Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEER
[openssl.git] / ssl / statem /
2018-03-19 Todd ShortPlace ticket keys into secure memory
2018-03-19 Matt CaswellFix no-psk
2018-03-19 Kurt RoeckxDon't use a ssl specific DRBG anymore
2018-03-19 Bernd EdlingerFix a crash in SSLfatal due to invalid enc_write_ctx
2018-03-19 Matt CaswellAdd an anti-replay mechanism
2018-03-19 Matt CaswellDon't update the session cache when processing a client...
2018-03-19 Matt CaswellAlways call the new_session_cb when issuing a NewSessio...
2018-03-15 Matt CaswellRename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()
2018-03-15 Matt CaswellAdd support for setting raw private HMAC keys
2018-03-15 Matt CaswellOnly update the server session cache when the session...
2018-03-14 Matt CaswellOnly allow supported_versions in a TLSv1.3 ServerHello
2018-03-12 Benjamin SaundersIntroduce SSL_CTX_set_stateless_cookie_{generate,verify}_cb
2018-03-12 Todd ShortSession Ticket app data
2018-03-09 Benjamin KadukReuse extension_is_relevant() in should_add_extension()
2018-03-09 Matt CaswellGive more information in the SSL_stateless return code
2018-03-09 Matt CaswellFallback on old style PSK callbacks if the new style...
2018-03-09 Matt CaswellTolerate TLSv1.3 PSKs that are a different size to...
2018-03-05 Todd ShortIf not sending key_share (no TLSv1.3), return appropria...
2018-03-05 Matt CaswellFix status_request and SCT extensions
2018-02-28 Kurt RoeckxTell the ciphers which DRBG to use for generating rando...
2018-02-26 Tatsuhiro TsujikawaExport keying material using early exporter master...
2018-02-23 PauliRemove unreachable statement.
2018-02-15 Matt CaswellIf s->ctx is NULL then this is an internal error
2018-02-14 Matt CaswellIgnore an s_client psk in TLSv1.3 if not TLSv1.3 suitable
2018-02-13 Matt CaswellUpdate copyright year
2018-02-12 Matt CaswellThe function ssl_get_min_max_version() can fail
2018-02-12 Matt CaswellDon't overestimate the ticket age
2018-02-09 Matt CaswellDon't calculate the Finished MAC twice
2018-02-02 Tatsuhiro TsujikawaMake sure that exporting keying material is allowed
2018-02-01 Todd ShortFix some minor code nits
2018-02-01 Todd ShortAdd TLSv1.3 post-handshake authentication (PHA)
2018-02-01 Matt CaswellFix some instances of the wrong alert type being sent
2018-01-30 Matt CaswellMove decisions about whether to accept reneg into the...
2018-01-25 Benjamin KadukAdd support for the TLS 1.3 signature_algorithms_cert...
2018-01-24 Matt CaswellUpdates following review of SSL_stateless() code
2018-01-24 Matt CaswellAdd a timestamp to the cookie
2018-01-24 Matt CaswellDon't send unexpected_message if we receive CCS while...
2018-01-24 Matt CaswellFix the cookie/key_share extensions for use with SSL_st...
2018-01-24 Matt CaswellFix interaction between SSL_stateless() and SSL_clear()
2018-01-24 Matt CaswellFix logic around when to send an HRR based on cookies
2018-01-24 Matt CaswellAdd support for sending TLSv1.3 cookies
2018-01-22 Rich SalzMove fprintf after assignment to avoid crash.
2018-01-09 Richard LevitteUpdate copyright years on all files merged since Jan...
2018-01-03 Benjamin KadukPermit the "supported_groups" extension in ServerHellos
2017-12-28 Matt CaswellDon't flush the ClientHello if we're going to send...
2017-12-26 Paul YangRemove outdated comments
2017-12-17 Paul YangRemove spaces at end of line in ssl/statem
2017-12-14 Matt CaswellIssue a CCS from the client if we received an HRR
2017-12-14 Matt CaswellFix server side HRR flushing
2017-12-14 Matt CaswellDelay flush until after CCS with early_data
2017-12-14 Matt CaswellSend supported_versions in an HRR
2017-12-14 Matt CaswellMake sure supported_versions appears in an HRR too
2017-12-14 Matt CaswellUpdate state machine to send CCS based on whether we...
