Commits · f14afcaa4227df12bc11a426a60f41005a71e95f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Feb 17, 2017
- Updates following review feedback · f14afcaa
  Matt Caswell authored Feb 14, 2017
  f14afcaa
- Limit the number of KeyUpdate messages we can process · 82f992cb
  Matt Caswell authored Feb 13, 2017
  82f992cb
- Actually update the keys when a KeyUpdate message is sent or received · 57389a32
  Matt Caswell authored Feb 10, 2017
  57389a32
- If we receive an "update_requested" KeyUpdate then respond with a KeyUpdate · 5bf47933
  Matt Caswell authored Feb 09, 2017
  5bf47933
- Add the ability for a server to receive a KeyUpdate message · 8cdc8c51
  Matt Caswell authored Feb 09, 2017
  8cdc8c51
- Add the ability for s_client to send a KeyUpdate message · b07b2a1b
  Matt Caswell authored Feb 09, 2017
  b07b2a1b
- Add a SSL_get_key_update_type() function · 53d1d07d
  Matt Caswell authored Feb 09, 2017
  53d1d07d
- Add the ability for a client to send a KeyUpdate message · 9412b3ad
  Matt Caswell authored Feb 09, 2017
  9412b3ad
- Add the ability for a client to receive a KeyUpdate message · e1c3de44
  Matt Caswell authored Feb 09, 2017
  e1c3de44
- Add SSL_trace() support for KeyUpdate messages · 7d8c2dfa
  Matt Caswell authored Feb 08, 2017
  7d8c2dfa
- Add a capability to s_server to send KeyUpdate messages · 34df45b5
  Matt Caswell authored Feb 08, 2017
  34df45b5
- Provide a function to send a KeyUpdate message · 44c04a2e
  Matt Caswell authored Feb 08, 2017
  44c04a2e
- Fix typo in x86_64-mont5.pl CFI directives · 25b802bb
  David Benjamin authored Feb 16, 2017
  25b802bb
Feb 16, 2017
- Add a test of the X509_STORE / X509_LOOKUP API · bb0f7eca
  Richard Levitte authored Feb 16, 2017
  bb0f7eca
- test/README: clarify test number groups · 532e7b36
  Richard Levitte authored Feb 16, 2017
  532e7b36
- Fix a mem leak in ssl_test_ctx.c · d605fc3a
  Matt Caswell authored Feb 16, 2017
  d605fc3a
- Add client auth TLS 1.3 certificate selection tests · 86de658a
  Dr. Stephen Henson authored Feb 15, 2017
  86de658a
- Add ECDSA client certificates · b4cb7eb7
  Dr. Stephen Henson authored Feb 15, 2017
  b4cb7eb7
- Use tls_choose_sigalg for client auth. · ad4dd362
  Dr. Stephen Henson authored Feb 15, 2017
  ad4dd362
- Add client side support to tls_choose_sigalg. · 717a265a
  Dr. Stephen Henson authored Feb 15, 2017
  717a265a
- Change req_check_len error message, it also accepts 20 bytes, but states 'less... · 0cb8c9d8
  lrns authored Feb 16, 2017
  0cb8c9d8
- Use _WIN32 over WIN32 for preprocessor conditional · ac879ed6
  Benjamin Kaduk authored Dec 29, 2016
  ac879ed6
- Update CHANGES and NEWS for new release · d4da1bb5
  Matt Caswell authored Feb 16, 2017
  d4da1bb5
- Remove an OPENSSL_assert() and replace with a soft assert and check · 2c55b28a
  Matt Caswell authored Feb 03, 2017
  2c55b28a
- Don't change the state of the ETM flags until CCS processing · 28a31a0a
  Matt Caswell authored Feb 03, 2017
  28a31a0a
- Provide a test for the Encrypt-Then-Mac renegotiation crash · cc22cd54
  Matt Caswell authored Feb 03, 2017
  cc22cd54
- Fix warning · 7b3a4d61
  Dr. Stephen Henson authored Feb 16, 2017
  7b3a4d61
- Handle negative reply for NNTP STARTTLS in s_client · af7e05c7
  Robert Scheck authored Feb 14, 2017
  af7e05c7
- Properly zero cipher_data for ChaCha20-Poly1305 on cleanup · a8f95768
  Kazuki Yamaguchi authored Jan 26, 2017
  a8f95768
Feb 15, 2017
- crypto/armcap.c: short-circuit processor capability probe in iOS builds. · 8653e78f
  Andy Polyakov authored Feb 15, 2017
  8653e78f
- ARMv4 assembly pack: harmonize Thumb-ification of iOS build. · c93f06c1
  Andy Polyakov authored Feb 13, 2017
  c93f06c1
- Set current certificate to selected certificate. · 59088e43
  Dr. Stephen Henson authored Feb 15, 2017
  59088e43
- sha/asm/*-x86_64.pl: add CFI annotations. · 399976c7
  Andy Polyakov authored Feb 13, 2017
  399976c7
- Rework error handling of custom_ext_meth_add towards strong exception safety. · ed874fac
  Bernd Edlinger authored Feb 15, 2017
  ed874fac
- Fix merge issue · bb90d02a
  Matt Caswell authored Feb 15, 2017
  bb90d02a
- Skip curve check if sigalg doesn't specify a curve. · a34a9df0
  Dr. Stephen Henson authored Feb 14, 2017
  a34a9df0
- Use CERT_PKEY pointer instead of index · a497cf25
  Dr. Stephen Henson authored Feb 14, 2017
  a497cf25
- Simplify tls_construct_server_key_exchange · f695571e
  Dr. Stephen Henson authored Feb 13, 2017
  f695571e
- Use cert_index and sigalg · f365a3e2
  Dr. Stephen Henson authored Feb 13, 2017
  f365a3e2
- Add sigalg for earlier TLS versions · 0972bc5c
  Dr. Stephen Henson authored Feb 13, 2017
  0972bc5c