| Commit message (Expand) | Author | Age | Files | Lines |
* | Remove peer_pkeys from SSL_SESSION. | jsing | 2022-01-11 | 6 | -96/+58 |
* | Simplify SSL_get_peer_certificate() | jsing | 2022-01-11 | 1 | -10/+8 |
* | Rename 'peer' to 'peer_cert' in SSL_SESSION. | jsing | 2022-01-11 | 8 | -37/+37 |
* | Plumb decode errors through key share parsing code. | jsing | 2022-01-11 | 7 | -48/+106 |
* | Use SSL_AD_INTERNAL_ERROR for non-decoding alerts when parsing keyshares. | jsing | 2022-01-11 | 1 | -4/+10 |
* | Simplify tlsext_keyshare_server_parse() | jsing | 2022-01-11 | 1 | -9/+5 |
* | ssl_check_srvr_ecc_cert_and_alg() only returns 0/1 - test accordingly. | jsing | 2022-01-09 | 1 | -3/+3 |
* | Swap arguments to ssl_check_srvr_ecc_cert_and_alg() | jsing | 2022-01-09 | 3 | -9/+9 |
* | Clean up ssl3_{send,get}_client_kex_gost() | jsing | 2022-01-09 | 2 | -41/+46 |
* | Return 0/1 from ssl3_{send,get}_client_kex_gost() | jsing | 2022-01-09 | 2 | -7/+7 |
* | Remove a comment from Captain Obvious. | jsing | 2022-01-09 | 1 | -4/+2 |
* | Fix GOST skip certificate verify handling. | jsing | 2022-01-09 | 1 | -19/+11 |
* | Clean up pkey handling in ssl3_get_server_key_exchange() | jsing | 2022-01-09 | 1 | -42/+22 |
* | Merge SESS_CERT into SSL_SESSION. | jsing | 2022-01-08 | 8 | -171/+76 |
* | Remove commented out CERT_* defines. | jsing | 2022-01-08 | 1 | -7/+1 |
* | Rename CERT to SSL_CERT and CERT_PKEY to SSL_CERT_PKEY. | jsing | 2022-01-08 | 10 | -101/+101 |
* | Rename dh_tmp to dhe_params. | jsing | 2022-01-07 | 5 | -33/+39 |
* | Stop attempting to duplicate the public and private key of dh_tmp. | jsing | 2022-01-07 | 1 | -17/+1 |
* | Convert legacy server to tls_key_share. | jsing | 2022-01-07 | 6 | -233/+115 |
* | Convert legacy TLS client to tls_key_share. | jsing | 2022-01-06 | 7 | -256/+181 |
* | Allocate and free the EVP_AEAD_CTX struct in tls13_record_protection. | jsing | 2022-01-06 | 1 | -7/+13 |
* | Provide CBB_add_u64() | jsing | 2022-01-06 | 2 | -2/+21 |
* | Rename tls13_key_share to tls_key_share. | jsing | 2022-01-05 | 9 | -91/+97 |
* | Return 0 on failure from send/get kex functions in the legacy stack. | jsing | 2022-01-04 | 2 | -43/+43 |
* | Use normal result testing for tls1_check_curve(). | jsing | 2022-01-04 | 1 | -2/+2 |
* | Refactor ssl3_get_server_kex_ecdhe() to separate parsing and validation. | jsing | 2022-01-04 | 1 | -20/+18 |
* | Pull key share group/length CBB code up from tls13_key_share_public() | jsing | 2022-01-04 | 2 | -27/+22 |
* | Only allow zero length key shares when we know we're doing HRR. | jsing | 2022-01-04 | 1 | -3/+5 |
* | Hoist memset of CBB above EVP_MD_CTX_new() and HMAC_CTX_new() to avoid | tb | 2021-12-26 | 1 | -3/+3 |
* | Correct SSL_get_peer_cert_chain() when used with the TLSv1.3 stack. | jsing | 2021-12-26 | 1 | -3/+6 |
* | unifdef TLS13_USE_LEGACY_CLIENT_AUTH | tb | 2021-12-16 | 1 | -9/+1 |
* | Use CBS_get_last_u8() to find the content type in TLSv1.3 records. | jsing | 2021-12-15 | 1 | -11/+12 |
* | Provide various CBS_peek_* functions. | jsing | 2021-12-15 | 2 | -2/+109 |
* | Provide CBS_get_u64(). | jsing | 2021-12-15 | 2 | -2/+25 |
* | Provide CBS_get_last_u8(). | jsing | 2021-12-15 | 2 | -2/+19 |
* | Convert t1_enc.c to opaque EVP_MD_CTX. | tb | 2021-12-09 | 1 | -25/+26 |
* | Convert ssl_srvr.c to opaque EVP_MD_CTX. | tb | 2021-12-09 | 1 | -42/+44 |
* | Convert ssl_clnt.c to opaque EVP_MD_CTX | tb | 2021-12-09 | 1 | -26/+29 |
* | Convert s3_cbc.c to opaque EVP_MD_CTX. | tb | 2021-12-09 | 1 | -9/+10 |
* | Clean up and refactor server side DHE key exchange. | jsing | 2021-12-04 | 4 | -120/+116 |
* | Move the minimum DHE key size check into ssl_kex_peer_params_dhe() | jsing | 2021-12-04 | 3 | -14/+19 |
* | Check DH public key in ssl_kex_peer_public_dhe(). | jsing | 2021-12-04 | 3 | -8/+22 |
* | Align ssl_kex_derive_ecdhe_ecp() with ssl_kex_derive_dhe() | tb | 2021-11-30 | 1 | -10/+10 |
* | s/ECDHE/ECDH/ | jsing | 2021-11-30 | 1 | -3/+3 |
* | First pass of converting ssl_kex.c to opaque DH. | tb | 2021-11-29 | 1 | -30/+58 |
* | Stop using BIO_s_file_inernal() in libssl. | tb | 2021-11-29 | 3 | -13/+13 |
* | Convert server serialisation of DHE parameters/public key to new functions. | jsing | 2021-11-29 | 1 | -24/+3 |
* | Factor out/rewrite DHE key exchange. | jsing | 2021-11-29 | 3 | -66/+173 |
* | Stop reaching into EVP_PKEY in the rest of libssl. | tb | 2021-11-26 | 6 | -38/+55 |
* | Simplify two weirdly formatted pieces of code in ssl_rsa.c and stop | tb | 2021-11-26 | 1 | -27/+25 |