]> git.ipfire.org Git - thirdparty/openssl.git/history - ssl/s3_lib.c
Move ciphersuite selection before session resumption in TLSv1.3
[thirdparty/openssl.git] / ssl / s3_lib.c
2017-06-16  Matt CaswellMove ciphersuite selection before session resumption...
2017-06-16  Matt CaswellAllow the server to change the ciphersuite on resume
2017-06-08  Diego Santa CruzMake SRP_CTX.info ownership and lifetime be the same...
2017-05-22  Matt CaswellConvert existing usage of assert() to ossl_assert(...
2017-05-22  Matt CaswellFix some style issues in returns
2017-04-11  Todd ShortRemove ECDH(E) ciphers from SSLv3
2017-04-03  Dr. Stephen HensonNew certificate_authorities functions
2017-03-24  Matt CaswellMove the downgrade sentinel declarations to a header...
2017-03-24  Matt CaswellAdd server side support for TLSv1.3 downgrade mechanism
2017-02-28  Matt CaswellRemove some commented out code in libssl
2017-02-28  Todd ShortRemove some #if 0 code in ssl, crypto/bio
2017-02-24  Dr. Stephen HensonTidy up certificate type handling.
2017-02-23  Benjamin KadukAdd more first-class support for SCSVS
2017-02-21  Paulifix spelling of Camellia in comment
2017-02-15  Dr. Stephen HensonUse CERT_PKEY pointer instead of index
2017-02-15  Dr. Stephen HensonUse cert_index and sigalg
2017-02-08  Dr. Stephen HensonAdd remaining TLS1.3 ciphersuites
2017-02-02  Richard LevitteInitialise alg_k and alg_a
2017-02-02  Dr. Stephen HensonDon't filter TLS 1.3 ciphersuites by signing or key...
2017-02-02  Dr. Stephen HensonUpdate cipher definition
2017-01-31  Dr. Stephen HensonStore table entry to peer signature algorithm.
2017-01-30  Matt CaswellMake sure we free and cleanse the pms value in all...
2017-01-30  Matt CaswellMove the SSL3_CK_CIPHERSUITE_FLAG out of public header
2017-01-30  Matt CaswellMiscellaneous style tweaks based on feedback received
2017-01-30  Matt CaswellImplement server side of PSK extension construction
2017-01-30  Matt CaswellConstruct the client side psk extension for TLSv1.3
2017-01-30  Matt CaswellMove state machine knowledge out of the record layer
2017-01-30  Matt CaswellRemove use of the SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS...
2017-01-10  Rich SalzReview comments
2017-01-10  Rich SalzMove extension data into sub-structs
2016-11-23  Matt CaswellUpdate state machine to be closer to TLS1.3
2016-11-16  Matt CaswellStart using the key_share data to derive the PMS
2016-11-15  Richard LevitteRevert "Remove heartbeats completely"
2016-11-15  Richard LevitteRemove heartbeats completely
2016-11-13  Richard LevitteRemove heartbeat support
2016-11-10  Matt CaswellRename the Elliptic Curves extension to supported_groups
2016-11-04  Matt CaswellRename all "read" variables with "readbytes"
2016-11-04  Matt CaswellFix misc size_t issues causing Windows warnings in...
2016-11-04  Matt CaswellFix some missed size_t updates
2016-11-04  Matt CaswellConvert some libssl local functions to size_t
2016-11-04  Matt CaswellConvert master_secret_size code to size_t
2016-11-04  Matt CaswellConvert libssl writing for size_t
2016-11-04  Matt CaswellFurther libssl size_t-ify of reading
2016-11-02  Matt CaswellAdd the SSL_METHOD for TLSv1.3 and all other base chang...
