Fix up path generation to use OPENSSL_MODULES
[openssl.git] / ssl / statem / extensions.c
2023-11-30 Markus MinichmayrFix implementation of `PreferNoDHEKEX` option.
2023-11-24 Markus MinichmayrAdd option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the...
2023-06-23 Matt CaswellDon't ask for an invalid group in an HRR
2023-03-28 Todd ShortRFC7250 (RPK) support
2022-11-08 Alexander SosedkinFix CertificateCompressionAlgorithm to be read as 2...
2022-10-20 Matt CaswellRemove the old buffer management code
2022-10-18 Todd ShortAdd `for_comp` flag when retrieving certs for compression
2022-10-18 Todd ShortAdd support for compressed certificates (RFC8879)
2022-10-12 Matt CaswellUse the configured max_send_fragment value in the write...
2022-10-07 Matt CaswellPartial revert and reimplement "Enable brainpool curves...
2022-10-05 Richard LevitteStop raising ERR_R_MALLOC_FAILURE in most places
2022-09-28 Todd ShortTest TLS extension ordering
2022-09-09 Todd ShortCleanup EBCDIC string defintions
2022-07-28 Tomas MrazSSL object refactoring using SSL_CONNECTION object
2022-05-04 JHH20Remove duplicated #include headers
2022-05-03 Matt CaswellUpdate copyright year
2022-01-19 Paulissl: better support TSAN operations
2021-11-26 Bernd EdlingerEnable brainpool curves for TLS1.3
2021-06-19 Paulissl: fix indentation
2021-06-19 Paulissl: replace tabs with spaces
2021-06-02 Paulitls: remove TODOs
2021-06-01 Tomas MrazRename all getters to use get/get0 in name
2021-05-21 Dmitry BelyavskiyCleanup the peer point formats on regotiation
2021-05-12 Benjamin KadukImprove RFC 8446 PSK key exchange mode compliance
2021-04-01 Randall S. BeckerCorrected missing definitions from NonStop SPT build.
2021-03-25 Matt CaswellEnsure buffer/length pairs are always in sync
2021-03-25 Peter Kaestlessl sigalg extension: fix NULL pointer dereference
2021-03-11 Paulissl: support params arguments to init functions
2021-02-05 Matt CaswellRemove OPENSSL_NO_EC guards from libssl
2021-02-05 Matt CaswellEnsure default supported groups works even with no...
2021-01-28 Richard LevitteUpdate copyright year
2021-01-08 anupamam13Fix for negative return value from `SSL_CTX_sess_accept()`
2020-12-03 Paulitag unused function arguments as ossl_unused
2020-11-11 Richard LevitteSSL: refactor all SSLfatal() calls
2020-10-01 Matt CaswellRun the withlibctx.pl script
2020-09-13 Matt CaswellFix safestack issues in x509.h
2020-08-29 Matt CaswellEnsure libssl creates libctx aware MAC keys
2020-08-09 Shane LontisAdd EVP signature with libctx methods.
2020-06-09 Tomas MrazDo not allow dropping Extended Master Secret extension...
2020-04-24 Rich SalzIn OpenSSL builds, declare STACK for datatypes ...
2020-04-23 Matt CaswellUpdate copyright year
2020-04-01 Matt CaswellUse EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex...
2020-01-30 Matt CaswellDon't acknowledge a servername following warning alert...
2020-01-30 Matt CaswellFix SSL_get_servername() and SNI behaviour
2019-11-22 Benjamin KadukFix a race condition in SNI handling
2019-11-11 Ido Ben-NatanFix misspelled resumption_label for CHARSET_EBCDIC
2019-09-28 Dr. Matthias St... Reorganize local header files
2019-08-14 opensslonzos-githubAdd missing EBCDIC strings
2019-08-01 raja-ashokUse allow_early_data_cb from SSL instead of SSL_CTX
2019-07-16 PauliRemove tab characters from C source files.
2019-06-18 Matt CaswellFollowing the previous 2 commits also move ecpointforma...
