Merge HRR into ServerHello
[openssl.git] / ssl / statem / statem_lib.c
2017-12-14 Matt CaswellMerge HRR into ServerHello
2017-12-14 Matt CaswellUpdate ServerHello to new draft-22 format
2017-12-04 Matt CaswellAdd some more cleanups
2017-12-04 Matt CaswellConvert more functions in ssl/statem/statem.c to use...
2017-12-04 Matt CaswellConvert remaining functions in statem_clnt.c to use...
2017-12-04 Matt CaswellConvert the state machine code to use SSLfatal()
2017-12-04 Matt CaswellReplace some usage of SSLerr with SSLfatal()
2017-11-13 Andy PolyakovResolve warnings in VC-WIN32 build, which allows to...
2017-10-30 Benjamin KadukNormalize on session_ctx for stats where possible
2017-10-30 Benjamin KadukUse atomics for SSL_CTX statistics
2017-10-18 KaoruTodaRemove parentheses of return.
2017-10-09 KaoruTodaSince return is inconsistent, I removed unnecessary...
2017-09-22 Dr. Stephen HensonStore groups as uint16_t
2017-09-01 Andy Polyakovssl/statem/*.c: address "enum mixed with another type...
2017-08-03 Matt CaswellMove ossl_assert
2017-08-01 Matt CaswellFix new_session_cb calls in TLSv1.3
2017-07-13 Dr. Stephen HensonUse cert tables instead of X509_certificate_type
2017-07-13 Dr. Stephen HensonUse certificate tables instead of ssl_cert_type
2017-07-03 Bernd EdlingerFix potential crash in tls_construct_finished.
2017-06-23 Matt CaswellFix another EVP_DigestVerify() instance
2017-06-21 Dr. Stephen HensonUse EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs...
2017-06-21 Dr. Stephen HensonConvert key exchange to one shot call
2017-06-21 Dr. Stephen HensonHandle signature algorithms with no associated digest
2017-06-21 Dr. Stephen HensonAdd index for ED25519
2017-06-20 Rich SalzModify Sun copyright to follow OpenSSL style
2017-06-09 Pichulin Dmitriifix check of broken implementations of GOST ciphersuites
2017-06-06 Todd ShortFix #2400 Add NO_RENEGOTIATE option
2017-05-23 Dr. Stephen HensonDon't use one shot API for SSLv3.
2017-05-22 Matt CaswellConvert existing usage of assert() to ossl_assert(...
2017-05-22 Matt CaswellReplace instances of OPENSSL_assert() with soft asserts...
2017-05-19 Matt CaswellTry to be more consistent about the alerts we send
2017-05-17 Matt CaswellFail if we receive a response to an extension that...
2017-05-11 Bernd EdlingerFix gcc-7 warnings.
2017-05-11 Matt CaswellAdd some extra comments following alert changes
2017-05-11 Matt CaswellSend an illegal parameter alert if the update type...
2017-05-11 Dr. Stephen HensonAdd EVP_DigestSign and EVP_DigesVerify
2017-05-08 Matt CaswellSend the supported_groups extension in EE where applicable
2017-04-26 Matt CaswellAdd a ciphersuite config sanity check for servers
2017-04-25 Matt CaswellRemove special case code for SCTP reneg handling
2017-04-07 Matt CaswellMove the extensions context codes into the public API
2017-04-03 Dr. Stephen HensonDon't use client specific functions to retrieve CA...
2017-04-03 Dr. Stephen HensonNew certificate_authorities functions
2017-03-29 Qin LongFix the build warning under OPENSSL_NO_GOST
2017-03-29 Benjamin KadukFurther de-obfuscation
2017-03-28 FdaSilvaYYFix a few more typos
2017-03-24 Matt CaswellMove the downgrade sentinel declarations to a header...
2017-03-24 Matt CaswellAdd client side support for TLSv1.3 downgrade mechanism
2017-03-24 Matt CaswellAdd server side support for TLSv1.3 downgrade mechanism
2017-03-17 Dr. Stephen HensonMove parsing and construction of CA names to separate...
