]> git.ipfire.org Git - thirdparty/openssl.git/history - ssl/statem/statem_clnt.c
Implement session id TLSv1.3 middlebox compatibility mode
[thirdparty/openssl.git] / ssl / statem / statem_clnt.c
2017-12-14  Matt CaswellImplement session id TLSv1.3 middlebox compatibility...
2017-12-14  Matt CaswellUpdate ServerHello to new draft-22 format
2017-12-08  Rich SalzConsistent formatting for sizeof(foo)
2017-12-04  Matt CaswellFix some formatting nits
2017-12-04  Matt CaswellAdd some more cleanups
2017-12-04  Matt CaswellAssert that SSLfatal() only gets called once
2017-12-04  Matt CaswellFix up a few places in the state machine that got misse...
2017-12-04  Matt CaswellConvert remaining functions in statem_clnt.c to use...
2017-12-04  Matt CaswellConvert the state machine code to use SSLfatal()
2017-10-30  Benjamin KadukNormalize on session_ctx for stats where possible
2017-10-30  Benjamin KadukUse atomics for SSL_CTX statistics
2017-10-18  KaoruTodaRemove parentheses of return.
2017-10-16  Matt CaswellSanity check the HRR version field
2017-10-16  Matt CaswellDon't do version neg on an HRR
2017-10-10  Tatsuhiro TsujikawaDon't change client random in Client Hello in its secon...
2017-10-06  Dr. Stephen HensonMerge tls1_check_curve into tls1_check_group_id
2017-10-04  Matt CaswellRemove an incorrect comment
2017-09-26  Dr. Stephen HensonNew function ssl_generate_param_group
2017-09-26  Dr. Stephen HensonReplace tls1_ec_curve_id2nid.
2017-09-14  Benjamin KadukFix no-ec no-dh build
2017-09-01  Andy Polyakovssl/statem/*.c: address "enum mixed with another type...
2017-08-03  Rich SalzAdd a DRBG to each SSL object
2017-08-01  Matt CaswellFix new_session_cb calls in TLSv1.3
2017-07-20  Paul YangSupport converting cipher name to RFC name and vice...
2017-07-18  Matt CaswellTolerate a zero length ticket nonce
2017-07-18  Matt CaswellFix early_data with an HRR
2017-07-13  Dr. Stephen HensonUse cert tables instead of X509_certificate_type
2017-07-13  Dr. Stephen HensonUse certificate tables instead of ssl_cipher_get_cert_i...
2017-07-07  Matt CaswellSend and receive the ticket_nonce field in a NewSession...
2017-07-03  Bernd EdlingerFix a crash in tls_construct_client_certificate.
2017-06-23  Matt CaswellTreat all failures from EVP_DigestVerify() as a bad...
2017-06-21  Dr. Stephen HensonAllow Ed25519 in TLS 1.2
2017-06-21  Dr. Stephen HensonConvert key exchange to one shot call
2017-06-21  Rich SalzMerge Nokia copyright notice into standard
2017-06-20  Rich SalzModify Sun copyright to follow OpenSSL style
2017-06-16  Matt CaswellAllow the server to change the ciphersuite on resume
2017-06-06  Todd ShortFix #2400 Add NO_RENEGOTIATE option
2017-05-19  Matt CaswellTry to be more consistent about the alerts we send
2017-05-11  Bernd EdlingerFix gcc-7 warnings.
2017-05-11  Matt CaswellAdd some checks for trailing data after extension blocks
2017-05-11  Matt CaswellEnsure we fail with a decode error alert if the server...
2017-05-11  Matt CaswellFix more alert codes
2017-05-09  Matt CaswellVerify that if we have an HRR then something will change
2017-04-26  Tatsuhiro TsujikawaDon't treat PACKET_remaining() as boolean
2017-04-26  Tatsuhiro TsujikawaCall init and finalization functions per extension...
2017-04-26  Matt CaswellAlways duplicate the session on NewSessionTicket in...
2017-04-26  Matt CaswellAdd support for SSL_SESSION_is_resumable()
2017-04-26  Matt CaswellRemove TLS1.3 TODO around testing for session id length
2017-04-26  Matt CaswellAdd a ciphersuite config sanity check for clients
2017-04-25  Matt CaswellRemove special case code for SCTP reneg handling
2017-04-24  Matt CaswellDon't fail the connection in SSLv3 if server selects...
