Commits · 8a43a42a02947fbff84378a9110a03f3eefeb48f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Jan 30, 2017
- Support TLS 1.3 signature scheme names. · 8a43a42a
  Dr. Stephen Henson authored Jan 26, 2017
  8a43a42a
- Extend TLS 1.3 signature table. · edbfba1a
  Dr. Stephen Henson authored Jan 26, 2017
  edbfba1a
- Use shared signature algorithm list to find type. · 018031fa
  Dr. Stephen Henson authored Jan 26, 2017
  018031fa
- Add SSL_get_peer_signature_type_nid() function. · 42ef7aea
  Dr. Stephen Henson authored Jan 25, 2017
  42ef7aea
- Store peer signature type. · 5554facb
  Dr. Stephen Henson authored Jan 25, 2017
  5554facb
- More complete PSS support. · b2eb6998
  Dr. Stephen Henson authored Jan 25, 2017
  b2eb6998
- Use uint16_t for signature scheme. · 98c792d1
  Dr. Stephen Henson authored Jan 25, 2017
  98c792d1
- use RSA_PSS_SALTLEN_DIGEST constant · 968ae5b3
  Dr. Stephen Henson authored Jan 25, 2017
  968ae5b3
- Expand comment in tls_process_hello_req() · 1f04f23e
  Matt Caswell authored Jan 27, 2017
  1f04f23e
- Add a TODO around validating the ticket age · 1b8bacff
  Matt Caswell authored Jan 27, 2017
  1b8bacff
- Various style fixes following review feedback · 40f805ad
  Matt Caswell authored Jan 27, 2017
  40f805ad
- Remove unneccessary comments · 61c32649
  Matt Caswell authored Jan 27, 2017
  61c32649
- Use for loop in WPACKET_fill_lengths instead of do...while · fed60a78
  Matt Caswell authored Jan 27, 2017
  fed60a78
- Move the SSL3_CK_CIPHERSUITE_FLAG out of public header · 34f7245b
  Matt Caswell authored Jan 27, 2017
  34f7245b
- Add a test for the PSK kex modes extension · 3ae6b5f8
  Matt Caswell authored Jan 25, 2017
  3ae6b5f8
- If we have no suitable PSK kex modes then don't attempt to resume · 1a9f457c
  Matt Caswell authored Jan 25, 2017
  1a9f457c
- Fix <= TLS1.2 break · 1a3392c8
  Matt Caswell authored Jan 23, 2017
  1a3392c8
- Add a test for WPACKET_fill_lengths() · 34254342
  Matt Caswell authored Jan 23, 2017
  34254342
- Enable wpacket test on shared builds · e463cb39
  Matt Caswell authored Jan 23, 2017
  e463cb39
- Make calls to SSL_renegotiate() error out for TLSv1.3 · 2c0980d2
  Matt Caswell authored Jan 20, 2017
  2c0980d2
- Make the "ticket" function return codes clearer · ddf6ec00
  Matt Caswell authored Jan 20, 2017
  ddf6ec00
- Miscellaneous style tweaks based on feedback received · 1f5b44e9
  Matt Caswell authored Jan 20, 2017
  1f5b44e9
- Ensure the al variable is properly ininitialised in all code paths · 6df55cac
  Matt Caswell authored Jan 20, 2017
  6df55cac
- Ensure the age_add variable is properly initialised · 9ac6244b
  Matt Caswell authored Jan 20, 2017
  9ac6244b
- Re-enable resumption for TLS1.3 CT tests · 79495812
  Matt Caswell authored Jan 20, 2017
  79495812
- Add testing of TLSv1.3 resumption in test_tls13messages · a23bb15a
  Matt Caswell authored Jan 20, 2017
  a23bb15a
- Add a capability for TLSProxy to wait for a session before killing s_client · 1c361b4a
  Matt Caswell authored Jan 20, 2017
  1c361b4a
- Re-enable test_ssl_new resumption tests for TLSv1.3 · 93fa7e8d
  Matt Caswell authored Jan 19, 2017
  93fa7e8d
- Remove a TLS1.3 TODO that is now completed · dd1e75bd
  Matt Caswell authored Jan 19, 2017
  dd1e75bd
- Re-enable TLSv1.3 session resumption related tests in sslapitest · b05e4ce6
  Matt Caswell authored Jan 19, 2017
  b05e4ce6
- Update create_ssl_connection() to make sure its gets a session · 59db06f1
  Matt Caswell authored Jan 19, 2017
  59db06f1
- Re-enable ALPN resumption tests where we are using TLSv1.3 · 4b7ffd8b
  Matt Caswell authored Jan 19, 2017
  4b7ffd8b
- Always ensure that session->cipher is set · 534a43ff
  Matt Caswell authored Jan 19, 2017
  534a43ff
- Tweak a comment · 4086b42b
  Matt Caswell authored Jan 19, 2017
  4086b42b
- Use the correct session resumption mechanism · 08191294
  Matt Caswell authored Jan 19, 2017
  08191294
- Move session version consistency check · 128ae276
  Matt Caswell authored Jan 19, 2017
  128ae276
- Set the kex modes on the client too. · b3ad72ce
  Matt Caswell authored Jan 19, 2017
  b3ad72ce
- Implement server side of PSK extension construction · 0247086d
  Matt Caswell authored Jan 18, 2017
  0247086d
- Implement Server side of PSK extension parsing · 1053a6e2
  Matt Caswell authored Jan 18, 2017
  1053a6e2
- Make sure we also cleanse the finished key · 71c94d3c
  Matt Caswell authored Jan 18, 2017
  71c94d3c