Commits · 968ae5b33389526636b61851b085ccc745703303 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Jan 30, 2017
- use RSA_PSS_SALTLEN_DIGEST constant · 968ae5b3
  Dr. Stephen Henson authored Jan 25, 2017
  968ae5b3
- Expand comment in tls_process_hello_req() · 1f04f23e
  Matt Caswell authored Jan 27, 2017
  1f04f23e
- Add a TODO around validating the ticket age · 1b8bacff
  Matt Caswell authored Jan 27, 2017
  1b8bacff
- Various style fixes following review feedback · 40f805ad
  Matt Caswell authored Jan 27, 2017
  40f805ad
- Remove unneccessary comments · 61c32649
  Matt Caswell authored Jan 27, 2017
  61c32649
- Use for loop in WPACKET_fill_lengths instead of do...while · fed60a78
  Matt Caswell authored Jan 27, 2017
  fed60a78
- Move the SSL3_CK_CIPHERSUITE_FLAG out of public header · 34f7245b
  Matt Caswell authored Jan 27, 2017
  34f7245b
- Add a test for the PSK kex modes extension · 3ae6b5f8
  Matt Caswell authored Jan 25, 2017
  3ae6b5f8
- If we have no suitable PSK kex modes then don't attempt to resume · 1a9f457c
  Matt Caswell authored Jan 25, 2017
  1a9f457c
- Fix <= TLS1.2 break · 1a3392c8
  Matt Caswell authored Jan 23, 2017
  1a3392c8
- Add a test for WPACKET_fill_lengths() · 34254342
  Matt Caswell authored Jan 23, 2017
  34254342
- Enable wpacket test on shared builds · e463cb39
  Matt Caswell authored Jan 23, 2017
  e463cb39
- Make calls to SSL_renegotiate() error out for TLSv1.3 · 2c0980d2
  Matt Caswell authored Jan 20, 2017
  2c0980d2
- Make the "ticket" function return codes clearer · ddf6ec00
  Matt Caswell authored Jan 20, 2017
  ddf6ec00
- Miscellaneous style tweaks based on feedback received · 1f5b44e9
  Matt Caswell authored Jan 20, 2017
  1f5b44e9
- Ensure the al variable is properly ininitialised in all code paths · 6df55cac
  Matt Caswell authored Jan 20, 2017
  6df55cac
- Ensure the age_add variable is properly initialised · 9ac6244b
  Matt Caswell authored Jan 20, 2017
  9ac6244b
- Re-enable resumption for TLS1.3 CT tests · 79495812
  Matt Caswell authored Jan 20, 2017
  79495812
- Add testing of TLSv1.3 resumption in test_tls13messages · a23bb15a
  Matt Caswell authored Jan 20, 2017
  a23bb15a
- Add a capability for TLSProxy to wait for a session before killing s_client · 1c361b4a
  Matt Caswell authored Jan 20, 2017
  1c361b4a
- Re-enable test_ssl_new resumption tests for TLSv1.3 · 93fa7e8d
  Matt Caswell authored Jan 19, 2017
  93fa7e8d
- Remove a TLS1.3 TODO that is now completed · dd1e75bd
  Matt Caswell authored Jan 19, 2017
  dd1e75bd
- Re-enable TLSv1.3 session resumption related tests in sslapitest · b05e4ce6
  Matt Caswell authored Jan 19, 2017
  b05e4ce6
- Update create_ssl_connection() to make sure its gets a session · 59db06f1
  Matt Caswell authored Jan 19, 2017
  59db06f1
- Re-enable ALPN resumption tests where we are using TLSv1.3 · 4b7ffd8b
  Matt Caswell authored Jan 19, 2017
  4b7ffd8b
- Always ensure that session->cipher is set · 534a43ff
  Matt Caswell authored Jan 19, 2017
  534a43ff
- Tweak a comment · 4086b42b
  Matt Caswell authored Jan 19, 2017
  4086b42b
- Use the correct session resumption mechanism · 08191294
  Matt Caswell authored Jan 19, 2017
  08191294
- Move session version consistency check · 128ae276
  Matt Caswell authored Jan 19, 2017
  128ae276
- Set the kex modes on the client too. · b3ad72ce
  Matt Caswell authored Jan 19, 2017
  b3ad72ce
- Implement server side of PSK extension construction · 0247086d
  Matt Caswell authored Jan 18, 2017
  0247086d
- Implement Server side of PSK extension parsing · 1053a6e2
  Matt Caswell authored Jan 18, 2017
  1053a6e2
- Make sure we also cleanse the finished key · 71c94d3c
  Matt Caswell authored Jan 18, 2017
  71c94d3c
- Provide a key_share extension finaliser · f4bbb37c
  Matt Caswell authored Jan 18, 2017
  f4bbb37c
- Add support for client side parsing of the PSK extension · 4ff65f77
  Matt Caswell authored Jan 18, 2017
  4ff65f77
- Add support for the age_add field · fc24f0bf
  Matt Caswell authored Jan 17, 2017
  fc24f0bf
- Construct the client side psk extension for TLSv1.3 · ec15acb6
  Matt Caswell authored Jan 13, 2017
  ec15acb6
- Provide a new WPACKET function for filling in all the lengths · a2b7e655
  Matt Caswell authored Jan 13, 2017
  a2b7e655
- Update the s_client -sess_out feature to work for TLSv1.3 · be62b22b
  Matt Caswell authored Jan 13, 2017
  be62b22b
- Never send a session id in TLS1.3 · f05bcf0f
  Matt Caswell authored Jan 13, 2017
  f05bcf0f