2017-03-16 Matt CaswellUpdates following review feedback
2017-03-16 Matt CaswellHelloRetryRequest updates for draft-19
2017-03-16 Matt CaswellUpdate end of early data processing for draft-19
2017-03-07 Matt CaswellCheck TLSv1.3 ServerHello, Finished and KeyUpdates...
2017-03-02 Matt CaswellVarious fixes required to allow SSL_write/SSL_read...
2017-03-02 Matt CaswellIntroduce a new early_data state in the state machine
2017-03-02 Matt CaswellProvide an SSL_read_early() function for reading early...
2017-02-28 Emilia KasperClean up references to FIPS
2017-02-17 Matt CaswellUpdates following review feedback
2017-02-17 Matt CaswellLimit the number of KeyUpdate messages we can process
2017-02-17 Matt CaswellActually update the keys when a KeyUpdate message is...
2017-02-17 Matt CaswellIf we receive an "update_requested" KeyUpdate then...
2017-02-17 Matt CaswellAdd the ability for a client to send a KeyUpdate message
2017-02-17 Matt CaswellAdd the ability for a client to receive a KeyUpdate...
2017-02-17 Matt CaswellProvide a function to send a KeyUpdate message
2017-02-16 Dr. Stephen HensonUse tls_choose_sigalg for client auth.
2017-02-15 Dr. Stephen HensonUse cert_index and sigalg
2017-02-14 Matt CaswellFix no-ec compilation
2017-02-14 Matt CaswellImplement support for resumption with a HelloRetryRequest
2017-02-14 Matt CaswellAdd client side support for parsing Hello Retry Request
2017-02-14 Matt CaswellAdd server side support for creating the Hello Retry...
2017-02-10 Dr. Stephen HensonReplace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGN
2017-02-03 Bernd EdlingerCombined patch against master branch for the following...
2017-02-02 Dr. Stephen HensonRemove special case for TLS 1.3.
2017-02-02 Cory BenfieldAdd support for logging out TLSv1.3 secrets
2017-01-31 Dr. Stephen HensonRemove peer_md and use peer_sigalg instead.
2017-01-30 Dr. Stephen HensonStore peer signature type.
2017-01-30 Dr. Stephen Hensonuse RSA_PSS_SALTLEN_DIGEST constant
2017-01-30 Matt CaswellMiscellaneous style tweaks based on feedback received
2017-01-30 Matt CaswellConstruct the client side psk extension for TLSv1.3
2017-01-30 Matt CaswellCreate the NewSessionTicket message in TLSv1.3
2017-01-30 Matt CaswellMove state machine knowledge out of the record layer
2017-01-23 Cory BenfieldAdd support for key logging callbacks.
2017-01-10 Matt CaswellExtend PSS signature support to TLSv1.2
2017-01-10 Matt CaswellUse NIDs instead of the old TLSv1.2 sigalgs hash and...
2017-01-10 Matt CaswellConvert Sigalgs processing to use ints
2017-01-10 Matt CaswellSign CertificateVerify messages using PSS padding
2017-01-10 Matt CaswellMake CertificateVerify TLS1.3 aware
2017-01-10 Matt CaswellMove Certificate Verify construction and processing...
2017-01-06 Matt CaswellFix various style issues following feedback
2017-01-06 Matt CaswellImplement TLSv1.3 style CertificateStatus
2017-01-06 Matt CaswellCreate Certificate messages in TLS1.3 format
2016-12-08 Matt CaswellAvoid repeatedly scanning the list of extensions
2016-12-08 Matt CaswellRefactor ClientHello extension parsing
2016-12-08 Matt CaswellMove tls_collect_extensions() into a separate file
2016-11-23 Matt CaswellUse ClientHello.legacy_version for the RSA pre-master...
2016-11-23 Matt CaswellEnsure the end of first server flight processing is...
2016-11-23 Matt CaswellUpdate state machine to be closer to TLS1.3
2016-11-09 Matt CaswellAddress some supported_versions review comments
2016-11-09 Matt CaswellFix some missing checks for TLS1_3_VERSION_DRAFT
2016-11-09 Matt CaswellAdd a TODO(TLS1.3) about renegotation
next