| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_version | jca | 2018-03-15 | 1 | -13/+13 | |
| | | | | | | | | | | We already provided the setters, so also provide the getters like OpenSSL does. Addition prompted by the use of those functions in recent openvpn releases. manpage diff from schwarze@ (thanks!) with input from jsing@, ok tb@ jsing@ | |||||
| * | Update regress to use tlsext_serverhello_parse(). | jsing | 2018-02-08 | 1 | -5/+3 | |
| | | ||||||
| * | Update regress to match removal of ssl_parse_clienthello_tlsext(). | jsing | 2018-01-27 | 1 | -5/+8 | |
| | | ||||||
| * | Initialise new_cipher in the serverhello TLS extensions test, to avoid a | jsing | 2017-12-28 | 1 | -3/+14 | |
| | | | | | | | | | | | NULL pointer dereference in ssl_using_ecc_cipher(). Some compilers avoid triggering this, likely due to the EC formats list also being NULL. While here, setup the EC formats list so that we actually include the EC points format extension in the server hello extensions. Found the hard way by bcook@ | |||||
| * | Add regress test coverage for building clienthello and serverhello | jsing | 2017-11-28 | 1 | -4/+201 | |
| | | | | | | extensions, both with extensions being present and not present. The not present case currently fails. | |||||
| * | Add regress for CBB_discard_child(). | jsing | 2017-11-28 | 1 | -2/+56 | |
| | | | | | Converted from BoringSSL. | |||||
| * | Update regress now that ssl_cipher_list_to_bytes() takes a CBB. | jsing | 2017-10-11 | 1 | -3/+9 | |
| | | | | | Based on a diff from doug@ | |||||
| * | Revise regress now that ssl_bytes_to_cipher_list() takes a CBS. | jsing | 2017-10-10 | 1 | -20/+10 | |
| | | ||||||
| * | When parsing extensions by calling the parse functions directly, ensure | jsing | 2017-08-29 | 1 | -2/+82 | |
| | | | | | | that we have consumed all of the extension data. This catches the ALPN extension handling issue that was just fixed. | |||||
| * | Use current chacha20-poly1305 cipher suite values. | jsing | 2017-08-28 | 1 | -7/+7 | |
| | | ||||||
| * | Update due to removal of original chacha20-poly1305 cipher suites. | jsing | 2017-08-28 | 1 | -42/+39 | |
| | | ||||||
| * | Rewrite SRTP extension using CBB/CBS and the new extension framework. | doug | 2017-08-27 | 1 | -1/+402 | |
| | | | | | input + ok beck@, jsing@ | |||||
| * | check return value from CBB_init | beck | 2017-08-27 | 1 | -2/+3 | |
| | | ||||||
| * | Rewrite ALPN extension using CBB/CBS and the new extension framework. | doug | 2017-08-26 | 1 | -1/+381 | |
| | | | | | | ok bcook@ beck@ input + ok jsing@ | |||||
| * | Rewrite the TLS status request extension to use the new TLS extension framework. | beck | 2017-08-12 | 1 | -1/+128 | |
| | | | | | ok jsing@ | |||||
| * | Add regress coverage for the TLS signature algorithms extension. | jsing | 2017-08-12 | 1 | -1/+163 | |
| | | ||||||
| * | Rewrite session ticket TLS extension handling using CBB/CBS and the new | doug | 2017-08-12 | 1 | -1/+302 | |
| | | | | | | | extension framework. ok jsing@ beck@ | |||||
| * | Remove NPN test coverage. | jsing | 2017-08-12 | 2 | -129/+1 | |
| | | ||||||
| * | errant whitespace | beck | 2017-08-12 | 1 | -3/+3 | |
| | | ||||||
| * | Update the TLSv1.2 Client Hello messages, due to the removal of DSA | jsing | 2017-08-12 | 1 | -20/+18 | |
| | | | | | sigalgs. | |||||
| * | Be consistent with goto labels, failure flag and use of FAIL macro. | jsing | 2017-08-11 | 1 | -128/+105 | |
| | | ||||||
| * | doug@ added code in here as well. | jsing | 2017-08-11 | 1 | -1/+2 | |
| | | ||||||
| * | Sort by extension/function name. | jsing | 2017-08-11 | 1 | -577/+576 | |
| | | ||||||
| * | Rewrite EllipticCurves TLS extension handling using CBB/CBS and the new | doug | 2017-08-11 | 1 | -1/+337 | |
