openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
...
*	Enforce restrictions for ClientHello extensions	tb	2020-06-24	1	-1/+44
*	Implement a rolling hash of the ClientHello message, Enforce RFC 8446	beck	2020-06-06	1	-2/+46
*	Align tls13_server_select_certificate() with	tb	2020-06-04	1	-3/+7
*	distracting whitespace	tb	2020-06-02	1	-5/+5
*	Improve server certificate selection for TLSv1.3.	jsing	2020-05-29	1	-16/+83
*	Wire up the servername callback in the TLSv1.3 server.	jsing	2020-05-29	1	-1/+16
*	Wire up SSL_MODE_AUTO_RETRY mode to retrying after PHH messages.	jsing	2020-05-23	1	-1/+4
*	Do not assume that server_group != 0 or tlsext_supportedgroups != NULL	tb	2020-05-23	1	-1/+3
*	Ensure we only attach an ocsp staple to a leaf certificate, because	beck	2020-05-22	1	-2/+7
*	Actually set the hrr flag when sending a HelloRetryRequest.	jsing	2020-05-21	1	-1/+3
*	Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.	jsing	2020-05-19	1	-3/+3
*	Add support for TLS 1.3 server to send certificate status	beck	2020-05-19	1	-3/+3
*	Avoid sending an empty certificate list from the TLSv1.3 server.	jsing	2020-05-16	1	-5/+8
*	Switch back to the legacy stack where the maximum is less than TLSv1.3.	jsing	2020-05-13	1	-2/+2
*	Set the record layer legacy version from the TLSv1.3 server.	jsing	2020-05-11	1	-1/+5
*	Use ssl_get_new_session() in the TLSv1.3 server.	jsing	2020-05-11	1	-4/+3
*	Send dummy ChangeCipherSpec messages from the TLSv1.3 server	tb	2020-05-10	1	-1/+24
*	Honour SSL_VERIFY_FAIL_IF_NO_PEER_CERT in the TLSv1.3 server.	jsing	2020-05-10	1	-6/+10
*	Provide alert defines for TLSv1.3 and use in the TLSv1.3 code.	jsing	2020-05-10	1	-11/+11
*	Back out server side CCS sending. It breaks TLSv1.3 client communication	tb	2020-05-09	1	-24/+1
*	Send dummy ChangeCipherSpec messages from the TLSv1.3 server	tb	2020-05-09	1	-1/+24
*	Make the test for the legacy_compression_method vector in the ClientHello	tb	2020-05-09	1	-12/+7
*	Add support for HelloRetryRequests in the TLSv1.3 server.	jsing	2020-05-09	1	-8/+41
*	crazy whitespace on one line	tb	2020-05-09	1	-2/+2
*	Refactor tls13_server_hello_sent().	jsing	2020-05-09	1	-30/+36
*	Move legacy stack interfacing functions into tls13_legacy.c.	jsing	2020-04-28	1	-95/+4
*	Shuffle some functions around.	jsing	2020-04-27	1	-228/+221
*	Switch to NEGOTIATED when using WITHOUT_HRR.	jsing	2020-04-25	1	-4/+9
*	Improve TLSv1.3 state machine for HelloRetryRequest handling.	jsing	2020-04-22	1	-6/+6
*	Handle TLSv1.3 key shares other than X25519 on the server side.	jsing	2020-04-21	1	-11/+15
*	Generate client key share using our preferred group.	jsing	2020-04-17	1	-2/+2
*	Use ctx->hs->secrets rather than the S3I(s) version.	jsing	2020-03-10	1	-2/+2
*	Remove some unnecessary handshake enums/functions.	jsing	2020-03-10	1	-13/+1
*	According to RFC 8446, Section 4.4.4, recipients of incorrect Finished	tb	2020-02-23	1	-2/+2
*	drop unused include <openssl/curve25519.h>	tb	2020-02-18	1	-3/+1
*	Remove the hello retry request processing code that was previously added.	jsing	2020-02-05	1	-8/+2
*	Free the transcript as soon as we initialise the transcript hash.	jsing	2020-02-04	1	-1/+2
*	Provide struct/functions for handling TLSv1.3 key shares.	jsing	2020-01-30	1	-8/+12
*	If the TLSv1.3 code has not recorded an error and something already exists	jsing	2020-01-29	1	-1/+2
*	When switching back to a legacy client or server, ensure we reset the	jsing	2020-01-26	1	-1/+2
*	Add server side support for requesting client certificates in tls 1.3	beck	2020-01-26	1	-4/+173
*	Add client certificate support for tls 1.3	beck	2020-01-26	1	-13/+1
*	Move pad and verify context into tls13_lib.c	beck	2020-01-26	1	-46/+5
*	Complete the initial TLSv1.3 implementation.	jsing	2020-01-24	1	-12/+296
*	Store the legacy session identifier from the ClientHello so we can actually	jsing	2020-01-24	1	-1/+10
*	Switch to encrypted records in the TLSv1.3 server.	jsing	2020-01-24	1	-2/+74
*	Implement client hello processing in the TLSv1.3 server.	jsing	2020-01-23	1	-5/+49
*	Correct several issues in the current TLSv1.3 server code.	jsing	2020-01-23	1	-6/+15
*	Implement sending client certificate requests for 1.3 server	beck	2020-01-23	1	-1/+13
*	Build the encrypted extensions for the 1.3 server	beck	2020-01-23	1	-2/+8