summaryrefslogtreecommitdiff
path: root/src/lib (unfollow)
Commit message (Expand)AuthorFilesLines
2021-07-03Do a first pass clean up of SSL_METHOD.jsing4-103/+14
2021-07-03Garbage collect do_test_cipherlist().jsing1-45/+0
2021-07-03Add test that ensures ssl3_ciphers[] is sorted by cipher id.jsing1-0/+37
2021-07-03Rewrite get_put_test() as cipher_find_test().jsing1-54/+25
2021-07-03fix a bug that resulted in incomplete testing:schwarze1-4/+4
2021-07-02Document the read-only (sic!) accessor function X509_NAME_ENTRY_set(3).schwarze1-9/+77
2021-07-02Add a roff comment saying that X509_certificate_type(3) is intentionallyschwarze1-2/+5
2021-07-02call the API function X509_NAME_cmp(3) instead of the obsolete,schwarze1-2/+2
2021-07-02Add a roff comment saying that X509_name_cmp(3) is intentionallyschwarze1-2/+4
2021-07-01Merge SSL_METHOD_INTERNAL into SSL_METHOD.jsing15-195/+126
2021-06-30Disable some code that reaches into libssl internals.jsing1-0/+7
2021-06-30Disable some tests that probably no longer make sense.jsing1-0/+5
2021-06-30Pull in ssl_locl.h to allow for move of struct ssl_session_st.jsing2-2/+5
2021-06-30Prepare to provide SSL_get_signature_nid() and friends.jsing2-2/+81
2021-06-30Move some structs from public to private headers.jsing3-125/+108
2021-06-30document and deprecate the macros X509_extract_key(3)schwarze1-6/+35
2021-06-30Correct sigalg hash usage when signing content for client verify.jsing1-3/+2
2021-06-29Pull sigalg selection up into ssl3_send_client_verify().jsing1-14/+11
2021-06-29Track sigalg used by ourselves and our peer in the legacy stack.jsing2-2/+6
2021-06-29Pull up and dedup the TLS version check in ssl_sigalg_pkey_ok().jsing1-5/+6
2021-06-29Simplify RSA PSS key size comment.jsing1-5/+2
2021-06-29Use appropriate TLS version when building client sigalg extensions.jsing1-2/+6
2021-06-29Change ssl_sigalg_from_value() to take SSL * instead of a TLS version.jsing1-7/+6
2021-06-29Make various sigalg functions static now that they're only used internally.jsing2-10/+5
2021-06-29Convert legacy stack server to ssl_sigalg_for_peer().jsing1-47/+29
2021-06-29Convert legacy stack client to ssl_sigalg_for_peer().jsing1-34/+12
2021-06-29Provide a ssl_sigalg_for_peer() function and use in the TLSv1.3 code.jsing4-15/+33
2021-06-29Move the RSA-PSS check for TLSv1.3 to ssl_sigalg_pkey_ok().jsing6-34/+29
2021-06-29Factor out handling of legacy default signature algorithms.jsing1-32/+27
2021-06-29Mop up now unused variables.jsing1-7/+2
2021-06-29Require a ServerHello following a HelloRetryRequest to use the same cipher.jsing1-2/+11
2021-06-29Reject zero-length non-application data fragments in the legacy stack.jsing1-1/+11
2021-06-28Use the order action->sender == ctx->mode everywhere for consistency.tb1-3/+3
2021-06-28ctx->alert is not a boolean, so compare it explicitly against 0.tb1-3/+3
2021-06-28The state machine now takes care of setting the legacy state,tb1-11/+1
2021-06-28Expand info callback support for TLSv1.3tb2-7/+187
2021-06-27Track the sigalgs used by ourselves and our peer.jsing3-9/+14
2021-06-27Have ssl3_send_client_verify() pass *pkey to called functions.jsing1-22/+11
2021-06-27Change ssl_sigalgs_from_value() to perform sigalg list selection.jsing6-32/+31
2021-06-27Rename ssl_sigalg() to ssl_sigalg_from_value().jsing6-17/+18
2021-06-27Change ssl_sigalgs_build() to perform sigalg list selection.jsing4-28/+29
2021-06-27Tidy some comments and simplify some code.jsing1-15/+7
2021-06-27Keep sigalg initialiser order consistent - key type, then hash.jsing2-20/+20
2021-06-27Add test coverage for TLSv1.3 client hellos.jsing1-13/+166
2021-06-27Add test coverage for DTLSv1.2 client hellos.jsing1-7/+102
2021-06-27Improve test coverage for SSL_OP_NO_DTLSv1.jsing1-1/+9
2021-06-27Correct handling of SSL_OP_NO_DTLSv1.jsing1-3/+3
2021-06-27Teach hexdump() how to identify differing bytes.jsing1-9/+13
2021-06-27More appropriately set cipher_list_len when AES acceleration is available.jsing1-5/+6
2021-06-27Tweak some data types and sprinkle some const.jsing1-15/+15