Don't filter TLS 1.3 ciphersuites by signing or key exchange algorithm
[openssl.git] / ssl / ssl_lib.c
2017-02-02 Dr. Stephen HensonFor TLS 1.3 retrieve previously set certificate index
2017-02-02 Cory BenfieldAdd support for logging out TLSv1.3 secrets
2017-02-01 Todd ShortMajority rules, use session_ctx vs initial_ctx
2017-01-30 Matt CaswellMake calls to SSL_renegotiate() error out for TLSv1.3
2017-01-30 Matt CaswellDisable requests for renegotiation in TLSv1.3
2017-01-30 Matt CaswellMove state machine knowledge out of the record layer
2017-01-25 Cory BenfieldLimit the length of the encrypted premaster key.
2017-01-25 FdaSilvaYYFix a few misspellings.
2017-01-23 Cory BenfieldAdd support for key logging callbacks.
2017-01-10 Matt CaswellAdd a TODO(TLS1.3) around certificate selection
2017-01-10 Rich SalzUse typedefs for PSK, NPN, ALPN callback functions
2017-01-10 Rich SalzMove extension data into sub-structs
2016-12-08 Matt CaswellIntroduce TLSEXT_STATUSTYPE_nothing constant
2016-11-23 Matt CaswellImplement tls13_change_cipher_state()
2016-11-17 Kurt RoeckxAdd support for reference counting using C11 atomics
2016-11-15 Rob PercivalCheck that SCT timestamps are not in the future
2016-11-10 Matt CaswellRename the Elliptic Curves extension to supported_groups
2016-11-04 Matt CaswellRename all "read" variables with "readbytes"
2016-11-04 Matt CaswellFix misc size_t issues causing Windows warnings in...
2016-11-04 Matt CaswellConvert SSL BIO to use SSL_write_ex().
2016-11-04 Matt CaswellFix some missed size_t updates
2016-11-04 Matt CaswellConvert some libssl local functions to size_t
2016-11-04 Matt CaswellUpdate numerous misc libssl fields to be size_t
2016-11-04 Matt CaswellConvert master_secret_size code to size_t
2016-11-04 Matt CaswellConvert some misc record layer functions for size_t
2016-11-04 Matt CaswellConvert libssl writing for size_t
2016-11-04 Matt CaswellFurther libssl size_t-ify of reading
2016-11-02 Matt CaswellConvert a big "if" into a "switch"
2016-11-02 Matt CaswellAdd the SSL_METHOD for TLSv1.3 and all other base chang...
2016-11-01 Todd ShortAdd SSL_CTX_set1_cert_store()
2016-09-21 Rich SalzRevert "Constify code about X509_VERIFY_PARAM"
2016-09-18 FdaSilvaYYConstify code about X509_VERIFY_PARAM
2016-08-24 Rob PercivalFix comment about return value of ct_extract_tls_extens...
2016-08-18 Emilia KasperIndent ssl/
2016-08-15 Rob PercivalImproves CTLOG_STORE setters
2016-08-04 David WoodhouseFix SSL_export_keying_material() for DTLS1_BAD_VER
2016-07-29 Matt CaswellSimplify and rename SSL_set_rbio() and SSL_set_wbio()
2016-07-29 Matt CaswellDon't double free the write bio
2016-07-20 Matt CaswellNever expose ssl->bbio in the public API.
2016-07-20 FdaSilvaYYFix a few if(, for(, while( inside code.
2016-07-12 Viktor DukhovniPerform DANE-EE(3) name checks by default
2016-06-21 FdaSilvaYYSpelling... and more spelling
2016-06-11 Kurt RoeckxDon't compare a just free()d pointer
2016-06-08 Rich SalzAdd some accessor API's
2016-06-08 Todd ShortAlways use session_ctx when removing a session
2016-05-31 Dr. Stephen Hensonreturn error in ct_move_scts()
2016-05-20 Matt CaswellSimplify SSL BIO buffering logic
2016-05-19 Viktor DukhovniWhen strict SCT fails record verification failure
2016-05-17 Rich SalzCopyright consolidation 01/10
2016-05-16 TJ Saunderssession tickets: Use sizeof() for the various fields
2016-05-16 Alessandro GhediniAdd SSL_client_version() getter function
2016-05-16 jfigusPropagate tlsext_status_type from SSL_CTX to SSL
2016-05-16 FdaSilvaYYUnify <TYPE>_up_ref methods signature and behaviour.
2016-05-09 FdaSilvaYYfix tab-space mixed indentation
2016-05-05 Matt CaswellHandle no async jobs in libssl
2016-04-28 FdaSilvaYYAdd checks on CRYPTO_new_ex_data return value
2016-04-28 FdaSilvaYYvarious spelling fixes
2016-04-28 Matt CaswellDon't leak memory on error path in dane_ctx_enable()
2016-04-27 Matt Caswellsplit_send_fragment should always be less than or equal...
2016-04-22 Viktor DukhovniEnabled DANE only when at least one TLSA RR was added
2016-04-11 Kazuki YamaguchiAdd SSL_CTX_get_ciphers()
2016-04-08 Rich SalzAdd SSL_DANE typedef for consistency.
2016-04-07 Andy PolyakovClean-up *_DEBUG options.
2016-04-07 Viktor DukhovniSuppress CT callback as appropriate
2016-04-06 Matt CaswellFix no-ocsp
2016-04-04 Rich SalzRevert "various spelling fixes"
2016-04-04 FdaSilvaYYvarious spelling fixes
2016-03-29 Matt CaswellMake BIO opaque
2016-03-20 Rich SalzRemove #error from include files.
2016-03-17 Viktor DukhovniReport TLS 1.0 as backwards-compatible TLSv1
2016-03-10 Rob Percivalcheck reviewer --reviewer=emilia
2016-03-09 Kurt RoeckxDeprecate the use of version-specific methods
2016-03-09 Kurt RoeckxAdd support for minimum and maximum protocol version...
2016-03-09 Kurt RoeckxMake function to convert version to string
2016-03-09 Kurt RoeckxConstify security callbacks
2016-03-09 Rob PercivalDo not display a CT log error message if CT validation...
2016-03-09 Richard LevitteCounter mixed signedness with a cast
2016-03-08 Alessandro GhediniConvert CRYPTO_LOCK_SSL_* to new multi-threading API
2016-03-08 Todd ShortGH787: Fix ALPN
2016-03-07 Matt CaswellFix erroneous fall thgrough in switch statement
2016-03-07 Matt CaswellAdd an SSL_has_pending() function
2016-03-07 Matt CaswellAdd an ability to set the SSL read buffer size
2016-03-07 Matt CaswellImplement read pipeline support in libssl
2016-03-07 Matt CaswellImplement write pipeline support in libssl
2016-03-07 Rob PercivalUse s->session->peer instead of calling SSL_get_peer_ce...
2016-03-07 Rob PercivalLowercase name of SSL_validate_ct as it is an internal...
2016-03-07 Rob PercivalCT code now calls X509_free() after calling SSL_get_pee...
2016-03-04 Rob PercivalAdds CT validation to SSL connections
2016-03-02 Christian HeimesProvide getters for default_passwd_cb and userdata
2016-02-29 Matt CaswellRefactor the async wait fd logic
2016-02-25 Rich SalzGH715: ENGINE_finish can take NULL
2016-02-25 Rich SalzGH235: Set error status on malloc failure
2016-02-24 Dr. Stephen HensonRemove unused parameter in ssl_set_masks().
2016-02-18 Rich SalzRemove outdated DEBUG flags.
2016-02-18 Zhao JunwangGH706: Use NULL for pointer compare.
2016-02-17 Dr. Stephen Hensonremove redundant code
2016-02-11 Dr. Stephen HensonRemove static ECDH support.
2016-02-11 Rich SalzMove to REF_DEBUG, for consistency.
2016-02-10 Matt CaswellThe new init functions can now fail so shouldn't be...
2016-02-10 Rich SalzRename INIT funtions, deprecate old ones.
next