Commits · 4ff1a5266685f4a687a9f91b531c2f979b96db22 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Jun 07, 2018
- Fix TLSv1.3 ticket nonces · 4ff1a526
  Matt Caswell authored Jun 01, 2018
  4ff1a526
May 31, 2018
- EVP_MD_size() can return an error · bceae201
  Matt Caswell authored May 29, 2018
  bceae201
May 22, 2018
- Fix no-ec in combination with no-dh · 1aac20f5
  Matt Caswell authored May 21, 2018
  1aac20f5
May 17, 2018
- Change the default number of NewSessionTickets we send to 2 · 36ff232c
  Matt Caswell authored Mar 14, 2018
  36ff232c
- Enable the ability to set the number of TLSv1.3 session tickets sent · 9d0a8bb7
  Matt Caswell authored Jan 31, 2018
  9d0a8bb7
May 15, 2018
- Suport TLSv1.3 draft 28 · 73cc84a1
  Matt Caswell authored May 14, 2018
  73cc84a1
May 12, 2018
- Don't memcpy the contents of an empty fragment · a925e7db
  Matt Caswell authored May 11, 2018
  a925e7db
May 11, 2018
- Rework the decrypt ticket callback · 61fb5923
  Matt Caswell authored May 09, 2018
  61fb5923
- Fix ticket callbacks in TLSv1.3 · c0638ade
  Matt Caswell authored May 08, 2018
  c0638ade
May 08, 2018
- Keep the DTLS timer running after the end of the handshake if appropriate · f7506416
  Matt Caswell authored May 03, 2018
  f7506416
- Don't fail on an out-of-order CCS in DTLS · f20404fc
  Matt Caswell authored May 03, 2018
  f20404fc
Apr 24, 2018
- In a reneg use the same client_version we used last time · 447cc0ad
  Matt Caswell authored Apr 23, 2018
  447cc0ad
- Remove some logically dead code · 22eb2d1c
  Matt Caswell authored Apr 23, 2018
  22eb2d1c
Apr 20, 2018
- Make sure SSL_in_init() returns 0 at SSL_CB_HANDSHAKE_DONE · 4ce787b9
  Matt Caswell authored Apr 19, 2018
  4ce787b9
Apr 17, 2018
- Check the return from EVP_PKEY_get0_DH() · a6823657
  Matt Caswell authored Apr 17, 2018
  a6823657
- Make sure info callback knows about all handshake start events · 7f9f5f71
  Matt Caswell authored Apr 04, 2018
  7f9f5f71
- Call the info callback on all handshake done events · c2c1d8a4
  Matt Caswell authored Apr 04, 2018
  c2c1d8a4
- Ignore the status_request extension in a resumption handshake · ded4a83d
  Matt Caswell authored Apr 06, 2018
  ded4a83d
Apr 03, 2018
- Set error code on alloc failures · cdb10bae
  Rich Salz authored Apr 03, 2018
  cdb10bae
Apr 02, 2018
- Use the private RNG for data that is not public · 4cffafe9
  Kurt Roeckx authored Nov 03, 2017
  4cffafe9
Mar 30, 2018
- Revert commit 4a56d9a2 · 803cc8c7
  Matt Caswell authored Mar 30, 2018
  803cc8c7
Mar 28, 2018
- Rewrite the X509->alert mapping code · c6d38183
  Rich Salz authored Mar 28, 2018
  c6d38183
- Tolerate a Certificate using a non-supported group on server side · dcf8b01f
  Matt Caswell authored Mar 12, 2018
  dcf8b01f
Mar 27, 2018
- statem/statem_clnt.c: omit redundant check in tls_construct_client_hello. · dee0cc10
  Philippe Antoine authored Mar 26, 2018
  dee0cc10
- Assert that alpn_selected is NULL before we assign it · 9d5db9c9
  Matt Caswell authored Mar 21, 2018
  9d5db9c9
Mar 21, 2018
- Don't wait for dry at the end of a handshake · 424afe93
  Matt Caswell authored Jan 16, 2018
  424afe93
- Check for alerts while waiting for a dry event · 2e92af5e
  Matt Caswell authored Jan 16, 2018
  2e92af5e
- Fix stack-use-after-scope · 696de86f
  Peter Wu authored Mar 20, 2018
  696de86f
Mar 19, 2018
- Place ticket keys into secure memory · 4bfb96f2
  Todd Short authored Mar 19, 2018
  4bfb96f2
- Fix no-psk · c2b290c3
  Matt Caswell authored Mar 19, 2018
  c2b290c3
- Don't use a ssl specific DRBG anymore · 16cfc2c9
  Kurt Roeckx authored Mar 08, 2018
  16cfc2c9
- Fix a crash in SSLfatal due to invalid enc_write_ctx · d4ef4fbf
  Bernd Edlinger authored Mar 16, 2018
  d4ef4fbf
- Add an anti-replay mechanism · 66d7de16
  Matt Caswell authored Mar 16, 2018
  66d7de16
- Don't update the session cache when processing a client certificate in TLSv1.3 · f023ba2d
  Matt Caswell authored Mar 15, 2018
  f023ba2d
- Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3 · 32305f88
  Matt Caswell authored Mar 15, 2018
  32305f88
Mar 15, 2018
- Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key() · f929439f
  Matt Caswell authored Mar 15, 2018
  f929439f
- Add support for setting raw private HMAC keys · e32b52a2
  Matt Caswell authored Mar 05, 2018
  e32b52a2
- Only update the server session cache when the session is ready · 16ff1342
  Matt Caswell authored Mar 14, 2018
  16ff1342
Mar 14, 2018
- Only allow supported_versions in a TLSv1.3 ServerHello · 27e462f1
  Matt Caswell authored Mar 13, 2018
  27e462f1
Mar 12, 2018
- Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cb · 3fa2812f
  Benjamin Saunders authored Feb 25, 2018
  3fa2812f