
* Convert tls1_process_sigalgs to CBS.doug2015-07-241-5/+14
* Allow *_free() functions in libssl to handle NULL input.doug2015-07-191-1/+4
* Remove compat hack that disabled ECDHE-ECDSA on OS X.doug2015-07-171-85/+1
* Convert tls1_alpn_handle_client_hello() to CBS.doug2015-06-191-20/+14
* Convert ssl_next_proto_validate to CBS.doug2015-06-171-11/+12
* Convert tls1_check_curve to CBS.doug2015-06-171-4/+10
* Fix a minor information leak that was introduced in t1_lib.c r1.71, wherebyjsing2015-03-021-2/+2
* unifdef OPENSSL_NO_NEXTPROTONEG, which is one of the last standing #ifndefjsing2014-12-141-17/+1
* Remove support for GOST R 34.10-94 signature authentication, along withjsing2014-12-101-4/+1
* Add support for ALPN.jsing2014-12-101-3/+152
* Use appropriate internal types for EC curves and formats, rather thanjsing2014-12-061-103/+115
* Ensure that the client specified EC curve list length is a multiple of two.jsing2014-12-061-2/+3
* Fix two cases where it is possible to read one or two bytes past the end ofjsing2014-12-061-3/+15
* Add brainpool curves to eccurves_default[], accidentally missing from 1.32;miod2014-12-021-2/+5
* Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov.miod2014-11-181-3/+36