Add SSL_CTX_set_tmp_ecdh.pod
[openssl.git] / ssl / ssl_lib.c
2017-06-20 Rich SalzModify Sun copyright to follow OpenSSL style
2017-06-12 Benjamin KadukAdd SSL_early_get1_extensions_present()
2017-06-06 Todd ShortFix #2400 Add NO_RENEGOTIATE option
2017-05-22 Matt CaswellConvert existing usage of assert() to ossl_assert(...
2017-05-22 Matt CaswellFix some style issues in returns
2017-05-22 Matt CaswellReplace instances of OPENSSL_assert() with soft asserts...
2017-05-19 Matt CaswellMake SSL_is_server() accept a const SSL
2017-05-19 Matt CaswellTry to be more consistent about the alerts we send
2017-05-10 Matt CaswellCopy custom extension flags in a call to SSL_set_SSL_CTX()
2017-05-02 Todd ShortTLS1.3 Padding
2017-04-24 Matt CaswellDon't fail the connection in SSLv3 if server selects...
2017-04-12 Rob PercivalCT_POLICY_EVAL_CTX_set_time expects milliseconds, but...
2017-04-03 Dr. Stephen HensonNew certificate_authorities functions
2017-04-03 Matt CaswellTweak a style issue
2017-04-03 Tatsuhiro TsujikawaRestore s->early_data_state with the original value
2017-04-03 Kazuki YamaguchiFix a typo in the SSL_get_max_early_data() declarations
2017-03-30 Matt CaswellFix early data bug with pause between EoED and CF
2017-03-29 FdaSilvaYYMore typo fixes
2017-03-16 Matt CaswellUpdate end of early data processing for draft-19
2017-03-07 Matt CaswellProvide a function to test whether we have unread recor...
2017-03-04 Matt CaswellAdd basic TLSv1.3 cookie support
2017-03-02 Matt CaswellUpdate early data API for writing to unauthenticated...
2017-03-02 Matt CaswellRename SSL_write_early() to SSL_write_early_data()
2017-03-02 Matt CaswellRename SSL_read_early() to SSL_read_early_data()
2017-03-02 Matt CaswellMake SSL_write_early_finish() an internal only function
2017-03-02 Matt CaswellVarious fixes required to allow SSL_write/SSL_read...
2017-03-02 Matt CaswellEnable the client to call SSL_read() without stopping...
2017-03-02 Matt CaswellImprove the early data sanity check in SSL_do_handshake()
2017-03-02 Matt CaswellTighten sanity checks when calling early data functions
2017-03-02 Matt CaswellMake SSL_get_early_data_status() take a const
2017-03-02 Matt CaswellMake SSL_get_max_early_data() and SSL_CTX_get_max_early...
2017-03-02 Matt CaswellRemove some TLSv1.3 TODOs that are no longer relevant
2017-03-02 Matt CaswellProvide a default value for max_early_data
2017-03-02 Matt CaswellFix changing of the cipher state when dealing with...
2017-03-02 Matt CaswellConstruct the server side early_data extension
2017-03-02 Matt CaswellProvide an SSL_read_early() function for reading early...
2017-03-02 Matt CaswellProvide functions to write early data
2017-03-02 Matt CaswellConstruct the ticket_early_data_info extension
2017-02-28 Emilia KasperClean up references to FIPS
2017-02-28 Matt CaswellRemove some dead code from libssl
2017-02-23 Kurt RoeckxImplement SSL_read_ex() and SSL_write_ex() as documented.
2017-02-23 Benjamin KadukAdd SSL_CTX early callback
2017-02-23 Benjamin KadukRefactor SSL_bytes_to_cipher_list()
2017-02-23 Benjamin KadukExport SSL_bytes_to_cipher_list()
2017-02-21 Dr. Stephen HensonCheck validity, not just signing for all certificates
2017-02-17 Matt CaswellUpdates following review feedback
2017-02-17 Matt CaswellDon't use an enum in the return type for a public API...