2019-06-17 Matt CaswellFix no-ec with no-dh
2019-06-17 Matt CaswellAllow TLSv1.3 in a no-ec build
2019-04-29 Todd ShortCollapse ssl3_state_st (s3) into ssl_st
2019-03-05 Matt CaswellDon't write the tick_identity to the session
2019-02-15 Todd ShortAdd option to disable Extended Master Secret
2019-01-07 Matt CaswellDon't complain if we receive the cryptopro extension...
2019-01-06 Dmitry BelyavskiyRestore compatibility with GOST2001 implementations.
2018-12-06 Richard LevitteFollowing the license change, modify the boilerplates...
2018-12-05 Matt CaswellFix some SSL_export_keying_material() issues
2018-11-12 Matt CaswellSeparate ca_names handling for client and server
2018-11-04 Benjamin KadukRestore sensible "sess_accept" counter tracking
2018-10-29 Richard Levittessl/statem: Don't compare size_t with less than zero
2018-09-07 Matt CaswellDo not reset SNI data in SSL_do_handshake()
2018-09-07 Ben KadukRestore historical SSL_get_servername() behavior
2018-08-22 Matt CaswellUse the same min-max version range on the client consis...
2018-08-07 Andy Polyakovssl/*: switch to switch to Thread-Sanitizer-friendly...
2018-07-20 Benjamin KadukNormalize SNI hostname handling for SSL and SSL_SESSION
2018-07-02 Matt CaswellAdd setters to set the early_data callback
2018-06-11 Matt CaswellDon't send a warning alert in TLSv1.3
2018-06-07 Matt CaswellFix TLSv1.3 ticket nonces
2018-05-31 Matt CaswellEVP_MD_size() can return an error
2018-03-15 Matt CaswellRename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()
2018-03-15 Matt CaswellAdd support for setting raw private HMAC keys
2018-03-14 Matt CaswellOnly allow supported_versions in a TLSv1.3 ServerHello
2018-03-09 Benjamin KadukReuse extension_is_relevant() in should_add_extension()
2018-03-09 Matt CaswellTolerate TLSv1.3 PSKs that are a different size to...
2018-03-05 Matt CaswellFix status_request and SCT extensions
2018-02-15 Matt CaswellIf s->ctx is NULL then this is an internal error
2018-02-14 Matt CaswellIgnore an s_client psk in TLSv1.3 if not TLSv1.3 suitable
2018-02-01 Todd ShortFix some minor code nits
2018-02-01 Todd ShortAdd TLSv1.3 post-handshake authentication (PHA)
2018-01-25 Benjamin KadukAdd support for the TLS 1.3 signature_algorithms_cert...
2018-01-24 Matt CaswellUpdates following review of SSL_stateless() code
2018-01-24 Matt CaswellFix logic around when to send an HRR based on cookies
2018-01-24 Matt CaswellAdd support for sending TLSv1.3 cookies
2018-01-09 Richard LevitteUpdate copyright years on all files merged since Jan...
2018-01-03 Benjamin KadukPermit the "supported_groups" extension in ServerHellos
2017-12-17 Paul YangRemove spaces at end of line in ssl/statem
2017-12-14 Matt CaswellMake sure supported_versions appears in an HRR too
2017-12-14 Matt CaswellUpdate state machine to send CCS based on whether we...
2017-12-14 Matt CaswellUpdate ServerHello to new draft-22 format
2017-12-04 Matt CaswellAdd some more cleanups
2017-12-04 Matt CaswellFix up a few places in the state machine that got misse...
2017-12-04 Matt CaswellConvert the state machine code to use SSLfatal()
2017-11-21 Matt CaswellIf a server is not acknowledging SNI then don't reject...
2017-11-05 FdaSilvaYYImplement Maximum Fragment Length TLS extension.
2017-10-30 Benjamin KadukProvide SSL_CTX.stats.sess_accept for switched ctxs
2017-10-16 Matt CaswellDon't do version neg on an HRR
2017-10-12 Matt CaswellFix bug where early_data does not work if no SNI callba...
next