INSTALL: clarify a bit more how Configure treats "unknown" options
[openssl.git] / ssl /
2017-05-11 Bernd EdlingerFix gcc-7 warnings.
2017-05-11 Matt CaswellAdd some extra comments following alert changes
2017-05-11 Matt CaswellAdd some checks for trailing data after extension blocks
2017-05-11 Matt CaswellSend a missing_extension alert if key_share/supported...
2017-05-11 Matt CaswellTLSv1.3 alert and handshake messages can never be 0...
2017-05-11 Matt CaswellTLSv1.3 alerts cannot be fragmented and only one per...
2017-05-11 Matt CaswellCheck that a TLSv1.3 encrypted message has an app data...
2017-05-11 Matt CaswellSend an illegal parameter alert if the update type...
2017-05-11 Matt CaswellEnsure we fail with a decode error alert if the server...
2017-05-11 Matt CaswellFix more alert codes
2017-05-11 Matt CaswellVerify that there is no trailing data after the extensi...
2017-05-11 Matt CaswellFix some alert codes
2017-05-11 Matt CaswellReject unknown warning alerts in TLSv1.3
2017-05-11 Dr. Stephen HensonAdd EVP_DigestSign and EVP_DigesVerify
2017-05-10 Matt CaswellCopy custom extension flags in a call to SSL_set_SSL_CTX()
2017-05-10 Richard LevitteFix 'no-ec'
2017-05-09 Matt CaswellVerify that if we have an HRR then something will change
2017-05-09 Matt CaswellFix HRR bug
2017-05-09 Matt CaswellDon't do the final key_share checks if we are in an HRR
2017-05-09 Matt CaswellVerify that only NULL compression is sent in TLSv1...
2017-05-08 Matt CaswellAdd support to SSL_trace() for inner content types
2017-05-08 Matt CaswellRemove support for OPENSSL_SSL_TRACE_CRYPTO
2017-05-08 Matt CaswellUpdates to supported_groups following review feedback
2017-05-08 Matt CaswellSend the supported_groups extension in EE where applicable
2017-05-04 Matt CaswellUpdates to serverinfo fix based on review feedback
2017-05-04 Matt CaswellFix SSL_CTX_use_serverinfo_ex() et al to properly handl...
2017-05-04 Matt CaswellRevert "Fix clang compile time error"
2017-05-04 Todd ShortFix clang compile time error
2017-05-03 Matt CaswellUpdate the HKDF labels for draft-20
2017-05-03 Todd ShortLimit padded record to max plaintext
2017-05-03 Matt CaswellClarify serverinfo usage with Certificate messages
2017-05-03 Matt CaswellAdd an SSL_ prefix to SERVERINFOV2 and SERVERINFOV1
2017-05-03 Matt CaswellOnly send custom extensions where we have received...
2017-05-03 Matt CaswellExtend the SERVERINFO file format to include an extensi...
2017-05-02 Matt CaswellFix comment around safari fingerprint check
2017-05-02 Todd ShortTLS1.3 Padding
2017-04-26 Graham EdgecombeReturn success in custom_ext_parse_old_cb_wrap if parse...
2017-04-26 Tatsuhiro TsujikawaDon't treat PACKET_remaining() as boolean
2017-04-26 Tatsuhiro TsujikawaBreak before && operator
2017-04-26 Tatsuhiro TsujikawaCall init and finalization functions per extension...
2017-04-26 Matt CaswellAlways duplicate the session on NewSessionTicket in...
2017-04-26 Matt CaswellAdd support for SSL_SESSION_is_resumable()
2017-04-26 Matt CaswellRemove TLS1.3 TODO around testing for session id length
2017-04-26 Matt CaswellAdd a ciphersuite config sanity check for servers
2017-04-26 Matt CaswellAdd a ciphersuite config sanity check for clients
2017-04-26 Matt CaswellDon't overwrite the alert value if there is no alert...
2017-04-25 Matt CaswellDon't attempt to send fragments > max_send_fragment...
2017-04-25 Matt CaswellRemove special case code for SCTP reneg handling
2017-04-24 Matt CaswellDon't fail the connection in SSLv3 if server selects...
