openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Allow more key share groups for TLSv1.3.	jsing	2020-04-18	1	-21/+12
\| \| \| \| \| \| \| \|	The key share code previously only allowed for key shares to be generated using one of the groups in our default list (X25519, secp256r1, secp384r1). Relax this and allow key shares using any of the groups in our NID list. ok inoguchi@ tb@
*	Generate client key share using our preferred group.	jsing	2020-04-17	1	-9/+17
\| \| \| \| \| \| \| \|	Generate a client key share using our preferred group, rather than always using X25519. This means that the key share group can be controlled via SSL{_CTX,}_set1_groups() and SSL{_CTX,}_set1_groups_list(). ok beck@
*	Add support for TLSv1.3 key shares with secp256r1 and secp384r1 groups.	jsing	2020-02-04	1	-5/+98
\| \| \| \|	ok inoguchi@ tb@
*	Correctly unpack client key shares.	jsing	2020-02-01	1	-10/+2
\| \| \| \| \| \| \| \|	Even if we're not processing/using the peer public key from the key share, we still need to unpack it in order to parse the TLS extension correctly. Resolves issues with TLSv1.3 clients talking to TLSv1.2 server. ok tb@
*	Provide struct/functions for handling TLSv1.3 key shares.	jsing	2020-01-30	1	-0/+224
	Pull out the key share handling code and provide a clean/self contained interface. This will make it easier to support groups other than X25519. ok beck@ inoguchi@ tb@