Various review fixes for PSK early_data support
[openssl.git] / ssl / statem /
2017-08-31 Matt CaswellVarious review fixes for PSK early_data support
2017-08-31 Matt CaswellClient side sanity check of ALPN after server has accep...
2017-08-31 Matt CaswellAdd some fixes for Travis failures
2017-08-31 Matt CaswellAdd server side sanity checks of SNI/ALPN for use with...
2017-08-31 Matt CaswellMake sure we save ALPN data in the session
2017-08-31 Matt CaswellComplain if we are writing early data but SNI or ALPN...
2017-08-31 Matt CaswellEnable the ability to use an external PSK for sending...
2017-08-29 PauliMove OPENSSL_CONF from e_os.h to cryptlib.h
2017-08-29 PauliMove e_os.h to be the very first include.
2017-08-29 Paulie_os.h removal from other headers and source files.
2017-08-18 Todd ShortReorder extensions to put SigAlgs last
2017-08-15 Benjamin KadukMove ALPN handling from finalizer to delayed call
2017-08-11 FdaSilvaYYFix some Typos and indents
2017-08-09 Benjamin KadukDon't modify resumed session objects
2017-08-03 Rich SalzAdd a DRBG to each SSL object
2017-08-03 Rich SalzSwitch from ossl_rand to DRBG rand
2017-08-03 Matt CaswellMove ossl_assert
2017-08-01 Matt CaswellFix new_session_cb calls in TLSv1.3
2017-07-31 Todd ShortFix SSL_set_tlsext_debug_callback/-tlsextdebug
2017-07-20 Paul YangSupport converting cipher name to RFC name and vice...
2017-07-18 Matt CaswellTolerate a zero length ticket nonce
2017-07-18 Matt CaswellFix early_data with an HRR
2017-07-13 Dr. Stephen HensonUse cert tables instead of X509_certificate_type
2017-07-13 Dr. Stephen HensonUse certificate tables instead of ssl_cert_type
2017-07-13 Dr. Stephen HensonUse certificate tables instead of ssl_cipher_get_cert_i...
2017-07-07 Matt CaswellDo not allow non-dhe kex_modes by default
2017-07-07 Matt CaswellUpdates following review feedback of TLSv1.3 draft...
2017-07-07 Matt CaswellUpdate the early_secret generation to use the new ticke...
2017-07-07 Matt CaswellUpdate tls13_hkdf_expand() to take the length of the...
2017-07-07 Matt CaswellSend and receive the ticket_nonce field in a NewSession...
2017-07-03 Bernd EdlingerFix potential crash in tls_construct_finished.
2017-07-03 Bernd EdlingerFix a crash in tls_construct_client_certificate.
2017-06-23 Matt CaswellFix another EVP_DigestVerify() instance
2017-06-23 Matt CaswellTreat all failures from EVP_DigestVerify() as a bad...
2017-06-21 Paul YangAvoid compiler complaining
2017-06-21 Matt CaswellFix DTLS failure when used in a build which has SCTP...
2017-06-21 Matt CaswellPSK related tweaks based on review feedback
2017-06-21 Matt CaswellFix some bugs in the TLSv1.3 PSK code
2017-06-21 Matt CaswellAdd TLSv1.3 client side external PSK support
2017-06-21 Matt CaswellAdd TLSv1.3 server side external PSK support
2017-06-21 Dr. Stephen HensonUse EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs...
2017-06-21 Dr. Stephen HensonAllow Ed25519 in TLS 1.2
2017-06-21 Dr. Stephen HensonConvert key exchange to one shot call
2017-06-21 Dr. Stephen HensonHandle signature algorithms with no associated digest
2017-06-21 Dr. Stephen HensonAdd index for ED25519
2017-06-21 Rich SalzMerge Nokia copyright notice into standard
2017-06-20 Rich SalzModify Sun copyright to follow OpenSSL style
2017-06-16 Matt CaswellTweak the check that a ciphersuite has not changed...
2017-06-16 Matt CaswellFix an uninitialised variable warning
2017-06-16 Matt CaswellMove ciphersuite selection before session resumption...
