Don't negotiate TLSv1.3 if our EC cert isn't TLSv1.3 capable
[openssl.git] / ssl / ssl_cert.c
2018-11-10 Tomas MrazUnbreak SECLEVEL 3 regression causing it to not accept...
2018-09-03 Richard LevitteRename SSL[_CTX]_add1_CA_list -> SSL[_CTX]_add1_to_CA_list
2018-08-22 Tomas MrazAllow TLS-1.3 ciphersuites in @SECLEVEL=3 and above
2018-07-18 Matt CaswellCheck that the public key OID matches the sig alg
2018-03-27 Rich SalzAllow NULL for some _free routines.
2018-03-27 Matt CaswellRemove some code for a contributor that we cannot find
2018-01-09 Richard LevitteUpdate copyright years on all files merged since Jan...
2018-01-08 Tomas MrazAvoid only exact duplicates when creating the accepted...
2017-12-08 Rich SalzConsistent formatting for sizeof(foo)
2017-10-26 Paul YangSimplify the stack reservation
2017-10-21 KaoruTodaVarious clean-ups
2017-10-18 KaoruTodaRemove parentheses of return.
2017-10-10 Andy Polyakovcrypto/x509v3/v3_utl.c, ssl/ssl_cert.c: fix Coverity...
2017-09-28 PauliRemove unnecessary #include <openssl/lhash.h> directives.
2017-09-27 PauliAdd stack space reservations.
2017-08-29 PauliMove e_os.h to be the very first include.
2017-08-29 PauliMove the REF_PRINT support from e_os.h to internal...
2017-08-29 Paulie_os.h removal from other headers and source files.
2017-08-25 Richard LevitteNO_SYS_TYPES_H isn't defined anywhere, stop using it...
2017-07-13 Dr. Stephen HensonMove certificate table to header file so it can be...
2017-07-13 Dr. Stephen HensonAdd certificate properties table.
2017-06-20 Rich SalzModify Sun copyright to follow OpenSSL style
2017-04-20 Rich SalzIgnore dups in X509_STORE_add_*
2017-04-07 Matt CaswellImplement a new custom extensions API
2017-04-03 Dr. Stephen HensonConstify SSL_dup_CA_list()
2017-04-03 Dr. Stephen HensonNew certificate_authorities functions
2017-03-16 Dr. Stephen HensonRemove obsolete version test when returning CA names.
2017-02-24 Dr. Stephen HensonTidy up certificate type handling.
2017-02-10 Dr. Stephen HensonReplace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGN
2017-01-10 Matt CaswellConvert Sigalgs processing to use ints
2017-01-06 Matt CaswellCreate Certificate messages in TLS1.3 format
2016-11-17 Kurt RoeckxAdd support for reference counting using C11 atomics
2016-09-20 Matt CaswellStyle tweaks following review feedback
2016-09-20 Matt CaswellConvert Certificate message construction to WPACKET
2016-08-18 Emilia KasperIndent ssl/
2016-07-19 Richard LevitteChange all our uses of CRYPTO_THREAD_run_once to use...
2016-07-02 Andreas KarlssonFix broken loading of client CAs
2016-06-23 FdaSilvaYYAdd checks on sk_TYPE_push() returned result
2016-05-27 Todd ShortFix ssl_cert_set0_chain invalid pointer
2016-05-23 FdaSilvaYYFix some malloc failure crashes on X509_STORE_CTX_set_e...
2016-05-17 Rich SalzCopyright consolidation 01/10
2016-05-16 Viktor DukhovniFold threads.h into crypto.h making API public
2016-04-28 FdaSilvaYYvarious spelling fixes
2016-04-26 Matt CaswellEnsure we check i2d_X509 return val
2016-04-15 Rich SalzMake many X509_xxx types opaque.
2016-04-04 Rich SalzRevert "various spelling fixes"
2016-04-04 FdaSilvaYYvarious spelling fixes
2016-04-03 Viktor DukhovniMove peer chain security checks into x509_vfy.c
2016-03-20 Rich SalzRemove #error from include files.
