aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
Commit message (Expand)AuthorAgeFilesLines
* Fix removal of sole key exchange group in tupleViktor Dukhovni2026-07-201-3/+29
* Improve TLS handling of EC point formatsViktor Dukhovni2026-07-101-67/+7
* Removes some stale SSLv3 support around the code and updated documentation to...Frederik Wedel-Heinen2026-06-301-12/+2
* Don't attempt to check the security level on what signed our own certificate.Bob Beck2026-06-301-25/+6
* SSL_OP_SECOP is dead codeBob Beck2026-06-301-10/+7
* Remove aliases for IANA-GOST2012-GOST8912-GOST8912Kirill Ermoshin2026-06-241-6/+4
* Fix typo of 512 gost sigalg name from bcff020Kirill Ermoshin2026-06-241-2/+2
* Fix off-by-one in "groups list" parserViktor Dukhovni2026-04-161-8/+32
* Precompute some helper objects in each SSL_CTXViktor Dukhovni2026-04-131-43/+22
* Copyright year updatesopenssl-machine2026-03-101-1/+1
* Restrict the number of supported groups/sig algsMatt Caswell2026-03-061-3/+16
* Improved reporting of shared and peer sigalgsDaniel Kubec2026-02-251-16/+69
* Simplify and expand default group listViktor Dukhovni2026-02-251-7/+1
* Add keyshare floatingViktor Dukhovni2026-02-251-9/+73
* Fix group tuple handling in DEFAULT expansionViktor Dukhovni2026-02-251-81/+88
* Fix const qualifiers from strchr where discardedRudi Heitbaum2026-02-251-1/+1
* Support for RFC8998 curveSM2 + hybridViktor Dukhovni2026-02-211-2/+12
* Fix cross-version compatibility in RFC7919 changesViktor Dukhovni2026-02-091-0/+9
* Advertise FFDHE groups also with TLS 1.2-onlyViktor Dukhovni2026-02-051-10/+8
* Implement first step of RFC7919 in TLS 1.2 serverJoachim Vandersmissen2026-02-051-0/+40
* Support FFDHE groups in tls1_shared_groupJoachim Vandersmissen2026-02-051-8/+17
* Rename SSL3 error codes to TLS equivalentsAndrew Dinh2025-12-231-2/+2
* 4.0-POST-CLANG-FORMAT-WEBKIT4.0-POST-CLANG-FORMAT-WEBKITBob Beck2025-12-091-531/+503
* Do not make key share choice in tls1_set_groups()Clemens Lang2025-11-281-1/+7
* Use the actual NID for provided signature algorithmsMatt Caswell2025-11-041-3/+11
* Rename SSL_CERT_LOOKUP.nid to pkey_nidRichard Levitte2025-10-301-2/+2
* Fix NID bug in SSL_CERT_LOOKUP array constructionRichard Levitte2025-10-301-6/+12
* Add util/codespell-check.sh and run itBob Beck2025-09-261-4/+4
* set SSLfatal if tls1_set_shared_sigalgs has a malloc failureNeil Horman2025-08-151-1/+3
* ssl: use array memory (re)allocation routinesEugene Syromiatnikov2025-08-081-32/+35
* ssl: drop multiplication by sizeof(char) in allocation size calculationsEugene Syromiatnikov2025-08-081-4/+5
* Introduce SSL_OP_SERVER_PREFERENCE to replace SSL_OP_CIPHER_SERVER_PREFERENCE...Michael Baentsch2025-07-091-2/+2
* libssl: Silence warnings on Win64 buildsTomas Mraz2025-07-021-13/+13
* ssl/t1_lib.c: Free gix if sk_TLS_GROUP_IX_push() fails to avoid memory leakJiashengJiang2025-05-191-1/+3
* Add SSL_CTX_set_ec_point_formats() and SSL_set_ec_point_formats()Tim Perry2025-04-141-4/+11
* Fix sigalg corner casesViktor Dukhovni2025-03-311-55/+79
* Fix goto label indents to match styleViktor Dukhovni2025-03-281-1/+1
* Fix the use of CCM ciphersuites with QUIC TLS APIMatt Caswell2025-03-201-1/+1
* Copyright year updatesopenssl-machine2025-03-121-1/+1
* Make group names case-insensitiveViktor Dukhovni2025-03-091-3/+3
* Refactor sigalg handlingViktor Dukhovni2025-03-091-136/+344
* tls1_set_groups_list(): Update raised errorsTomas Mraz2025-02-251-3/+3
* No valid groups is not an errorTomas Mraz2025-02-251-9/+10
* Have the same default groups list for QUIC and TLSTomas Mraz2025-02-251-5/+1
* Add hybrid ML-KEM based groups to default TLS groupsViktor Dukhovni2025-02-251-73/+12
* Case-insensitive sigalgsViktor Dukhovni2025-02-181-11/+12
* libssl: Move SSL object unwrapping macros to separate headerHugo Landau2025-02-171-0/+1
* Address non-FP coverity nitsViktor Dukhovni2025-02-161-4/+3
* Refactor squeezing out empty tuplesViktor Dukhovni2025-02-141-10/+11
* libssl: Accept any key management which implements the groupTomas Mraz2025-02-141-18/+3