openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
...
*	Stop sending GOST R 34.10-94 as a CertificateType.	jsing	2020-06-05	1	-3/+1
*	Handle GOST in ssl_cert_dup().	jsing	2020-06-05	1	-1/+5
*	Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.	jsing	2020-06-05	2	-2/+15
*	Align tls13_server_select_certificate() with	tb	2020-06-04	1	-3/+7
*	Improve client certificate selection for TLSv1.3	tb	2020-06-04	1	-16/+80
*	mention that TLS_method(3) also supports TLSv1.3;	schwarze	2020-06-04	1	-3/+3
*	Remove const modifier in return type of tls13_handshake_active_state()	tb	2020-06-02	1	-3/+3
*	distracting whitespace	tb	2020-06-02	1	-5/+5
*	Split the handling of post handshake handshake messages into its	tb	2020-06-01	1	-55/+44
*	Send an illegal_parameter alert if a client sends us invalid DH key	tb	2020-06-01	1	-3/+15
*	Add a mechanism to set an alert in those parts of the read half of	tb	2020-06-01	1	-3/+21
*	Replace ssl_max_server_version() with ssl_downgrade_max_version()	jsing	2020-05-31	3	-30/+6
*	Correct downgrade sentinels when a version pinned method is in use.	jsing	2020-05-31	4	-7/+40
*	Improve server certificate selection for TLSv1.3.	jsing	2020-05-29	2	-23/+94
*	Handle the case where we receive a valid 0 byte application data record.	jsing	2020-05-29	1	-1/+10
*	Wire up the servername callback in the TLSv1.3 server.	jsing	2020-05-29	3	-3/+45
*	Mop up servername_done, which is unused.	jsing	2020-05-29	3	-14/+3
*	minor cleanup ahead of the following work:	schwarze	2020-05-26	1	-12/+14
*	Add additional length checks for TLSv1.3 plaintext and inner plaintext.	jsing	2020-05-26	1	-1/+6
*	Fix some stylistic nits from jsing.	tb	2020-05-24	1	-8/+11
*	Enforce that SNI hostnames be correct as per rfc 6066 and 5980.	beck	2020-05-23	2	-17/+80
*	Enable SSL_MODE_AUTO_RETRY by default.	jsing	2020-05-23	1	-1/+2
*	Wire up SSL_MODE_AUTO_RETRY mode to retrying after PHH messages.	jsing	2020-05-23	2	-2/+8
*	Provide the option to retry or return after post-handshake messages.	jsing	2020-05-23	2	-4/+16
*	fix a confusingly wrapped line	tb	2020-05-23	1	-3/+3
*	Do not assume that server_group != 0 or tlsext_supportedgroups != NULL	tb	2020-05-23	2	-9/+15
*	Ensure we only attach an ocsp staple to a leaf certificate, because	beck	2020-05-22	2	-5/+16
*	Simplify: transform a dangling else into an early return and	tb	2020-05-21	1	-20/+20
*	Make ssl_set_cert_masks() more consistent and closer to readable.	jsing	2020-05-21	1	-44/+27
*	Avoid a shadowing issue by renaming cbs and cbb to cbb_hs and cbb_hs,	tb	2020-05-21	1	-8/+7
*	A failure of tls13_handshake_msg_new() could lead to a NULL deref	tb	2020-05-21	1	-11/+15
*	Actually set the hrr flag when sending a HelloRetryRequest.	jsing	2020-05-21	1	-1/+3
*	Revert 1.43 - this fix for PHH in blocking mode breaks SSL_accept and	beck	2020-05-20	1	-2/+2
*	Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.	jsing	2020-05-19	8	-46/+31
*	Only send ocsp staples if the client asked for ocsp certificate status.	beck	2020-05-19	1	-1/+2
*	Add support for TLS 1.3 server to send certificate status	beck	2020-05-19	5	-15/+38
*	Send alerts back correctly when handling key shares, including	beck	2020-05-17	1	-8/+19
*	Free handshake message correctly, noticed by tb@	beck	2020-05-17	1	-2/+2
*	Send a decode error alert if a server provides an empty certificate list.	jsing	2020-05-17	1	-2/+2
*	Return TLS13_IO_WANT_POLLIN after processing post-handshake messages.	jsing	2020-05-16	1	-2/+2
*	Ensure that a TLSv1.3 server has provided a certificate.	jsing	2020-05-16	1	-1/+9
*	Add TLS13_ERR_NO_CERTIFICATE.	jsing	2020-05-16	2	-3/+7
*	Avoid sending an empty certificate list from the TLSv1.3 server.	jsing	2020-05-16	1	-5/+8
*	Fix pesky whitespace.	jsing	2020-05-13	1	-2/+2
*	Remove a no longer relevant XXX comment.	jsing	2020-05-13	1	-3/+1
*	Switch back to the legacy stack where the maximum is less than TLSv1.3.	jsing	2020-05-13	1	-2/+2
*	Switch the legacy version to TLS1_2_VERSION when processing server hello.	jsing	2020-05-13	1	-2/+2
*	there should only be one i in gratuitous	tb	2020-05-12	1	-3/+3
*	Enable the TLSv1.3 server.	jsing	2020-05-11	1	-1/+5
*	Propagate record overflows to the record layer and alert.	jsing	2020-05-11	3	-6/+8