Commits · 1a9f457c6656a0905102c8850ca586eda1e3ba91 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Jan 30, 2017
- If we have no suitable PSK kex modes then don't attempt to resume · 1a9f457c
  Matt Caswell authored Jan 25, 2017
  1a9f457c
- Fix <= TLS1.2 break · 1a3392c8
  Matt Caswell authored Jan 23, 2017
  1a3392c8
- Add a test for WPACKET_fill_lengths() · 34254342
  Matt Caswell authored Jan 23, 2017
  34254342
- Enable wpacket test on shared builds · e463cb39
  Matt Caswell authored Jan 23, 2017
  e463cb39
- Make calls to SSL_renegotiate() error out for TLSv1.3 · 2c0980d2
  Matt Caswell authored Jan 20, 2017
  2c0980d2
- Make the "ticket" function return codes clearer · ddf6ec00
  Matt Caswell authored Jan 20, 2017
  ddf6ec00
- Miscellaneous style tweaks based on feedback received · 1f5b44e9
  Matt Caswell authored Jan 20, 2017
  1f5b44e9
- Ensure the al variable is properly ininitialised in all code paths · 6df55cac
  Matt Caswell authored Jan 20, 2017
  6df55cac
- Ensure the age_add variable is properly initialised · 9ac6244b
  Matt Caswell authored Jan 20, 2017
  9ac6244b
- Re-enable resumption for TLS1.3 CT tests · 79495812
  Matt Caswell authored Jan 20, 2017
  79495812
- Add testing of TLSv1.3 resumption in test_tls13messages · a23bb15a
  Matt Caswell authored Jan 20, 2017
  a23bb15a
- Add a capability for TLSProxy to wait for a session before killing s_client · 1c361b4a
  Matt Caswell authored Jan 20, 2017
  1c361b4a
- Re-enable test_ssl_new resumption tests for TLSv1.3 · 93fa7e8d
  Matt Caswell authored Jan 19, 2017
  93fa7e8d
- Remove a TLS1.3 TODO that is now completed · dd1e75bd
  Matt Caswell authored Jan 19, 2017
  dd1e75bd
- Re-enable TLSv1.3 session resumption related tests in sslapitest · b05e4ce6
  Matt Caswell authored Jan 19, 2017
  b05e4ce6
- Update create_ssl_connection() to make sure its gets a session · 59db06f1
  Matt Caswell authored Jan 19, 2017
  59db06f1
- Re-enable ALPN resumption tests where we are using TLSv1.3 · 4b7ffd8b
  Matt Caswell authored Jan 19, 2017
  4b7ffd8b
- Always ensure that session->cipher is set · 534a43ff
  Matt Caswell authored Jan 19, 2017
  534a43ff
- Tweak a comment · 4086b42b
  Matt Caswell authored Jan 19, 2017
  4086b42b
- Use the correct session resumption mechanism · 08191294
  Matt Caswell authored Jan 19, 2017
  08191294
- Move session version consistency check · 128ae276
  Matt Caswell authored Jan 19, 2017
  128ae276
- Set the kex modes on the client too. · b3ad72ce
  Matt Caswell authored Jan 19, 2017
  b3ad72ce
- Implement server side of PSK extension construction · 0247086d
  Matt Caswell authored Jan 18, 2017
  0247086d
- Implement Server side of PSK extension parsing · 1053a6e2
  Matt Caswell authored Jan 18, 2017
  1053a6e2
- Make sure we also cleanse the finished key · 71c94d3c
  Matt Caswell authored Jan 18, 2017
  71c94d3c
- Provide a key_share extension finaliser · f4bbb37c
  Matt Caswell authored Jan 18, 2017
  f4bbb37c
- Add support for client side parsing of the PSK extension · 4ff65f77
  Matt Caswell authored Jan 18, 2017
  4ff65f77
- Add support for the age_add field · fc24f0bf
  Matt Caswell authored Jan 17, 2017
  fc24f0bf
- Construct the client side psk extension for TLSv1.3 · ec15acb6
  Matt Caswell authored Jan 13, 2017
  ec15acb6
- Provide a new WPACKET function for filling in all the lengths · a2b7e655
  Matt Caswell authored Jan 13, 2017
  a2b7e655
- Update the s_client -sess_out feature to work for TLSv1.3 · be62b22b
  Matt Caswell authored Jan 13, 2017
  be62b22b
- Never send a session id in TLS1.3 · f05bcf0f
  Matt Caswell authored Jan 13, 2017
  f05bcf0f
- Add a TODO around handling of SSL_get_session() and SSL_get1_session() · e7a28df7
  Matt Caswell authored Jan 13, 2017
  e7a28df7
- Process incoming NewSessionTicket messages on the client side · de1df7e9
  Matt Caswell authored Jan 13, 2017
  de1df7e9
- Create the NewSessionTicket message in TLSv1.3 · 30f05b19
  Matt Caswell authored Jan 13, 2017
  30f05b19
- Add support for the psk_key_exchange_modes extension · b2f7e8c0
  Matt Caswell authored Jan 12, 2017
  b2f7e8c0
- Move TLSv1.3 Session Ticket processing into the state machine · cc2455bf
  Matt Caswell authored Jan 11, 2017
  cc2455bf
- Disable requests for renegotiation in TLSv1.3 · cda6b998
  Matt Caswell authored Jan 11, 2017
  cda6b998
- Move state machine knowledge out of the record layer · c7f47786
  Matt Caswell authored Jan 10, 2017
  c7f47786
- Remove use of the SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS flag · 0386aad1
  Matt Caswell authored Jan 10, 2017
  0386aad1