Matt Caswell ae4765396f Add a ciphersuite config sanity check for servers ...

Ensure that there are ciphersuites enabled for the maximum supported
version we will accept in a ClientHello.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3334)

2017-05-04 11:49:19 +01:00

..

record

Fix some -Wshadow warnings

2017-03-14 11:44:31 -05:00

statem

Add a ciphersuite config sanity check for servers

2017-05-04 11:49:19 +01:00

bio_ssl.c

Get pointer type right in BIO_ssl_shutdown()

2017-03-07 09:56:49 -05:00

build.info

Move client parsing of ServerHello extensions into new framework

2016-12-08 17:18:25 +00:00

d1_lib.c

Code health: Stop using timeb.h / ftime() (VMS only)

2017-02-28 15:32:01 +01:00

d1_msg.c

Remove some obsolete/obscure internal define switches:

2017-03-01 10:44:49 +01:00

d1_srtp.c

Move client parsing of ServerHello extensions into new framework

2016-12-08 17:18:25 +00:00

methods.c

Add the SSL_METHOD for TLSv1.3 and all other base changes required

2016-11-02 13:08:21 +00:00

packet_locl.h

Miscellaneous style tweaks based on feedback received

2017-01-30 10:18:23 +00:00

packet.c

Use for loop in WPACKET_fill_lengths instead of do...while

2017-01-30 10:18:24 +00:00

pqueue.c

Fix a missed size_t variable declaration

2016-11-04 12:09:46 +00:00

s3_cbc.c

Clean up references to FIPS

2017-02-28 15:26:25 +01:00

s3_enc.c

Use the new TLSv1.3 certificate_required alert where appropriate

2017-03-10 15:33:31 +00:00

s3_lib.c

Remove some commented out code in libssl

2017-02-28 16:02:11 +00:00

s3_msg.c

Provide functions to write early data

2017-03-02 17:44:14 +00:00

ssl_asn1.c

Only accept early_data if the negotiated ALPN is the same

2017-03-02 17:44:15 +00:00

ssl_cert.c

Tidy up certificate type handling.

2017-02-24 01:23:38 +00:00

ssl_ciph.c

Remove some obsolete/obscure internal define switches:

2017-03-01 10:44:49 +01:00

ssl_conf.c

Test mac-then-encrypt

2016-11-28 12:23:36 +01:00

ssl_err.c

Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundary

2017-03-07 16:41:25 +00:00

ssl_init.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_lib.c

Provide a function to test whether we have unread records pending

2017-03-07 16:41:25 +00:00

ssl_locl.h

Add a ciphersuite config sanity check for servers

2017-05-04 11:49:19 +01:00

ssl_mcnf.c

Fix misc size_t issues causing Windows warnings in 64 bit

2016-11-04 12:09:46 +00:00

ssl_rsa.c

Use the callbacks from the SSL object instead of the SSL_CTX object

2017-03-10 22:31:50 +01:00

ssl_sess.c

this change will prevent undefined behavior when src and dst are equal (memcpy), effectively allowing setting length only in both functions.

2017-03-08 09:42:29 -05:00

ssl_stat.c

Add missing debug strings.

2016-09-07 16:08:38 -04:00

ssl_txt.c

Move extension data into sub-structs

2017-01-09 22:26:47 -05:00

ssl_utst.c

Remove heartbeat support

2016-11-13 16:24:02 -05:00

t1_enc.c

Use the new TLSv1.3 certificate_required alert where appropriate

2017-03-10 15:33:31 +00:00

t1_ext.c

Rework error handling of custom_ext_meth_add towards strong exception safety.

2017-02-15 08:37:52 -05:00

t1_lib.c

Add a ciphersuite config sanity check for servers

2017-05-04 11:49:19 +01:00

t1_trce.c

Construct the early_data extension

2017-03-02 17:44:14 +00:00

tls13_enc.c

Silence some more clang warnings

2017-03-03 00:05:57 +00:00

tls_srp.c

Indent ssl/

2016-08-18 14:02:29 +02:00