2017-02-17 Matt CaswellUpdates following review feedback
2017-02-17 Matt CaswellAdd a SSL_get_key_update_type() function
2017-02-17 Matt CaswellProvide a function to send a KeyUpdate message
2017-02-15 Dr. Stephen HensonUse CERT_PKEY pointer instead of index
2017-02-15 Dr. Stephen HensonUse cert_index and sigalg
2017-02-15 Dr. Stephen Hensonadd ssl_has_cert
2017-02-10 Dr. Stephen HensonReplace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGN
2017-02-09 David BenjaminDon't read uninitialised data for short session IDs.
2017-02-02 Dr. Stephen HensonFor TLS 1.3 retrieve previously set certificate index
2017-02-02 Cory BenfieldAdd support for logging out TLSv1.3 secrets
2017-02-01 Todd ShortMajority rules, use session_ctx vs initial_ctx
2017-01-30 Matt CaswellMake calls to SSL_renegotiate() error out for TLSv1.3
2017-01-30 Matt CaswellDisable requests for renegotiation in TLSv1.3
2017-01-30 Matt CaswellMove state machine knowledge out of the record layer
2017-01-25 Cory BenfieldLimit the length of the encrypted premaster key.
2017-01-25 FdaSilvaYYFix a few misspellings.
2017-01-23 Cory BenfieldAdd support for key logging callbacks.
2017-01-10 Matt CaswellAdd a TODO(TLS1.3) around certificate selection
2017-01-10 Rich SalzUse typedefs for PSK, NPN, ALPN callback functions
2017-01-10 Rich SalzMove extension data into sub-structs
2016-12-08 Matt CaswellIntroduce TLSEXT_STATUSTYPE_nothing constant
2016-11-23 Matt CaswellImplement tls13_change_cipher_state()
2016-11-17 Kurt RoeckxAdd support for reference counting using C11 atomics
2016-11-15 Rob PercivalCheck that SCT timestamps are not in the future
2016-11-10 Matt CaswellRename the Elliptic Curves extension to supported_groups
2016-11-04 Matt CaswellRename all "read" variables with "readbytes"
2016-11-04 Matt CaswellFix misc size_t issues causing Windows warnings in...
2016-11-04 Matt CaswellConvert SSL BIO to use SSL_write_ex().
2016-11-04 Matt CaswellFix some missed size_t updates
2016-11-04 Matt CaswellConvert some libssl local functions to size_t
2016-11-04 Matt CaswellUpdate numerous misc libssl fields to be size_t
2016-11-04 Matt CaswellConvert master_secret_size code to size_t
2016-11-04 Matt CaswellConvert some misc record layer functions for size_t
2016-11-04 Matt CaswellConvert libssl writing for size_t
2016-11-04 Matt CaswellFurther libssl size_t-ify of reading
2016-11-02 Matt CaswellConvert a big "if" into a "switch"
2016-11-02 Matt CaswellAdd the SSL_METHOD for TLSv1.3 and all other base chang...
2016-11-01 Todd ShortAdd SSL_CTX_set1_cert_store()
2016-09-21 Rich SalzRevert "Constify code about X509_VERIFY_PARAM"
2016-09-18 FdaSilvaYYConstify code about X509_VERIFY_PARAM
2016-08-24 Rob PercivalFix comment about return value of ct_extract_tls_extens...
2016-08-18 Emilia KasperIndent ssl/
2016-08-15 Rob PercivalImproves CTLOG_STORE setters
2016-08-04 David WoodhouseFix SSL_export_keying_material() for DTLS1_BAD_VER
2016-07-29 Matt CaswellSimplify and rename SSL_set_rbio() and SSL_set_wbio()
2016-07-29 Matt CaswellDon't double free the write bio
2016-07-20 Matt CaswellNever expose ssl->bbio in the public API.
2016-07-20 FdaSilvaYYFix a few if(, for(, while( inside code.
2016-07-12 Viktor DukhovniPerform DANE-EE(3) name checks by default
2016-06-21 FdaSilvaYYSpelling... and more spelling
2016-06-11 Kurt RoeckxDon't compare a just free()d pointer
2016-06-08 Rich SalzAdd some accessor API's
2016-06-08 Todd ShortAlways use session_ctx when removing a session
next