aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/statem
Commit message (Expand)AuthorAgeFilesLines
* TLS: Generate the server random before processing ClientHello extensionsDaniel Kubec4 days1-16/+19
* Cache decoded certs on client in CTX to avoid multiple asn1 parsingNeil Horman4 days1-13/+22
* Fix TLS 1.3 alert for missing key_shareAnuj Ramesh4 days1-4/+10
* ssl: handle session ID cache lock failureMounir IDRASSI4 days1-1/+1
* Don't dereference a NULL rbio in dtls1_read_failed()Matt Caswell5 days1-1/+5
* DTLS 1.3: only accept plaintext alerts once the hellos are doneMatt Caswell5 days3-9/+16
* TLS 1.3: Enforce the ticket lifetime when offering a ticketDaniel Kubec6 days1-3/+15
* PSK: Check for invalid server PSK ciphersViktor Dukhovni2026-10-091-0/+23
* Polish psk callback error path cleanupViktor Dukhovni2026-10-092-3/+9
* Test PHA verification results across session resumptionMounir IDRASSI2026-10-081-39/+35
* Keep pending client credentials out of cached sessionsMounir IDRASSI2026-10-081-30/+76
* dtls: honour SSL_OP_COOKIE_EXCHANGE for DTLS 1.3Jakub Zelenka2026-10-063-24/+41
* Omit key_share from a cookie-only HelloRetryRequestJakub Zelenka2026-10-061-4/+8
* Enforce the supported_groups/key_share pairing in TLS 1.3 ClientHellosPaul Grubbs2026-10-021-0/+17
* Bring recent comments into line with the STYLE.md comment rulesBob Beck2026-10-022-17/+10
* Removes redundant SSLv3 version checks and check against TLS1_VERSION_MAJOR i...Frederik Wedel-Heinen2026-10-022-2/+2
* dtls: avoid meaningless retry on EMSGSIZE in dtls1_do_write (#27905)vatsal-dp2026-10-021-3/+10
* DTLS 1.3: Retain the previous read epoch to recover from lost ACKsRyan Hooper2026-10-022-8/+60
* DTLS 1.3: Track sent message ACKs by byte range across retransmitsRyan Hooper2026-10-011-6/+71
* Bound DTLS 1.3 ACK bookkeeping and fit ACKs to recordsMounir IDRASSI2026-09-301-5/+35
* ssl/statem/statem_srvr.c: drop needless s->d1 NULL checkEugene Syromiatnikov2026-09-291-3/+1
* ssl/statem/statem_dtls.c: remove a dead write in dtls1_do_write()Eugene Syromiatnikov2026-09-291-1/+0
* Fix TLS 1.3 ticket age decoding when the offset wrapsMounir IDRASSI2026-09-291-2/+2
* dtls: reset init_off before retransmitting a messageRyan Hooper2026-09-291-0/+2
* Suppress unusable PSK offers and 0-RTT client-sideViktor Dukhovni2026-09-233-64/+167
* dtls: read the rest of a DTLS 1.3 ACK body from the current recordMounir IDRASSI2026-09-221-16/+21
* DTLS: preserve outstanding flights after incomplete ACKsMounir IDRASSI2026-09-214-4/+73
* Bound the DTLS 1.3 ACK body read by the record, not init_numMatt Caswell2026-09-181-3/+9
* DTLS: reject trailing bytes after the ACK record number vectorMounir IDRASSI2026-09-181-1/+1
* dtls: Don't check for NULL when it can't beNorbert Pocs2026-09-171-3/+1
* dtls: Add missing pqueue freeNorbert Pocs2026-09-171-1/+4
* statem: fail ClientHello construction on ECH GREASE failureJakub Zelenka2026-09-161-1/+1
* Fix double free in server client-certificate parse error pathMounir IDRASSI2026-09-161-0/+1
* Free WPACKETs on error pathsNorbert Pocs2026-09-151-1/+3
* Fix clang-format violation in tls_process_client_hello()Matt Caswell2026-09-071-1/+1
* Keep GREASE key shares valid after HelloRetryRequestF1xGOD2026-09-011-2/+8
* TLS 1.3: Apply the cap to the lifetime hint in the sessionDaniel Kubec2026-09-011-1/+1
* Allow SSL_set_retry_verify() on server sessionwfurt2026-08-272-51/+108
* PSK: Fix ALPN handlingDaniel Kubec2026-08-272-0/+40
* Make the TLS 1.3 resumption PSK check aware of DTLS 1.3Matt Caswell2026-08-251-1/+2
* DTLS 1.3 Fix no-dtls1_3 build configuration CI failuresRyan Hooper2026-08-251-0/+4
* Reject HelloRequest in TLS and DTLS 1.3Mounir IDRASSI2026-08-251-9/+20
* DTLS 1.3 SSL Listener does not currently buffer handshake messagesRyan Hooper2026-08-251-8/+8
* DTLS 1.3 Don't reset the handshake seq number after connection finishRyan Hooper2026-08-251-3/+10
* DTLS 1.3 Fix CI failuresRyan Hooper2026-08-252-4/+13
* DTLS 1.3 Limit DTLSv1_listen to DTLS1.2 and add SSL Listener for DTLSRyan Hooper2026-08-252-32/+98
* DTLS 1.3 Demo and Bug FixRyan Hooper2026-08-251-4/+8
* DTLS 1.3 Interop Issue with NSS using ChaCha20Ryan Hooper2026-08-251-2/+2
* Addressing how DTLS 1.3 handles Read Record Layer transitions.Ryan Hooper2026-08-253-3/+26
* DTLS 1.3 Enable Resumption TestsRyan Hooper2026-08-251-13/+21