Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make internal header file names consistent | tb | 2022-11-26 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook | ||||
* | tlsexttest.c: make various static structs const | tb | 2022-10-21 | 1 | -19/+19 |
| | |||||
* | quic tlsext tests: use byte vector in place of string | tb | 2022-10-21 | 1 | -10/+8 |
| | | | | | | | While this doesn't actually change anything, it should appease Coverity. CID 358678 CID 358679 | ||||
* | Revise for SSL_CTX_INTERNAL and SSL_INTERNAL removal. | jsing | 2022-10-02 | 1 | -51/+51 |
| | |||||
* | Revise regress now that SSL_QUIC_METHOD exists. | jsing | 2022-08-21 | 1 | -4/+6 |
| | |||||
* | fix error message | tb | 2022-08-05 | 1 | -2/+2 |
| | |||||
* | Use the FAIL macro instead of fprintf(stderr, "FAIL: ...\n"); | tb | 2022-08-05 | 1 | -10/+10 |
| | |||||
* | Make the bogokey[] global static const. | tb | 2022-08-05 | 1 | -7/+8 |
| | |||||
* | Move CBB_init() to a consistent place. | tb | 2022-08-05 | 1 | -10/+10 |
| | |||||
* | Consistently initialize failure to 1 at the top of the function and | tb | 2022-08-05 | 1 | -76/+62 |
| | | | | clear it right before the done label. | ||||
* | Consistently check for CBB_init() failure. | tb | 2022-08-05 | 1 | -45/+89 |
| | |||||
* | Remove most of the indirection introduced in previous and instead fetch | tb | 2022-08-05 | 1 | -400/+339 |
| | | | | | | | the appropriate tls_extension_funcs pointers for client and server from libssl and reach into them directly. ok jsing | ||||
* | Add some glue to fetch the tlsext functions from the tls_extensions[] | tb | 2022-08-04 | 1 | -190/+440 |
| | | | | table rather than calling the functions directly. | ||||
* | Revise regress for QUIC transport parameters TLS extension. | jsing | 2022-07-17 | 1 | -15/+32 |
| | |||||
* | Adjust to new tls1_ec_nid2group_id API. | tb | 2022-07-02 | 1 | -7/+13 |
| | |||||
* | Add support for sending QUIC transport parameters | beck | 2022-06-29 | 1 | -1/+257 |
| | | | | | | | | | | This is the start of adding the boringssl API for QUIC support, and the TLS extensions necessary to send and receive QUIC transport data. Inspired by boringssl's https://boringssl-review.googlesource.com/24464 ok jsing@ tb@ | ||||
* | Use relative paths so beck can run regress in his git tree and have | tb | 2022-06-29 | 1 | -2/+3 |
| | | | | the correct ssl_local.h etc be picked up. | ||||
* | Minor tweaks to psk modes regress | tb | 2022-06-06 | 1 | -3/+3 |
| | |||||
* | move the calls to psk kex modes tests down to match order in ssl_tlsext.c | tb | 2022-06-05 | 1 | -4/+4 |
| | |||||
* | Add regress coverage for PSK kex modes tlsext handlers. | tb | 2022-06-05 | 1 | -2/+210 |
| | |||||
* | Plug a number of leaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -2/+9 |
| | |||||
* | Revise for S3I removal. | jsing | 2022-02-05 | 1 | -81/+81 |
| | |||||
* | Revise for changes to tls_key_share_peer_public() | jsing | 2022-01-11 | 1 | -2/+4 |
| | |||||
* | Revise for change to tls_key_share_peer_public() | jsing | 2022-01-06 | 1 | -3/+2 |
| | |||||
* | Revise for tls13_key_share rename. | jsing | 2022-01-05 | 1 | -11/+11 |
| | |||||
* | One more leak of the same kind | tb | 2021-12-29 | 1 | -2/+2 |
| | |||||
* | Plug memleak | tb | 2021-12-29 | 1 | -3/+3 |
| | | | | CID 345160 | ||||
* | Add regress that calls SSL_set_tlsext_host_name() with a NULL host name. | jsing | 2021-11-02 | 1 | -1/+15 |
| | |||||
* | Rework SNI hostname regress to be table driven. | jsing | 2021-11-01 | 1 | -62/+147 |
| | | | | | | | Also adjust for the changes to tlsext_sni_is_valid_hostname() and include tests for IPv4 and IPv6 literals. ok beck@ | ||||
* | Free memory on text exit to make asan quieter | beck | 2021-10-26 | 1 | -53/+83 |
| | | | | ok tb@ | ||||
* | Revise regress for removal of SSL_SESSION_INTERNAL. | jsing | 2021-10-26 | 1 | -27/+27 |
| | |||||
* | The server only sends a cookie during a HRR, not a SH | tb | 2021-03-24 | 1 | -4/+4 |
| | |||||
* | Update regress for new_cipher rename. | jsing | 2021-03-24 | 1 | -4/+4 |
| | |||||
* | Revise regress to match handshake struct changes. | jsing | 2021-03-21 | 1 | -18/+18 |
| | |||||
* | Revise TLS extension regress to match version handling changes. | jsing | 2021-03-10 | 1 | -57/+25 |
| | |||||
* | No longer need to cast away const in srtp_find_profile_by_name() | tb | 2020-10-11 | 1 | -2/+2 |
| | |||||
* | Unbreak regress following SRTP_PROTECTION_PROFILE const change. | jsing | 2020-10-11 | 1 | -2/+2 |
| | |||||
* | Update golden values to match P-521 being enabled by default in the client. | jsing | 2020-08-09 | 1 | -10/+11 |
| | |||||
* | tlsexttest: pass message type to the extension functions | tb | 2020-07-03 | 1 | -144/+144 |
| | | | | ok beck jsing | ||||
* | adjust tlsexttest to new argument order | tb | 2020-07-03 | 1 | -5/+5 |
| | |||||
* | Previous commit caught a few errx() cases by accident. undo them. | tb | 2020-05-24 | 1 | -25/+25 |
| | |||||
* | include newlines in FAIL messages | tb | 2020-05-24 | 1 | -108/+108 |
| | |||||
* | address some nits from jsing | tb | 2020-05-24 | 1 | -7/+11 |
| | |||||
* | Enforce that SNI hostnames be correct as per rfc 6066 and 5980. | beck | 2020-05-23 | 1 | -1/+79 |
| | | | | | | | Correct SNI alerts to differentiate between illegal parameter and an unknown name. ok tb@` | ||||
* | Revise regress for TLSv1.3 server being enabled. | jsing | 2020-05-11 | 1 | -5/+8 |
| | |||||
* | Update key share regress to match previous change. | jsing | 2020-04-17 | 1 | -4/+4 |
| | |||||
* | Reset the key share so that we do not have an existing peer public key. | jsing | 2020-02-05 | 1 | -1/+7 |
| | |||||
* | Tweak regress to match change made to tls13_key_share_peer_public(). | jsing | 2020-02-01 | 1 | -2/+1 |
| | |||||
* | Revise for TLSv1.3 key share changes. | jsing | 2020-01-30 | 1 | -8/+27 |
| | |||||
* | server sigalgs test is now bogus, disable for now | beck | 2020-01-26 | 1 | -2/+3 |
| |