summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Expand)AuthorFilesLines
2020-05-23Provide the option to retry or return after post-handshake messages.jsing2-4/+16
2020-05-23fix a confusingly wrapped linetb1-3/+3
2020-05-23Avoid an out-of-bounds array access in the s_server.tb1-1/+3
2020-05-23Do not assume that server_group != 0 or tlsext_supportedgroups != NULLtb2-9/+15
2020-05-22sockaddr should be sockaddr_storage, otherwise "openssl s_client -6 -dtls1"deraadt1-3/+4
2020-05-22Ensure we only attach an ocsp staple to a leaf certificate, becausebeck2-5/+16
2020-05-21Simplify: transform a dangling else into an early return andtb1-20/+20
2020-05-21Make ssl_set_cert_masks() more consistent and closer to readable.jsing1-44/+27
2020-05-21Avoid a shadowing issue by renaming cbs and cbb to cbb_hs and cbb_hs,tb1-8/+7
2020-05-21A failure of tls13_handshake_msg_new() could lead to a NULL dereftb1-11/+15
2020-05-21beck fixed most of the keyupdate tests. update annotationtb1-3/+8
2020-05-21Actually set the hrr flag when sending a HelloRetryRequest.jsing1-1/+3
2020-05-21hook tlsfuzzer to regresstb1-1/+2
2020-05-21Add a harness that runs tests from tlsfuzzertb2-0/+781
2020-05-20Revert 1.43 - this fix for PHH in blocking mode breaks SSL_accept andbeck1-2/+2
2020-05-20new manual page for PKCS7_set_content(3) and PKCS7_content_new(3);schwarze4-5/+127
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.jsing8-46/+31
2020-05-19Add -status and -servername test for s_server and s_client in appstest.shinoguchi1-1/+3
2020-05-19Add -groups test for s_server and s_client in appstest.shinoguchi1-3/+17
2020-05-19Only send ocsp staples if the client asked for ocsp certificate status.beck1-1/+2
2020-05-19Add support for TLS 1.3 server to send certificate statusbeck5-15/+38
2020-05-18Add client certificate test in appstest.shinoguchi1-2/+89
2020-05-18Rename variables for key, csr, pass, certinoguchi1-85/+85
2020-05-17Send alerts back correctly when handling key shares, includingbeck1-8/+19
2020-05-17Free handshake message correctly, noticed by tb@beck1-2/+2
2020-05-17As done everywhere else, use a local version of MINIMUM() and avoidderaadt5-21/+21
2020-05-17Send a decode error alert if a server provides an empty certificate list.jsing1-2/+2
2020-05-17Add GOST certificate test in appstest.shinoguchi1-26/+107
2020-05-17Suppress display output and reduce s_time to 1 sec in appstest.shinoguchi1-28/+38
2020-05-17Fix server client test with TLSv1.3 in appstest.shinoguchi1-20/+27
2020-05-16Return TLS13_IO_WANT_POLLIN after processing post-handshake messages.jsing1-2/+2
2020-05-16Ensure that a TLSv1.3 server has provided a certificate.jsing1-1/+9
2020-05-16Add TLS13_ERR_NO_CERTIFICATE.jsing2-3/+7
2020-05-16Avoid sending an empty certificate list from the TLSv1.3 server.jsing1-5/+8
2020-05-16document PKCS7_set_type(3);schwarze3-3/+123
2020-05-15Factor out session reuse test and verification testinoguchi1-56/+74
2020-05-15Factor out the test for all available ciphers and add TLSv1.3 caseinoguchi1-46/+61
2020-05-15Add ECDSA certificate test in appstest.shinoguchi1-8/+71
2020-05-14go fmt whitespace nittb1-3/+3
2020-05-14reinstate an error check that was commented out while waiting for armtb1-5/+4
2020-05-14move a #define after the last #include linetb1-3/+3
2020-05-14Skip protocol version message check in appstest.shinoguchi1-10/+15
2020-05-14Factor out the protocol version test in appstest.shinoguchi1-49/+26
2020-05-13Add TLS versioning tests.jsing1-2/+96
2020-05-13Fix pesky whitespace.jsing1-2/+2
2020-05-13Remove a no longer relevant XXX comment.jsing1-3/+1
2020-05-13Switch back to the legacy stack where the maximum is less than TLSv1.3.jsing1-2/+2
2020-05-13Switch the legacy version to TLS1_2_VERSION when processing server hello.jsing1-2/+2
2020-05-13Add description for -tls1_3 and -no_tls1_3 options to openssl(1) s_serverinoguchi1-6/+8
2020-05-13Add -tls1_3 and -no_tls1_3 options to openssl(1) s_serverinoguchi1-6/+28