openssl/ssl
Todd Short 10ed1b7239 Reorder extensions to put SigAlgs last
Force non-empty padding extension.
When enabled, force the padding extension to be at least 1 byte long.
WebSphere application server cannot handle having an empty
extension (e.g. EMS/EtM) as the last extension in a client hello.
This moves the SigAlgs extension last for TLSv1.2 to avoid this
issue.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3921)
2017-08-18 09:52:17 -04:00
..
record Add a DRBG to each SSL object 2017-08-03 10:24:03 -04:00
statem Reorder extensions to put SigAlgs last 2017-08-18 09:52:17 -04:00
bio_ssl.c
build.info Move ssl/t1_ext.c to ssl/statem/extensions_cust.c 2017-04-07 13:41:04 +01:00
d1_lib.c Convert existing usage of assert() to ossl_assert() in libssl 2017-05-22 14:00:43 +01:00
d1_msg.c Remove special case code for SCTP reneg handling 2017-04-25 11:13:39 +01:00
d1_srtp.c
methods.c Drop support for OPENSSL_NO_TLS1_3_METHOD 2017-06-30 09:41:46 +01:00
packet_locl.h TLS1.3 Padding 2017-05-02 09:44:43 +01:00
packet.c Move ossl_assert 2017-08-03 10:48:00 +01:00
pqueue.c Update copyright header 2017-07-30 17:42:00 -04:00
s3_cbc.c Move ossl_assert 2017-08-03 10:48:00 +01:00
s3_enc.c Move ossl_assert 2017-08-03 10:48:00 +01:00
s3_lib.c Add missing include of cryptlib.h 2017-08-06 17:06:19 -04:00
s3_msg.c Always flush the BIO when we send any alert 2017-06-06 22:39:41 +01:00
ssl_asn1.c Send and receive the ticket_nonce field in a NewSessionTicket 2017-07-07 15:02:09 +01:00
ssl_cert_table.h Move certificate table to header file so it can be tested. 2017-07-13 12:38:42 +01:00
ssl_cert.c Move certificate table to header file so it can be tested. 2017-07-13 12:38:42 +01:00
ssl_ciph.c Move ossl_assert 2017-08-03 10:48:00 +01:00
ssl_conf.c Do not allow non-dhe kex_modes by default 2017-07-07 16:08:05 +01:00
ssl_err.c make errors 2017-07-13 12:38:42 +01:00
ssl_init.c Convert existing usage of assert() to ossl_assert() in libssl 2017-05-22 14:00:43 +01:00
ssl_lib.c Add SSL_get_pending_cipher() 2017-08-15 10:52:21 -05:00
ssl_locl.h Reorder extensions to put SigAlgs last 2017-08-18 09:52:17 -04:00
ssl_mcnf.c
ssl_rsa.c Use certificate tables instead of ssl_cert_type 2017-07-13 12:38:42 +01:00
ssl_sess.c Add an SSL_SESSION_dup() function 2017-08-09 13:37:06 +10:00
ssl_stat.c Fix errors in SSL_state_string_long 2017-07-31 08:55:37 -04:00
ssl_txt.c Merge Nokia copyright notice into standard 2017-06-21 08:59:18 -04:00
ssl_utst.c
t1_enc.c Fix tls1_generate_master_secret 2017-06-22 11:54:19 -04:00
t1_lib.c Use cert tables in ssl_set_sig_mask 2017-07-13 12:38:42 +01:00
t1_trce.c Fix the names of older ciphers. 2017-07-31 09:11:18 -04:00
tls13_enc.c Fix TLSv1.3 exporter secret 2017-07-17 13:42:52 +01:00
tls_srp.c Add a DRBG to each SSL object 2017-08-03 10:24:03 -04:00