2017-12-14 Matt CaswellFix an HRR bug
2017-12-14 Matt CaswellMerge HRR into ServerHello
2017-12-14 Matt CaswellSend a CCS after ServerHello in TLSv1.3 if using middle...
2017-12-14 Matt CaswellSend a CCS from a client in an early_data handshake
2017-12-14 Matt CaswellSend a CCS from the client in a non-early_data handshake
2017-12-14 Matt CaswellRemove TLSv1.3 specific write transition for ClientHello
2017-12-14 Matt CaswellImplement session id TLSv1.3 middlebox compatibility...
2017-12-14 Matt CaswellUpdate ServerHello to new draft-22 format
2017-12-08 Matt CaswellMore record layer conversions to use SSLfatal()
2017-12-08 Rich SalzConsistent formatting for sizeof(foo)
2017-12-06 Matt CaswellFix the check_fatal macro
2017-12-06 Matt CaswellFix bug in TLSv1.3 PSK processing
2017-12-04 Matt CaswellFix some formatting nits
2017-12-04 Matt CaswellUpdate an error reason code to be ERR_R_SHOULD_NOT_HAVE...
2017-12-04 Matt CaswellAdd some more cleanups
2017-12-04 Matt CaswellAssert that SSLfatal() only gets called once
2017-12-04 Matt CaswellAdd some sanity checks for the fatal error condition
2017-12-04 Matt CaswellFix up a few places in the state machine that got misse...
2017-12-04 Matt CaswellConvert more functions in ssl/statem/statem_dtls.c...
2017-12-04 Matt CaswellConvert more functions in ssl/statem/statem.c to use...
2017-12-04 Matt CaswellConvert remaining functions in statem_srvr.c to use...
2017-12-04 Matt CaswellConvert remaining functions in statem_clnt.c to use...
2017-12-04 Matt CaswellConvert the state machine code to use SSLfatal()
2017-12-04 Matt CaswellReplace some usage of SSLerr with SSLfatal()
2017-12-04 Matt CaswellProvide an SSLfatal() macro
2017-11-21 Matt CaswellIf a server is not acknowledging SNI then don't reject...
2017-11-21 Matt CaswellAllow a client to send early_data with SNI if the sessi...
2017-11-13 Andy PolyakovResolve warnings in VC-WIN32 build, which allows to...
2017-11-05 FdaSilvaYYImplement Maximum Fragment Length TLS extension.
2017-10-30 Benjamin KadukProvide SSL_CTX.stats.sess_accept for switched ctxs
2017-10-30 Benjamin KadukNormalize on session_ctx for stats where possible
2017-10-30 Benjamin KadukUse atomics for SSL_CTX statistics
2017-10-18 KaoruTodaRemove parentheses of return.
2017-10-16 Matt CaswellSanity check the HRR version field
2017-10-16 Matt CaswellDon't do version neg on an HRR
2017-10-12 Matt CaswellFix bug where early_data does not work if no SNI callba...
2017-10-10 Tatsuhiro TsujikawaDon't change client random in Client Hello in its secon...
2017-10-09 KaoruTodaSince return is inconsistent, I removed unnecessary...
2017-10-06 Dr. Stephen HensonMerge tls1_check_curve into tls1_check_group_id
2017-10-06 Dr. Stephen HensonChange curves to groups where relevant
2017-10-06 Dr. Stephen HensonUse separate functions for supported and peer groups...
2017-10-04 Matt CaswellRemove an incorrect comment
2017-10-04 Todd ShortSession resume broken switching contexts
2017-09-26 Dr. Stephen HensonRename tls1_get_curvelist.
2017-09-26 Dr. Stephen HensonNew function ssl_generate_param_group
2017-09-26 Dr. Stephen HensonReplace tls1_ec_curve_id2nid.
2017-09-26 Dr. Stephen HensonReturn group id in tls1_shared_group
next