Remove outdated and unsupported CHIL engine
[openssl.git] / ssl /
2017-05-04 Matt CaswellUpdates to serverinfo fix based on review feedback
2017-05-04 Matt CaswellFix SSL_CTX_use_serverinfo_ex() et al to properly handl...
2017-05-04 Matt CaswellRevert "Fix clang compile time error"
2017-05-04 Todd ShortFix clang compile time error
2017-05-03 Matt CaswellUpdate the HKDF labels for draft-20
2017-05-03 Todd ShortLimit padded record to max plaintext
2017-05-03 Matt CaswellClarify serverinfo usage with Certificate messages
2017-05-03 Matt CaswellAdd an SSL_ prefix to SERVERINFOV2 and SERVERINFOV1
2017-05-03 Matt CaswellOnly send custom extensions where we have received...
2017-05-03 Matt CaswellExtend the SERVERINFO file format to include an extensi...
2017-05-02 Matt CaswellFix comment around safari fingerprint check
2017-05-02 Todd ShortTLS1.3 Padding
2017-04-26 Graham EdgecombeReturn success in custom_ext_parse_old_cb_wrap if parse...
2017-04-26 Tatsuhiro TsujikawaDon't treat PACKET_remaining() as boolean
2017-04-26 Tatsuhiro TsujikawaBreak before && operator
2017-04-26 Tatsuhiro TsujikawaCall init and finalization functions per extension...
2017-04-26 Matt CaswellAlways duplicate the session on NewSessionTicket in...
2017-04-26 Matt CaswellAdd support for SSL_SESSION_is_resumable()
2017-04-26 Matt CaswellRemove TLS1.3 TODO around testing for session id length
2017-04-26 Matt CaswellAdd a ciphersuite config sanity check for servers
2017-04-26 Matt CaswellAdd a ciphersuite config sanity check for clients
2017-04-26 Matt CaswellDon't overwrite the alert value if there is no alert...
2017-04-25 Matt CaswellDon't attempt to send fragments > max_send_fragment...
2017-04-25 Matt CaswellRemove special case code for SCTP reneg handling
2017-04-24 Matt CaswellDon't fail the connection in SSLv3 if server selects...
2017-04-24 Rich Salzif log fails, avoid pms getting double free
2017-04-20 Rich SalzIgnore dups in X509_STORE_add_*
2017-04-19 Todd ShortFix minor compiler issues.
2017-04-13 Richard LevitteASN.1: adapt our use of INTxx et al by making them...
2017-04-12 Rob PercivalCT_POLICY_EVAL_CTX_set_time expects milliseconds, but...
2017-04-11 Todd ShortRemove ECDH(E) ciphers from SSLv3
2017-04-11 Rich SalzAdditional check to handle BAD SSL_write retry
2017-04-10 Benjamin KadukAllow an ALPN callback to pretend to not exist
2017-04-10 Richard LevittePublish our INT32, UINT32, INT64, UINT64 ASN.1 types...
2017-04-07 Matt CaswellRemove an out of date TODO
2017-04-07 Matt CaswellCreate an ENDPOINT enum type for use internally
2017-04-07 Matt CaswellPrefix custom extension API callback types with SSL_
2017-04-07 Matt CaswellVarious style tweaks based on feedback
2017-04-07 Matt CaswellImplement a new custom extensions API
2017-04-07 Matt CaswellMove the extensions context codes into the public API
2017-04-07 Matt CaswellMove ssl/t1_ext.c to ssl/statem/extensions_cust.c
2017-04-04 Richard LevitteConvert SSL_SESSION_ASN1 to use size specific integers
2017-04-03 Dr. Stephen HensonConstify SSL_dup_CA_list()
2017-04-03 Dr. Stephen HensonDon't use client specific functions to retrieve CA...
2017-04-03 Dr. Stephen HensonSSL_CONF support for certificate_authorities
2017-04-03 Dr. Stephen HensonNew certificate_authorities functions
2017-04-03 Matt CaswellFix calls to SSL_get_server_tmp_key() in TLSv1.3
2017-04-03 Matt CaswellTweak a style issue
2017-04-03 Tatsuhiro TsujikawaRestore s->early_data_state with the original value
2017-04-03 Matt CaswellDon't handle handshake messages when writing early...