2017-06-16 Matt CaswellAllow the server to change the ciphersuite on resume
2017-06-12 Benjamin KadukAdd SSL_early_get1_extensions_present()
2017-06-11 Rich SalzIf-guard to avoid null ptr deref in statem_srvr.c
2017-06-09 Pichulin Dmitriifix check of broken implementations of GOST ciphersuites
2017-06-09 Paul YangFix a bundle of trailing spaces in several files
2017-06-06 Todd ShortFix #2400 Add NO_RENEGOTIATE option
2017-05-23 Dr. Stephen HensonDon't use one shot API for SSLv3.
2017-05-22 Matt CaswellConvert existing usage of assert() to ossl_assert(...
2017-05-22 Matt CaswellReplace instances of OPENSSL_assert() with soft asserts...
2017-05-19 Matt CaswellTry to be more consistent about the alerts we send
2017-05-18 Matt CaswellFix EXT_RETURN usage for add_key_share()
2017-05-17 Matt CaswellAllow a missing sig algs extension if resuming
2017-05-17 Matt CaswellAdd a new unsolicited extension error code and add...
2017-05-17 Matt CaswellFail if we receive a response to an extension that...
2017-05-11 Bernd EdlingerFix gcc-7 warnings.
2017-05-11 Matt CaswellAdd some extra comments following alert changes
2017-05-11 Matt CaswellAdd some checks for trailing data after extension blocks
2017-05-11 Matt CaswellSend a missing_extension alert if key_share/supported...
2017-05-11 Matt CaswellSend an illegal parameter alert if the update type...
2017-05-11 Matt CaswellEnsure we fail with a decode error alert if the server...
2017-05-11 Matt CaswellFix more alert codes
2017-05-11 Matt CaswellVerify that there is no trailing data after the extensi...
2017-05-11 Matt CaswellFix some alert codes
2017-05-11 Dr. Stephen HensonAdd EVP_DigestSign and EVP_DigesVerify
2017-05-10 Matt CaswellCopy custom extension flags in a call to SSL_set_SSL_CTX()
2017-05-10 Richard LevitteFix 'no-ec'
2017-05-09 Matt CaswellVerify that if we have an HRR then something will change
2017-05-09 Matt CaswellFix HRR bug
2017-05-09 Matt CaswellDon't do the final key_share checks if we are in an HRR
2017-05-09 Matt CaswellVerify that only NULL compression is sent in TLSv1...
2017-05-08 Matt CaswellUpdates to supported_groups following review feedback
2017-05-08 Matt CaswellSend the supported_groups extension in EE where applicable
2017-05-03 Matt CaswellUpdate the HKDF labels for draft-20
2017-05-03 Matt CaswellOnly send custom extensions where we have received...
2017-05-02 Matt CaswellFix comment around safari fingerprint check
2017-04-26 Graham EdgecombeReturn success in custom_ext_parse_old_cb_wrap if parse...
2017-04-26 Tatsuhiro TsujikawaDon't treat PACKET_remaining() as boolean
2017-04-26 Tatsuhiro TsujikawaBreak before && operator
2017-04-26 Tatsuhiro TsujikawaCall init and finalization functions per extension...
2017-04-26 Matt CaswellAlways duplicate the session on NewSessionTicket in...
2017-04-26 Matt CaswellAdd support for SSL_SESSION_is_resumable()
2017-04-26 Matt CaswellRemove TLS1.3 TODO around testing for session id length
2017-04-26 Matt CaswellAdd a ciphersuite config sanity check for servers
2017-04-26 Matt CaswellAdd a ciphersuite config sanity check for clients
2017-04-26 Matt CaswellDon't overwrite the alert value if there is no alert...
2017-04-25 Matt CaswellDon't attempt to send fragments > max_send_fragment...
2017-04-25 Matt CaswellRemove special case code for SCTP reneg handling
2017-04-24 Matt CaswellDon't fail the connection in SSLv3 if server selects...
2017-04-24 Rich Salzif log fails, avoid pms getting double free
2017-04-19 Todd ShortFix minor compiler issues.
next