2016-03-09 Kurt RoeckxConstify security callbacks
2016-03-09 Todd ShortFix locking in ssl_cert_dup()
2016-03-08 Alessandro GhediniConvert CRYPTO_LOCK_SSL_* to new multi-threading API
2016-03-08 Alessandro GhediniConvert CRYPTO_LOCK_X509_* to new multi-threading API
2016-02-11 Viktor DukhovniFix MacOS/X build warnings
2016-02-11 Rich SalzMove to REF_DEBUG, for consistency.
2016-02-11 Toshikuni FukayaRT3495: Add a hash for faster dup detection.
2016-02-06 Dr. Stephen HensonAdd SSL_get0_verified_chain() to return verified chain...
2016-01-20 Dr. Stephen Hensonmake EVP_PKEY opaque
2016-01-14 Viktor DukhovniEDH >= 1024 bits even at security level 0
2016-01-06 Viktor DukhovniDANE support structures, constructructors and accessors
2016-01-02 Viktor DukhovniProtocol version selection and negotiation rewrite
2015-12-23 Dr. Stephen HensonServer side EVP_PKEY DH support
2015-12-16 Rich SalzRename some BUF_xxx to OPENSSL_xxx
2015-12-05 Kurt RoeckxRemove support for all 40 and 56 bit ciphers.
2015-12-04 Kurt RoeckxRemove SSL_{CTX_}set_ecdh_auto() and always enable...
2015-12-04 Kurt RoeckxMake SSL_{CTX}_set_tmp_ecdh() call SSL_{CTX_}set1_curves()
2015-12-04 Kurt RoeckxRemove support for SSL_{CTX_}set_tmp_ecdh_callback().
2015-11-17 Matt CaswellAdd comment explaining why we don't check a return...
2015-11-09 Matt CaswellStandardise our style for checking malloc failures
2015-10-30 Matt CaswellRemove the type variable
2015-10-11 Dr. Stephen HensonMake no-psk compile without warnings.
2015-10-02 Rich SalzRemove BIO_s_file_internal macro.
2015-09-30 David WoodhouseFix no-stdio build
2015-09-17 Filipe DA SILVART4047: Set reference count earlier
2015-09-14 Dr. Stephen HensonFix PSK identity hint handling.
2015-09-05 Dr. Stephen HensonAvoid direct X509 structure access
2015-09-03 Rich SalzAdd and use OPENSSL_zalloc
2015-08-31 Dr. Stephen HensonAdd X509_up_ref function.
2015-06-22 Dr. Stephen HensonRemove SESS_CERT entirely.
2015-06-22 Dr. Stephen HensonMove peer chain to SSL_SESSION structure.
2015-06-22 Dr. Stephen HensonRemove certificates from sess_cert
2015-06-22 Dr. Stephen HensonRemove peer temp keys from SESS_CERT
2015-05-22 Matt CaswellAdd CHANGES entry for OPENSSL_NO_TLSEXT removal
2015-05-22 Matt CaswellRemove support for OPENSSL_NO_TLSEXT
2015-05-19 Dr. Stephen Hensonmove masks out of CERT structure
2015-05-18 Dr. Stephen HensonMove certificate validity flags out of CERT.
2015-05-18 Dr. Stephen HensonMove signing digest out of CERT.
2015-05-18 Dr. Stephen HensonCERT tidy
2015-05-14 Richard LevitteIdentify and move OpenSSL internal header files
2015-05-06 Rich Salzmemset, memcpy, sizeof consistency fixes
2015-05-04 Rich SalzUse safer sizeof variant in malloc
2015-05-01 Rich Salzfree NULL cleanup -- coda
2015-05-01 Rich SalzRemove goto inside an if(0) block
2015-04-30 Rich Salzfree cleanup almost the finale
2015-04-30 Rich Salzfree NULL cleanup 5a
2015-04-28 Rich Salzremove malloc casts
2015-03-28 Rich Salzfree NULL cleanup
2015-03-25 Rich Salzfree NULL cleanup.
2015-03-25 Rich Salzfree NULL cleanup
2015-03-25 Rich Salzfree NULL cleanup
next