summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* spellingjsg2022-01-152-6/+6
* bump libcrypto, libssl, libtls majors after struct visibility changestb2022-01-141-1/+1
* Use the correct type for ssl_callback_ctrl()tb2022-01-141-3/+3
* Convert the new record layers to opaque EVP_AEAD_CTXtb2022-01-142-12/+6
* Convert ssl_kex.c to opaque DHtb2022-01-141-11/+11
* Use BIO_next/BIO_set_next in ssl_lib.ctb2022-01-141-3/+3
* bio_ssl.c needs to peek into bio_local.htb2022-01-142-2/+4
* Garbage collect last use of EVP_ecdsa()tb2022-01-141-2/+1
* Remove peer_pkeys from SSL_SESSION.jsing2022-01-116-96/+58
* Simplify SSL_get_peer_certificate()jsing2022-01-111-10/+8
* Rename 'peer' to 'peer_cert' in SSL_SESSION.jsing2022-01-118-37/+37
* Plumb decode errors through key share parsing code.jsing2022-01-117-48/+106
* Use SSL_AD_INTERNAL_ERROR for non-decoding alerts when parsing keyshares.jsing2022-01-111-4/+10
* Simplify tlsext_keyshare_server_parse()jsing2022-01-111-9/+5
* ssl_check_srvr_ecc_cert_and_alg() only returns 0/1 - test accordingly.jsing2022-01-091-3/+3
* Swap arguments to ssl_check_srvr_ecc_cert_and_alg()jsing2022-01-093-9/+9
* Clean up ssl3_{send,get}_client_kex_gost()jsing2022-01-092-41/+46
* Return 0/1 from ssl3_{send,get}_client_kex_gost()jsing2022-01-092-7/+7
* Remove a comment from Captain Obvious.jsing2022-01-091-4/+2
* Fix GOST skip certificate verify handling.jsing2022-01-091-19/+11
* Clean up pkey handling in ssl3_get_server_key_exchange()jsing2022-01-091-42/+22
* Merge SESS_CERT into SSL_SESSION.jsing2022-01-088-171/+76
* Remove commented out CERT_* defines.jsing2022-01-081-7/+1
* Rename CERT to SSL_CERT and CERT_PKEY to SSL_CERT_PKEY.jsing2022-01-0810-101/+101
* Rename dh_tmp to dhe_params.jsing2022-01-075-33/+39
* Stop attempting to duplicate the public and private key of dh_tmp.jsing2022-01-071-17/+1
* Convert legacy server to tls_key_share.jsing2022-01-076-233/+115
* Convert legacy TLS client to tls_key_share.jsing2022-01-067-256/+181
* Allocate and free the EVP_AEAD_CTX struct in tls13_record_protection.jsing2022-01-061-7/+13
* Provide CBB_add_u64()jsing2022-01-062-2/+21
* Rename tls13_key_share to tls_key_share.jsing2022-01-059-91/+97
* Return 0 on failure from send/get kex functions in the legacy stack.jsing2022-01-042-43/+43
* Use normal result testing for tls1_check_curve().jsing2022-01-041-2/+2
* Refactor ssl3_get_server_kex_ecdhe() to separate parsing and validation.jsing2022-01-041-20/+18
* Pull key share group/length CBB code up from tls13_key_share_public()jsing2022-01-042-27/+22
* Only allow zero length key shares when we know we're doing HRR.jsing2022-01-041-3/+5
* Hoist memset of CBB above EVP_MD_CTX_new() and HMAC_CTX_new() to avoidtb2021-12-261-3/+3
* Correct SSL_get_peer_cert_chain() when used with the TLSv1.3 stack.jsing2021-12-261-3/+6
* unifdef TLS13_USE_LEGACY_CLIENT_AUTHtb2021-12-161-9/+1
* Use CBS_get_last_u8() to find the content type in TLSv1.3 records.jsing2021-12-151-11/+12
* Provide various CBS_peek_* functions.jsing2021-12-152-2/+109
* Provide CBS_get_u64().jsing2021-12-152-2/+25
* Provide CBS_get_last_u8().jsing2021-12-152-2/+19
* Convert t1_enc.c to opaque EVP_MD_CTX.tb2021-12-091-25/+26
* Convert ssl_srvr.c to opaque EVP_MD_CTX.tb2021-12-091-42/+44
* Convert ssl_clnt.c to opaque EVP_MD_CTXtb2021-12-091-26/+29
* Convert s3_cbc.c to opaque EVP_MD_CTX.tb2021-12-091-9/+10
* Clean up and refactor server side DHE key exchange.jsing2021-12-044-120/+116
* Move the minimum DHE key size check into ssl_kex_peer_params_dhe()jsing2021-12-043-14/+19
* Check DH public key in ssl_kex_peer_public_dhe().jsing2021-12-043-8/+22