2017-04-03 Kazuki YamaguchiFix a typo in the SSL_get_max_early_data() declarations
2017-03-31 Matt CaswellUpdate SSL_extension_supported()
2017-03-30 Matt CaswellFix early data bug with pause between EoED and CF
2017-03-30 Matt CaswellFix bug with SSL_read_early_data()
2017-03-29 Qin LongFix the build warning under OPENSSL_NO_GOST
2017-03-29 Benjamin KadukFurther de-obfuscation
2017-03-29 FdaSilvaYYMore typo fixes
2017-03-28 FdaSilvaYYFix a few more typos
2017-03-24 Matt CaswellMove the downgrade sentinel declarations to a header...
2017-03-24 Matt CaswellAdd client side support for TLSv1.3 downgrade mechanism
2017-03-24 Matt CaswellAdd server side support for TLSv1.3 downgrade mechanism
2017-03-21 Matt CaswellFix resumption after HRR
2017-03-19 Joseph Birr-PixtonTLS1.3: Correct intermediate secret derivation
2017-03-17 Dr. Stephen HensonImplement certificate_authorities extension
2017-03-17 Dr. Stephen HensonSupport draft-19 TLS certificate request format
2017-03-17 Dr. Stephen HensonAllow signature algorithms in TLS 1.3 certificate reque...
2017-03-17 Dr. Stephen HensonMove parsing and construction of CA names to separate...
2017-03-16 Dr. Stephen HensonRemove obsolete version test when returning CA names.
2017-03-16 Todd ShortAdd TLSv1.3 draft-19 messages to trace
2017-03-16 Matt CaswellFix the Padding extension
2017-03-16 Matt CaswellUpdates following review feedback
2017-03-16 Matt CaswellFix ciphersuite handling during an HRR
2017-03-16 Matt CaswellEnsure after an HRR any PSKs have the right hash
2017-03-16 Matt CaswellHelloRetryRequest updates for draft-19
2017-03-16 Matt CaswellCheck ClientHello boundary as per draft-19
2017-03-16 Matt CaswellMerge early_data_info extension into early_data
2017-03-16 Matt CaswellUpdate end of early data processing for draft-19
2017-03-16 Matt CaswellUpdate secret generation for draft-19
2017-03-15 Benjamin KadukRemove dead code
2017-03-15 Benjamin KadukTighten up client status_request processing
2017-03-15 Benjamin KadukClear alpn_selected_len for clients, too
2017-03-14 Benjamin KadukDe-obfuscate
2017-03-14 Benjamin KadukFix some -Wshadow warnings
2017-03-10 PauliUse the callbacks from the SSL object instead of the...
2017-03-10 Bernd EdlingerAvoid questionable use of the value of a pointer
2017-03-10 Matt CaswellUse the new TLSv1.3 certificate_required alert where...
2017-03-10 Matt CaswellCheck that the PSK extension is last
2017-03-10 Bernd EdlingerFixup previous merge.
2017-03-08 Roberto Guimaraesthis change will prevent undefined behavior when src...
2017-03-08 Matt CaswellFix no-comp
2017-03-07 Matt CaswellCheck TLSv1.3 ServerHello, Finished and KeyUpdates...
2017-03-07 Matt CaswellProvide a function to test whether we have unread recor...
2017-03-07 Rich SalzGet pointer type right in BIO_ssl_shutdown()
2017-03-06 Matt CaswellTweak the TLSv1.3 record overflow limits
2017-03-06 Kurt RoeckxFix double free in cookie generation.
2017-03-04 Matt CaswellDon't call memcmp with a NULL pointer
2017-03-04 Matt CaswellAdd basic TLSv1.3 cookie support
2017-03-04 Matt CaswellFix a memory leak on an error path
2017-03-03 Dr. Stephen HensonSet specific error is we have no valid signature algori...
2017-03-03 Dr. Stephen HensonSignature algorithm enhancement.
next