| | | | | | | | extension framework. input + ok jsing@ | |||||
| * | Rewrite the ECPointFormats TLS extension handling using CBB/CBS and the | doug | 2017-08-11 | 1 | -1/+470 | |
| | | | | | | | new extension framework. input + ok jsing@ | |||||
| * | Extend the SNI tests to ensure that we have a hostname in the session | jsing | 2017-07-24 | 1 | -2/+31 | |
| | | | | | | | after a successful tlsext_sni_serverhello_parse() and that tlsext_sni_clienthello_parse() fails if we have an existing session and the SNI is mismatched. | |||||
| * | Add regress coverage for the TLS Renegotiation Indication extension. | jsing | 2017-07-24 | 1 | -1/+266 | |
| | | ||||||
| * | Provide a new regress test for TLS extension handlers, currently covering | jsing | 2017-07-16 | 3 | -1/+256 | |
| | | | | | the newly converted SNI code. | |||||
| * | Revise cipher suites in regress to match DSS cipher suite removal. | jsing | 2017-05-07 | 1 | -96/+82 | |
| | | ||||||
| * | Bring in an SSL_HANDSHAKE structure and commence the great shovelling | beck | 2017-05-06 | 1 | -2/+2 | |
| | | | | | ok jsing@, gcc@, regress@ | |||||
| * | Add regress coverage for SSL{,_CTX}_set_{min,max}_proto_version(). | jsing | 2017-05-06 | 1 | -12/+304 | |
| | | ||||||
| * | Update regress to match changes to tls1_PRF(). | jsing | 2017-03-25 | 1 | -10/+10 | |
| | | ||||||
| * | Update regress and remove temporary buffer to match changes in tls_PRF(). | jsing | 2017-03-18 | 1 | -8/+4 | |
| | | ||||||
| * | Add a unit test for tls1_PRF(). | jsing | 2017-03-10 | 2 | -1/+257 | |
| | | ||||||
| * | Add an initial regress test that covers the server-side of libssl, by | jsing | 2017-03-05 | 3 | -1/+220 | |
| | | | | | providing SSL_accept() with fixed ClientHello messages. | |||||
| * | Treat "ERROR in STARTUP" as an actual error, rather than failing without | jsing | 2017-03-04 | 1 | -2/+2 | |
| | | | | | | | | exiting non-zero (which has been masking a DTLS related issue). Also make the message consistent with other errors. Spotted by inogochi@ | |||||
| * | Remove commented out code and fix indentation of surrounding statements. | jsing | 2017-03-04 | 1 | -12/+5 | |
| | | ||||||
| * | Remove handling for SSLv2. | jsing | 2017-03-04 | 1 | -14/+3 | |
| | | ||||||
| * | Update ssl versions regress to handle min/max configured versions and | jsing | 2017-01-25 | 1 | -47/+201 | |
| | | | | | the cover the ssl_supported_version_range() function. | |||||
| * | Update client tests for changes in default EC formats/curves. | jsing | 2017-01-24 | 1 | -52/+31 | |
| | | ||||||
| * | Use prime256v1 for tests unless otherwise specified. | jsing | 2017-01-24 | 1 | -4/+0 | |
| | | ||||||
| * | Fix regress to handle movement of ssl structures to internal | beck | 2017-01-23 | 1 | -2/+4 | |
| | | ||||||
| * | Update the TLS ALPN unit tests to work with internal/opaque data. | jsing | 2017-01-22 | 2 | -13/+11 | |
| | | ||||||
| * | Add regress tests for max shared version code. | jsing | 2017-01-03 | 1 | -2/+133 | |
| | | ||||||
| * | Add regress coverage for enabled protocol version range. | jsing | 2016-12-30 | 2 | -1/+146 | |
| | | ||||||
| * | Extend regress to include a peer certificate in the session. | jsing | 2016-12-26 | 1 | -58/+134 | |
| | | ||||||
| * | Ensure that after an i2d_SSL_SESSION() call, the passed pointer now points | jsing | 2016-12-26 | 1 | -8/+9 | |
| | | | | | to the end of the buffer. | |||||
| * | Update regress for ECDHE with X25519. | jsing | 2016-12-21 | 1 | -41/+41 | |
| | | ||||||
| * | Ensure negative time/timeout are handled appropriately. | jsing | 2016-12-21 | 1 | -1/+27 | |
| | | ||||||
| * | Revise regress for changes to ssl_parse_serverhello_tlsext(). | jsing | 2016-12-18 | 1 | -3/+3 | |
| | | | | | Same diff from inoguchi@ | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |