Don't fail the connection in SSLv3 if server selects ECDHE
[openssl.git] / ssl / ssl_locl.h
2017-04-24 Matt CaswellDon't fail the connection in SSLv3 if server selects...
2017-04-07 Matt CaswellCreate an ENDPOINT enum type for use internally
2017-04-07 Matt CaswellPrefix custom extension API callback types with SSL_
2017-04-07 Matt CaswellImplement a new custom extensions API
2017-04-03 Dr. Stephen HensonNew certificate_authorities functions
2017-03-24 Matt CaswellMove the downgrade sentinel declarations to a header...
2017-03-24 Matt CaswellAdd client side support for TLSv1.3 downgrade mechanism
2017-03-24 Matt CaswellAdd server side support for TLSv1.3 downgrade mechanism
2017-03-17 Dr. Stephen HensonImplement certificate_authorities extension
2017-03-16 Matt CaswellMerge early_data_info extension into early_data
2017-03-16 Matt CaswellUpdate end of early data processing for draft-19
2017-03-04 Matt CaswellAdd basic TLSv1.3 cookie support
2017-03-02 Matt CaswellUpdate early data API for writing to unauthenticated...
2017-03-02 Matt CaswellOnly accept early_data if the negotiated ALPN is the...
2017-03-02 Matt CaswellDon't accept early_data if we are going to issue a...
2017-03-02 Matt CaswellValidate the ticket age for resumed sessions
2017-03-02 Matt CaswellCheck max_early_data against the amount of early data...
2017-03-02 Matt CaswellFix changing of the cipher state when dealing with...
2017-03-02 Matt CaswellConstruct the server side early_data extension
2017-03-02 Matt CaswellProvide an SSL_read_early() function for reading early...
2017-03-02 Matt CaswellImplement the early data changes required in tls13_chan...
2017-03-02 Matt CaswellParse the early_data extension
2017-03-02 Matt CaswellConstruct the early_data extension
2017-03-02 Matt CaswellProvide functions to write early data
2017-03-02 Matt CaswellParse the ticket_early_data_info extension
2017-03-02 Matt CaswellConstruct the ticket_early_data_info extension
2017-03-01 AndyCode health: ssl/ssl_locl.h unused macros
2017-03-01 Emilia KasperRemove some obsolete/obscure internal define switches:
2017-02-28 Emilia KasperClean up references to FIPS
2017-02-28 Matt CaswellRemove some dead code from libssl
2017-02-24 Dr. Stephen HensonTidy up certificate type handling.
2017-02-23 Kurt RoeckxImplement SSL_read_ex() and SSL_write_ex() as documented.
2017-02-23 Benjamin KadukAdd SSL_CTX early callback
2017-02-23 Benjamin KadukRefactor SSL_bytes_to_cipher_list()
2017-02-23 Benjamin KadukExport SSL_bytes_to_cipher_list()
2017-02-23 Benjamin KadukLet ssl_get_cipher_by_char yield not-valid ciphers
2017-02-23 Benjamin KadukMove CLIENTHELLO_MSG up in the header
2017-02-23 Benjamin KadukStore the number of extensions in CLIENTHELLO_MSG
2017-02-21 Dr. Stephen Hensonremove md array: it is not used any more.
2017-02-17 Matt CaswellDon't use an enum in the return type for a public API...
2017-02-17 Matt CaswellFix a shadowed global variable warning
2017-02-17 Matt CaswellUpdates following review feedback
2017-02-17 Matt CaswellLimit the number of KeyUpdate messages we can process
2017-02-17 Matt CaswellActually update the keys when a KeyUpdate message is...
2017-02-17 Matt CaswellProvide a function to send a KeyUpdate message
2017-02-16 Dr. Stephen HensonUse tls_choose_sigalg for client auth.
2017-02-16 Matt CaswellDon't change the state of the ETM flags until CCS proce...
2017-02-15 Dr. Stephen HensonUse CERT_PKEY pointer instead of index
2017-02-15 Dr. Stephen HensonUse cert_index and sigalg
2017-02-15 Dr. Stephen HensonAdd sigalg for earlier TLS versions
2017-02-15 Dr. Stephen HensonChange tls_choose_sigalg so it can set errors and alerts.
2017-02-15 Dr. Stephen Hensonadd ssl_has_cert
2017-02-14 Matt CaswellAdd a bytestogroup macro
2017-02-14 Matt CaswellAdd server side support for creating the Hello Retry...
2017-02-10 Dr. Stephen HensonReplace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGN
2017-02-08 Dr. Stephen HensonAdd SSL_kANY and SSL_aANY
2017-02-02 Dr. Stephen HensonAdd function tls_choose_sigalg().
2017-02-02 Cory BenfieldAdd support for logging out TLSv1.3 secrets
2017-02-01 Todd ShortMajority rules, use session_ctx vs initial_ctx
2017-01-31 Dr. Stephen HensonRemove peer_md and use peer_sigalg instead.
2017-01-31 Dr. Stephen HensonSimplify sigalgs code.
2017-01-31 Dr. Stephen HensonAdd digest and key indices to table.
2017-01-31 Dr. Stephen HensonStore table entry to peer signature algorithm.
2017-01-30 Dr. Stephen HensonReplace TLS_SIGALGS with SIGALG_LOOKUP
2017-01-30 Dr. Stephen HensonStore peer signature type.
2017-01-30 Dr. Stephen HensonUse uint16_t for signature scheme.
2017-01-30 Matt CaswellVarious style fixes following review feedback
2017-01-30 Matt CaswellMove the SSL3_CK_CIPHERSUITE_FLAG out of public header
2017-01-30 Matt CaswellIf we have no suitable PSK kex modes then don't attempt...
2017-01-30 Matt CaswellFix <= TLS1.2 break
2017-01-30 Matt CaswellMake the "ticket" function return codes clearer
2017-01-30 Matt CaswellAlways ensure that session->cipher is set
2017-01-30 Matt CaswellTweak a comment
2017-01-30 Matt CaswellImplement Server side of PSK extension parsing
2017-01-30 Matt CaswellAdd support for the age_add field
2017-01-30 Matt CaswellConstruct the client side psk extension for TLSv1.3
2017-01-30 Matt CaswellAdd support for the psk_key_exchange_modes extension
2017-01-30 Matt CaswellMove state machine knowledge out of the record layer
2017-01-26 Dr. Stephen HensonUse correct signature algorithm list when sending or...
2017-01-25 FdaSilvaYYFix a few misspellings.
2017-01-23 Cory BenfieldAdd support for key logging callbacks.
2017-01-11 Matt CaswellFix compilation with no-nextprotoneg
2017-01-10 Matt CaswellExtend PSS signature support to TLSv1.2
2017-01-10 Matt CaswellVerify that the sig algs extension has been sent for...
2017-01-10 Matt CaswellFix client application traffic secret
2017-01-10 Matt CaswellRemove some unneeded functions
2017-01-10 Matt CaswellUse NIDs instead of the old TLSv1.2 sigalgs hash and...
2017-01-10 Matt CaswellRemove a redundant function
2017-01-10 Matt CaswellConvert Sigalgs processing to use ints
2017-01-10 Matt CaswellMake CertificateVerify TLS1.3 aware
2017-01-10 Rich SalzReview comments
2017-01-10 Rich SalzUse typedefs for PSK, NPN, ALPN callback functions
2017-01-10 Rich SalzMove extension data into sub-structs
2017-01-06 Matt CaswellCreate Certificate messages in TLS1.3 format
2016-12-08 Matt CaswellFix more style issues following extensions refactor...
2016-12-08 Matt CaswellIntroduce TLSEXT_STATUSTYPE_nothing constant
2016-12-08 Matt CaswellChange TLSEXT_IDX_* values into an enum
2016-12-08 Matt CaswellMove ServerHello extension parsing into the new extensi...
2016-12-08 Matt CaswellAvoid repeatedly scanning the list of extensions
2016-12-08 Matt CaswellSimplify ClientHello extension parsing
next