Commits · 05b8486e47c50db658474f9a36eab91cd41d1a13 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Jan 31, 2017
- Don't check certificate type against ciphersuite for TLS 1.3 · 05b8486e
  Dr. Stephen Henson authored Jan 30, 2017
  05b8486e
- Add TLS 1.3 signing curve check · 8f88cb53
  Dr. Stephen Henson authored Jan 30, 2017
  8f88cb53
- Only allow PSS signatures with RSA keys and TLS 1.3 · 2b4418eb
  Dr. Stephen Henson authored Jan 30, 2017
  2b4418eb
- Store table entry to peer signature algorithm. · f742cda8
  Dr. Stephen Henson authored Jan 30, 2017
  f742cda8
Jan 30, 2017
- Free up the memory for the NewSessionTicket extensions · 33d93417
  Matt Caswell authored Jan 30, 2017
  33d93417
- Make sure we free and cleanse the pms value in all code paths · c8ab3a46
  Matt Caswell authored Jan 30, 2017
  c8ab3a46
- Update macros. · 787ebcaf
  Dr. Stephen Henson authored Jan 29, 2017
  787ebcaf
- fix style issues · 91410d40
  Dr. Stephen Henson authored Jan 29, 2017
  91410d40
- Fix TLS 1.2 and no sigalgs. · cdf516d9
  Dr. Stephen Henson authored Jan 29, 2017
  cdf516d9
- Use PSS for simple test so TLS 1.3 handhake is successful. · d8979bdd
  Dr. Stephen Henson authored Jan 28, 2017
  d8979bdd
- Add tests for client and server signature type · a92e710b
  Dr. Stephen Henson authored Jan 27, 2017
  a92e710b
- Add test support for TLS signature types. · 54b7f2a5
  Dr. Stephen Henson authored Jan 27, 2017
  54b7f2a5
- Update documentation · a593cffe
  Dr. Stephen Henson authored Jan 27, 2017
  a593cffe
- make update · 377c5e98
  Dr. Stephen Henson authored Jan 27, 2017
  377c5e98
- Replace TLS_SIGALGS with SIGALG_LOOKUP · 4d43ee28
  Dr. Stephen Henson authored Jan 26, 2017
  4d43ee28
- Support TLS 1.3 signature scheme names. · 8a43a42a
  Dr. Stephen Henson authored Jan 26, 2017
  8a43a42a
- Extend TLS 1.3 signature table. · edbfba1a
  Dr. Stephen Henson authored Jan 26, 2017
  edbfba1a
- Use shared signature algorithm list to find type. · 018031fa
  Dr. Stephen Henson authored Jan 26, 2017
  018031fa
- Add SSL_get_peer_signature_type_nid() function. · 42ef7aea
  Dr. Stephen Henson authored Jan 25, 2017
  42ef7aea
- Store peer signature type. · 5554facb
  Dr. Stephen Henson authored Jan 25, 2017
  5554facb
- More complete PSS support. · b2eb6998
  Dr. Stephen Henson authored Jan 25, 2017
  b2eb6998
- Use uint16_t for signature scheme. · 98c792d1
  Dr. Stephen Henson authored Jan 25, 2017
  98c792d1
- use RSA_PSS_SALTLEN_DIGEST constant · 968ae5b3
  Dr. Stephen Henson authored Jan 25, 2017
  968ae5b3
- Expand comment in tls_process_hello_req() · 1f04f23e
  Matt Caswell authored Jan 27, 2017
  1f04f23e
- Add a TODO around validating the ticket age · 1b8bacff
  Matt Caswell authored Jan 27, 2017
  1b8bacff
- Various style fixes following review feedback · 40f805ad
  Matt Caswell authored Jan 27, 2017
  40f805ad
- Remove unneccessary comments · 61c32649
  Matt Caswell authored Jan 27, 2017
  61c32649
- Use for loop in WPACKET_fill_lengths instead of do...while · fed60a78
  Matt Caswell authored Jan 27, 2017
  fed60a78
- Move the SSL3_CK_CIPHERSUITE_FLAG out of public header · 34f7245b
  Matt Caswell authored Jan 27, 2017
  34f7245b
- Add a test for the PSK kex modes extension · 3ae6b5f8
  Matt Caswell authored Jan 25, 2017
  3ae6b5f8
- If we have no suitable PSK kex modes then don't attempt to resume · 1a9f457c
  Matt Caswell authored Jan 25, 2017
  1a9f457c
- Fix <= TLS1.2 break · 1a3392c8
  Matt Caswell authored Jan 23, 2017
  1a3392c8
- Add a test for WPACKET_fill_lengths() · 34254342
  Matt Caswell authored Jan 23, 2017
  34254342
- Enable wpacket test on shared builds · e463cb39
  Matt Caswell authored Jan 23, 2017
  e463cb39
- Make calls to SSL_renegotiate() error out for TLSv1.3 · 2c0980d2
  Matt Caswell authored Jan 20, 2017
  2c0980d2
- Make the "ticket" function return codes clearer · ddf6ec00
  Matt Caswell authored Jan 20, 2017
  ddf6ec00
- Miscellaneous style tweaks based on feedback received · 1f5b44e9
  Matt Caswell authored Jan 20, 2017
  1f5b44e9
- Ensure the al variable is properly ininitialised in all code paths · 6df55cac
  Matt Caswell authored Jan 20, 2017
  6df55cac
- Ensure the age_add variable is properly initialised · 9ac6244b
  Matt Caswell authored Jan 20, 2017
  9ac6244b
- Re-enable resumption for TLS1.3 CT tests · 79495812
  Matt Caswell authored Jan 20, 2017
  79495812