2017-04-24  Rich Salzif log fails, avoid pms getting double free
2017-04-07  Matt CaswellMove the extensions context codes into the public API
2017-03-29  FdaSilvaYYMore typo fixes
2017-03-28  FdaSilvaYYFix a few more typos
2017-03-24  Matt CaswellAdd client side support for TLSv1.3 downgrade mechanism
2017-03-24  Matt CaswellAdd server side support for TLSv1.3 downgrade mechanism
2017-03-17  Dr. Stephen HensonImplement certificate_authorities extension
2017-03-17  Dr. Stephen HensonSupport draft-19 TLS certificate request format
2017-03-17  Dr. Stephen HensonMove parsing and construction of CA names to separate...
2017-03-16  Matt CaswellHelloRetryRequest updates for draft-19
2017-03-16  Matt CaswellUpdate end of early data processing for draft-19
2017-03-07  Matt CaswellCheck TLSv1.3 ServerHello, Finished and KeyUpdates...
2017-03-02  Matt CaswellVarious fixes required to allow SSL_write/SSL_read...
2017-03-02  Matt CaswellEnable the server to call SSL_write() without stopping...
2017-03-02  Matt CaswellEnable the client to call SSL_read() without stopping...
2017-03-02  Matt CaswellIntroduce a new early_data state in the state machine
2017-03-02  Matt CaswellRemove some TLSv1.3 TODOs that are no longer relevant
2017-03-02  Matt CaswellConstruct the server side early_data extension
2017-03-02  Matt CaswellProvide an SSL_read_early() function for reading early...
2017-03-02  Matt CaswellChange the cipher state when sending early data
2017-03-02  Matt CaswellProvide functions to write early data
2017-03-02  Matt CaswellEnsure that we never select compression in TLSv1.3
2017-03-01  Emilia KasperRemove some obsolete/obscure internal define switches:
2017-02-28  Matt CaswellRemove some commented out code in libssl
2017-02-27  Dr. Stephen HensonInitial incomplete TLS 1.3 certificate request support.
2017-02-24  Dr. Stephen HensonTidy up certificate type handling.
2017-02-23  Benjamin KadukLet ssl_get_cipher_by_char yield not-valid ciphers
2017-02-23  Benjamin Kadukoutput number of exts from tls_collect_extensions()
2017-02-21  Dr. Stephen Hensonremove md array: it is not used any more.
2017-02-17  Matt CaswellUpdates following review feedback
2017-02-17  Matt CaswellActually update the keys when a KeyUpdate message is...
2017-02-17  Matt CaswellIf we receive an "update_requested" KeyUpdate then...
2017-02-17  Matt CaswellAdd the ability for a client to send a KeyUpdate message
2017-02-17  Matt CaswellAdd the ability for a client to receive a KeyUpdate...
2017-02-16  Dr. Stephen HensonUse tls_choose_sigalg for client auth.
2017-02-15  Dr. Stephen HensonUse cert_index and sigalg
2017-02-14  Matt CaswellVarious style fixes following review feedback
2017-02-14  Matt CaswellAdd client side support for parsing Hello Retry Request
2017-01-31  Dr. Stephen HensonRemove peer_md and use peer_sigalg instead.
2017-01-31  Dr. Stephen HensonDon't check certificate type against ciphersuite for...
2017-01-30  Matt CaswellFree up the memory for the NewSessionTicket extensions
2017-01-30  Dr. Stephen Hensonfix style issues
2017-01-30  Dr. Stephen HensonStore peer signature type.
2017-01-30  Dr. Stephen Hensonuse RSA_PSS_SALTLEN_DIGEST constant
2017-01-30  Matt CaswellExpand comment in tls_process_hello_req()
2017-01-30  Matt CaswellMiscellaneous style tweaks based on feedback received
2017-01-30  Matt CaswellEnsure the al variable is properly ininitialised in...
2017-01-30  Matt CaswellEnsure the age_add variable is properly initialised
2017-01-30  Matt CaswellAdd support for client side parsing of the PSK extension
next