| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | SSL_CTX_remove_session() checks for a NULL session, avoid doing it twice. | jsing | 2021-08-04 | 1 | -2/+2 |
| * | We have defines for alert levels - use them instead of magic numbers. | jsing | 2021-07-31 | 2 | -7/+5 |
| * | Dedup dtls1_dispatch_alert()/ssl3_dispatch_alert(). | jsing | 2021-07-26 | 6 | -65/+26 |
| * | Remove DTLS processed_rcds queue. | jsing | 2021-07-21 | 3 | -50/+22 |
| * | Silently discard invalid DTLS records. | jsing | 2021-07-21 | 1 | -4/+11 |
| * | Mop up dtls1_get_ccs_header() and struct ccs_header_st. | jsing | 2021-07-19 | 3 | -21/+3 |
| * | Inline DTLS1_CCS_HEADER_LENGTH rather than having a single use variable. | jsing | 2021-07-19 | 1 | -3/+2 |
| * | Do a first pass clean up of SSL_METHOD. | jsing | 2021-07-03 | 4 | -103/+14 |
| * | Merge SSL_METHOD_INTERNAL into SSL_METHOD. | jsing | 2021-07-01 | 15 | -195/+126 |
| * | Prepare to provide SSL_get_signature_nid() and friends. | jsing | 2021-06-30 | 2 | -2/+81 |
| * | Move some structs from public to private headers. | jsing | 2021-06-30 | 3 | -125/+108 |
| * | Correct sigalg hash usage when signing content for client verify. | jsing | 2021-06-30 | 1 | -3/+2 |
| * | Pull sigalg selection up into ssl3_send_client_verify(). | jsing | 2021-06-29 | 1 | -14/+11 |
| * | Track sigalg used by ourselves and our peer in the legacy stack. | jsing | 2021-06-29 | 2 | -2/+6 |
| * | Pull up and dedup the TLS version check in ssl_sigalg_pkey_ok(). | jsing | 2021-06-29 | 1 | -5/+6 |
| * | Simplify RSA PSS key size comment. | jsing | 2021-06-29 | 1 | -5/+2 |
| * | Use appropriate TLS version when building client sigalg extensions. | jsing | 2021-06-29 | 1 | -2/+6 |
| * | Change ssl_sigalg_from_value() to take SSL * instead of a TLS version. | jsing | 2021-06-29 | 1 | -7/+6 |
| * | Make various sigalg functions static now that they're only used internally. | jsing | 2021-06-29 | 2 | -10/+5 |
| * | Convert legacy stack server to ssl_sigalg_for_peer(). | jsing | 2021-06-29 | 1 | -47/+29 |
| * | Convert legacy stack client to ssl_sigalg_for_peer(). | jsing | 2021-06-29 | 1 | -34/+12 |
| * | Provide a ssl_sigalg_for_peer() function and use in the TLSv1.3 code. | jsing | 2021-06-29 | 4 | -15/+33 |
| * | Move the RSA-PSS check for TLSv1.3 to ssl_sigalg_pkey_ok(). | jsing | 2021-06-29 | 6 | -34/+29 |
| * | Factor out handling of legacy default signature algorithms. | jsing | 2021-06-29 | 1 | -32/+27 |
| * | Mop up now unused variables. | jsing | 2021-06-29 | 1 | -7/+2 |
| * | Require a ServerHello following a HelloRetryRequest to use the same cipher. | jsing | 2021-06-29 | 1 | -2/+11 |
| * | Reject zero-length non-application data fragments in the legacy stack. | jsing | 2021-06-29 | 1 | -1/+11 |
| * | Use the order action->sender == ctx->mode everywhere for consistency. | tb | 2021-06-28 | 1 | -3/+3 |
| * | ctx->alert is not a boolean, so compare it explicitly against 0. | tb | 2021-06-28 | 1 | -3/+3 |
| * | The state machine now takes care of setting the legacy state, | tb | 2021-06-28 | 1 | -11/+1 |
| * | Expand info callback support for TLSv1.3 | tb | 2021-06-28 | 2 | -7/+187 |
| * | Track the sigalgs used by ourselves and our peer. | jsing | 2021-06-27 | 3 | -9/+14 |
| * | Have ssl3_send_client_verify() pass *pkey to called functions. | jsing | 2021-06-27 | 1 | -22/+11 |
| * | Change ssl_sigalgs_from_value() to perform sigalg list selection. | jsing | 2021-06-27 | 6 | -32/+31 |
| * | Rename ssl_sigalg() to ssl_sigalg_from_value(). | jsing | 2021-06-27 | 6 | -17/+18 |
| * | Change ssl_sigalgs_build() to perform sigalg list selection. | jsing | 2021-06-27 | 4 | -28/+29 |
| * | Tidy some comments and simplify some code. | jsing | 2021-06-27 | 1 | -15/+7 |
| * | Keep sigalg initialiser order consistent - key type, then hash. | jsing | 2021-06-27 | 2 | -20/+20 |
| * | Correct handling of SSL_OP_NO_DTLSv1. | jsing | 2021-06-27 | 1 | -3/+3 |
| * | Fix .Xr order. From mandoc -Tlint. | tb | 2021-06-26 | 2 | -7/+7 |
| * | Garbage collect prototoype for ssl_parse_serverhello_tlsext() which | tb | 2021-06-23 | 1 | -3/+1 |
| * | Correctly handle epoch wrapping in dtls1_get_bitmap(). | jsing | 2021-06-19 | 2 | -4/+5 |
| * | Provide the ability to set the initial DTLS epoch value. | jsing | 2021-06-19 | 4 | -7/+29 |
| * | Initialise the epoch for the DTLS processed and unprocessed queues. | jsing | 2021-06-19 | 1 | -1/+4 |
| * | Mop up part of dtls1_dispatch_alert(). | jsing | 2021-06-15 | 1 | -9/+2 |
| * | Simplify nonce handling in the TLSv1.2 record layer. | jsing | 2021-06-14 | 1 | -13/+16 |
| * | Remove TLS1_AD_INTERNAL_ERROR from internal visibility again | tb | 2021-06-14 | 1 | -3/+1 |
| * | ugly hack around broken build until people wake up. | deraadt | 2021-06-14 | 1 | -1/+3 |
| * | Add SSL_AD_MISSING_EXTENSION. | jsing | 2021-06-13 | 2 | -2/+9 |
| * | Define SSL_AD_* as actual values. | jsing | 2021-06-13 | 3 | -42/+49 |