2017-04-24 Rich Salzif log fails, avoid pms getting double free
2017-04-20 Rich SalzIgnore dups in X509_STORE_add_*
2017-04-19 Todd ShortFix minor compiler issues.
2017-04-13 Richard LevitteASN.1: adapt our use of INTxx et al by making them...
2017-04-12 Rob PercivalCT_POLICY_EVAL_CTX_set_time expects milliseconds, but...
2017-04-11 Todd ShortRemove ECDH(E) ciphers from SSLv3
2017-04-11 Rich SalzAdditional check to handle BAD SSL_write retry
2017-04-10 Benjamin KadukAllow an ALPN callback to pretend to not exist
2017-04-10 Richard LevittePublish our INT32, UINT32, INT64, UINT64 ASN.1 types...
2017-04-07 Matt CaswellRemove an out of date TODO
2017-04-07 Matt CaswellCreate an ENDPOINT enum type for use internally
2017-04-07 Matt CaswellPrefix custom extension API callback types with SSL_
2017-04-07 Matt CaswellVarious style tweaks based on feedback
2017-04-07 Matt CaswellImplement a new custom extensions API
2017-04-07 Matt CaswellMove the extensions context codes into the public API
2017-04-07 Matt CaswellMove ssl/t1_ext.c to ssl/statem/extensions_cust.c
2017-04-04 Richard LevitteConvert SSL_SESSION_ASN1 to use size specific integers
2017-04-03 Dr. Stephen HensonConstify SSL_dup_CA_list()
2017-04-03 Dr. Stephen HensonDon't use client specific functions to retrieve CA...
2017-04-03 Dr. Stephen HensonSSL_CONF support for certificate_authorities
2017-04-03 Dr. Stephen HensonNew certificate_authorities functions
2017-04-03 Matt CaswellFix calls to SSL_get_server_tmp_key() in TLSv1.3
2017-04-03 Matt CaswellTweak a style issue
2017-04-03 Tatsuhiro TsujikawaRestore s->early_data_state with the original value
2017-04-03 Matt CaswellDon't handle handshake messages when writing early...
2017-04-03 Kazuki YamaguchiFix a typo in the SSL_get_max_early_data() declarations
2017-03-31 Matt CaswellUpdate SSL_extension_supported()
2017-03-30 Matt CaswellFix early data bug with pause between EoED and CF
2017-03-30 Matt CaswellFix bug with SSL_read_early_data()
2017-03-29 Qin LongFix the build warning under OPENSSL_NO_GOST
2017-03-29 Benjamin KadukFurther de-obfuscation
2017-03-29 FdaSilvaYYMore typo fixes
2017-03-28 FdaSilvaYYFix a few more typos
2017-03-24 Matt CaswellMove the downgrade sentinel declarations to a header...
2017-03-24 Matt CaswellAdd client side support for TLSv1.3 downgrade mechanism
2017-03-24 Matt CaswellAdd server side support for TLSv1.3 downgrade mechanism
2017-03-21 Matt CaswellFix resumption after HRR
2017-03-19 Joseph Birr-PixtonTLS1.3: Correct intermediate secret derivation
2017-03-17 Dr. Stephen HensonImplement certificate_authorities extension
2017-03-17 Dr. Stephen HensonSupport draft-19 TLS certificate request format
2017-03-17 Dr. Stephen HensonAllow signature algorithms in TLS 1.3 certificate reque...
2017-03-17 Dr. Stephen HensonMove parsing and construction of CA names to separate...
2017-03-16 Dr. Stephen HensonRemove obsolete version test when returning CA names.
2017-03-16 Todd ShortAdd TLSv1.3 draft-19 messages to trace
2017-03-16 Matt CaswellFix the Padding extension
2017-03-16 Matt CaswellUpdates following review feedback
2017-03-16 Matt CaswellFix ciphersuite handling during an HRR
2017-03-16 Matt CaswellEnsure after an HRR any PSKs have the right hash
2017-03-16 Matt CaswellHelloRetryRequest updates for draft-19
2017-03-16 Matt CaswellCheck ClientHello boundary as per draft-19
2017-03-16 Matt CaswellMerge early_data_info extension into early_data
next