summaryrefslogtreecommitdiff
path: root/ssl/ssl_locl.h
Commit message (Expand)AuthorAgeFilesLines
* Remove all RFC5878 code.Dr. Stephen Henson2014-07-041-7/+0
* Fix possible buffer overrun.Ben Laurie2014-07-021-2/+2
* More constification.Ben Laurie2014-06-291-3/+3
* Constification - mostly originally from Chromium.Ben Laurie2014-06-291-4/+4
* SRP ciphersuite correction.Dr. Stephen Henson2014-06-091-0/+1
* Security framework.Dr. Stephen Henson2014-03-281-6/+26
* Allow return of supported ciphers.Dr. Stephen Henson2014-03-281-0/+1
* Auto DH support.Dr. Stephen Henson2014-03-281-0/+4
* Don't use BN_ULLONG in n2l8 use SCTS_TIMESTAMP.Dr. Stephen Henson2014-02-251-9/+0
* Show the contents of the RFC6962 Signed Certificate Timestamp List Certificat...Rob Stradling2014-02-141-0/+9
* Update custom TLS extension and supplemental data 'generate' callbacks to sup...Scott Deboy2014-02-051-2/+2
* New ctrl to set current certificate.Dr. Stephen Henson2014-02-021-0/+2
* use SSL_kDHE throughout instead of SSL_kEDHDaniel Kahn Gillmor2014-01-091-2/+3
* use SSL_kECDHE throughout instead of SSL_kEECDHDaniel Kahn Gillmor2014-01-091-1/+2
* Additional "chain_cert" functions.Rob Stradling2013-11-131-0/+1
* Do not include a timestamp in the Client/ServerHello Random field.Nick Mathewson2013-10-211-0/+1
* Experimental encrypt-then-mac support.Dr. Stephen Henson2013-09-081-1/+7
* Add callbacks supporting generation and retrieval of supplemental data entrie...Scott Deboy2013-09-061-10/+3
* Add support for arbitrary TLS extensions.Trevor2013-06-121-0/+12
* Suite B support for DTLS 1.2Dr. Stephen Henson2013-04-091-1/+1
* Make TLS 1.2 ciphers work again.Dr. Stephen Henson2013-04-041-0/+6
* Enable TLS 1.2 ciphers in DTLS 1.2.Dr. Stephen Henson2013-03-281-0/+9
* Provisional DTLS 1.2 support.Dr. Stephen Henson2013-03-261-0/+1
* Extend DTLS method macros.Dr. Stephen Henson2013-03-261-3/+4
* Use enc_flags when deciding protocol variations.Dr. Stephen Henson2013-03-181-2/+11
* Use appropriate versions of SSL3_ENC_METHODDr. Stephen Henson2013-03-181-2/+2
* DTLS revision.Dr. Stephen Henson2013-03-181-13/+30
* DTLS trace support.Dr. Stephen Henson2013-03-111-1/+2
* ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV".Andy Polyakov2013-02-081-1/+1
* ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov2013-02-061-1/+1
* Timing fix mitigation for FIPS mode.Dr. Stephen Henson2013-02-061-0/+4
* Make CBC decoding constant time.Ben Laurie2013-02-061-0/+34
* Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson2012-09-121-2/+5
* Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie2012-09-111-1/+2
* perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson2012-08-311-1/+2
* Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson2012-08-151-2/+7
* Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson2012-07-271-8/+0
* Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson2012-07-241-0/+2
* check EC tmp key matches preferencesDr. Stephen Henson2012-07-241-0/+1
* Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson2012-07-231-0/+8
* New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson2012-07-181-3/+9
* Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson2012-07-081-0/+7
* Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson2012-07-031-5/+16
* Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson2012-06-291-0/+11
* Function tls1_check_ec_server_key is now redundant as we makeDr. Stephen Henson2012-06-281-1/+0
* Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson2012-06-281-1/+18
* Reorganise supported signature algorithm extension processing.Dr. Stephen Henson2012-06-251-2/+8
* Add support for application defined signature algorithms for use withDr. Stephen Henson2012-06-221-4/+16
* Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson2012-06-181-0/+1
* Version skew reduction: trivia (I hope).Ben Laurie2012-06-031-2/+2