openssl/ssl
Matt Caswell 247b8e5252 Ensure that the key share group is allowed for our protocol version
We should never send or accept a key share group that is not in the
supported groups list or a group that isn't suitable for use in TLSv1.3

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/19317)
2022-10-12 15:55:58 +01:00
..
quic QUIC Send Stream Management 2022-10-05 16:15:06 +02:00
record Fix a return value in tls_default_read_n 2022-10-12 15:53:31 +01:00
statem Ensure that the key share group is allowed for our protocol version 2022-10-12 15:55:58 +01:00
bio_ssl.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
build.info time: move OSSL_TIME to libcrypto 2022-09-13 21:13:22 +10:00
d1_lib.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
d1_msg.c SSL object refactoring using SSL_CONNECTION object 2022-07-28 10:04:28 +01:00
d1_srtp.c SSL object refactoring using SSL_CONNECTION object 2022-07-28 10:04:28 +01:00
event_queue.c Make OSSL_TIME a structure 2022-08-12 15:44:01 +01:00
methods.c
pqueue.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
priority_queue.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
s3_enc.c Remove enc_write_state 2022-10-12 15:53:31 +01:00
s3_lib.c Partial revert and reimplement "Enable brainpool curves for TLS1.3" 2022-10-07 10:01:48 +01:00
s3_msg.c Convert the write record layer to supply proper return values 2022-09-23 14:54:49 +01:00
ssl_asn1.c ssl: modify libssl so that it uses OSSL_TIME 2022-09-13 21:13:22 +10:00
ssl_cert_table.h
ssl_cert.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
ssl_ciph.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
ssl_conf.c SSL object refactoring using SSL_CONNECTION object 2022-07-28 10:04:28 +01:00
ssl_err_legacy.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_err.c Make the record layer directly aware of EtM 2022-08-18 16:38:12 +01:00
ssl_init.c err: get rid of err_free_strings_int() 2022-05-10 09:47:54 +02:00
ssl_lib.c Use the configured max_send_fragment value in the write record layer 2022-10-12 15:53:31 +01:00
ssl_local.h Convert the TLSv1.3 crypto code to the new write record layer 2022-10-12 15:53:31 +01:00
ssl_mcnf.c
ssl_rsa_legacy.c
ssl_rsa.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
ssl_sess.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
ssl_stat.c SSL object refactoring using SSL_CONNECTION object 2022-07-28 10:04:28 +01:00
ssl_txt.c ssl: modify libssl so that it uses OSSL_TIME 2022-09-13 21:13:22 +10:00
ssl_utst.c
sslerr.h Transfer the functionality from ssl3_read_n to the new record layer 2022-08-18 16:38:12 +01:00
t1_enc.c Remove enc_write_state 2022-10-12 15:53:31 +01:00
t1_lib.c Reimplement brainpool TLSv1.3 support group support 2022-10-07 10:01:48 +01:00
t1_trce.c Reimplement brainpool TLSv1.3 support group support 2022-10-07 10:01:48 +01:00
tls13_enc.c Remove enc_write_state 2022-10-12 15:53:31 +01:00
tls_depr.c SSL object refactoring using SSL_CONNECTION object 2022-07-28 10:04:28 +01:00
tls_srp.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00