2016-10-03  Matt CaswellHarmonise setting the header and closing construction
2016-10-02  Matt CaswellRename ssl_set_handshake_header2()
2016-10-02  Matt CaswellRemove ssl_set_handshake_header()
2016-09-29  Matt CaswellConvert CertificateRequest construction to WPACKET
2016-09-29  Matt CaswellDelete some unneeded code
2016-09-20  Matt CaswellConvert WPACKET_put_bytes to use convenience macros
2016-09-13  Matt CaswellAddress WPACKET review comments
2016-09-13  Matt CaswellMove from explicit sub-packets to implicit ones
2016-09-13  Matt CaswellRename PACKETW to WPACKET
2016-09-13  Matt CaswellConvert tls_construct_client_hello() to use PACKETW
2016-08-24  Rich SalzPut DES into "not default" category.
2016-08-24  Rich SalzTo avoid SWEET32 attack, move 3DES to weak
2016-08-18  Emilia KasperIndent ssl/
2016-08-17  Remi GacogneAdd missing session id and tlsext_status accessors
2016-08-15  Dr. Stephen HensonFix no-ec
2016-08-13  Dr. Stephen HensonModify TLS support for new X25519 API.
2016-08-04  David WoodhouseFix cipher support for DTLS1_BAD_VER
2016-07-19  Dr. Stephen HensonSanity check in ssl_get_algorithm2().
2016-07-18  Matt CaswellSplit out PSK preamble and RSA from process CKE code
2016-06-23  FdaSilvaYYAdd checks on sk_TYPE_push() returned result
2016-06-07  Matt CaswellAdd SSL_CTX_get_tlsext_status_type()
2016-06-07  Matt CaswellReturn the value of tlsext_status_type in the return...
2016-06-07  Alessandro GhediniAdd SSL_get_tlsext_status_type() method
2016-05-17  Rich SalzCopyright consolidation 01/10
2016-05-16  Kurt Roeckxsession tickets: use more sizeof
2016-05-16  TJ Saunderssession tickets: Use sizeof() for the various fields
2016-05-16  jfigusPropagate tlsext_status_type from SSL_CTX to SSL
2016-05-12  Dmitry BelyavskyDon't use GOST ciphersuites with DTLS.
2016-05-05  Rich SalzMove 3DES from HIGH to MEDIUM
2016-04-28  FdaSilvaYYvarious spelling fixes
2016-04-04  Rich SalzRevert "various spelling fixes"
2016-04-04  FdaSilvaYYvarious spelling fixes
2016-03-31  PauliRT4458: Fix #ifndef line for GOST
2016-03-20  Rich SalzRemove #error from include files.
2016-03-17  Rich SalzSort cipher-list at runtime.
2016-03-09  Kurt RoeckxMove disabling of RC4 for DTLS to the cipher list.
2016-03-09  Kurt RoeckxIDEA is not supported in TLS 1.2
2016-03-09  Kurt RoeckxAdd support for minimum and maximum protocol version...
2016-03-08  Benjamin KadukGH815: The ChaCha20/Poly1305 codepoints are official
2016-03-08  Todd ShortGH787: Fix ALPN
2016-03-07  Emilia KasperRework the default cipherlist.
2016-03-04  Kurt RoeckxDon't mark the eNULL ciphers as non-default.
2016-03-04  Matt CaswellDon't build RC4 ciphersuites into libssl by default
2016-02-24  Dr. Stephen HensonRemove unused parameter in ssl_set_masks().
2016-02-18  Rich SalzRemove outdated DEBUG flags.
2016-02-13  Viktor SzakatsGH675: make ssl3_ciphers static
2016-02-11  Dr. Stephen HensonRemove static ECDH support.
2016-02-11  Rich SalzRemove TLS heartbeat, disable DTLS heartbeat
2016-02-08  Dr. Stephen HensonDeprecate undocumented SSL_cache_hit().
2016-02-08  Matt CaswellHandle SSL_shutdown while in init more appropriately #2
2016-02-01  Emilia Kasperconstify PACKET
2016-01-26  Rich SalzRemove /* foo.c */ comments
2016-01-20  Matt CaswellHandle SSL_shutdown while in init more appropriately
2016-01-19  Dmitry BelyavskyFix GOST2012-NULL-GOST12
2016-01-16  Viktor DukhovniEmpty SNI names are not valid
2016-01-07  Dr. Stephen HensonFix declarations and constification for inline stack.
next