openssl/ssl
Viktor Dukhovni 6b01bed206 Support disabling any or all TLS or DTLS versions
Some users want to disable SSL 3.0/TLS 1.0/TLS 1.1, and enable just
TLS 1.2.  In the future they might want to disable TLS 1.2 and
enable just TLS 1.3, ...

This commit makes it possible to disable any or all of the TLS or
DTLS protocols.  It also considerably simplifies the SSL/TLS tests,
by auto-generating the min/max version tests based on the set of
supported protocols (425 explicitly written out tests got replaced
by two loops that generate all 425 tests if all protocols are
enabled, fewer otherwise).

Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-01-19 09:57:15 -05:00
..
record Adapt all EVP_CIPHER_CTX users for it becoming opaque 2016-01-12 13:52:22 +01:00
statem Support disabling any or all TLS or DTLS versions 2016-01-19 09:57:15 -05:00
bio_ssl.c
d1_lib.c Regenerate SSL record/statem error strings 2016-01-10 20:18:05 -05:00
d1_msg.c Move in_handshake into STATEM 2015-10-30 08:39:47 +00:00
d1_srtp.c
install-ssl.com
Makefile.in Remove some old makefile targets 2016-01-17 14:47:32 -05:00
methods.c Support disabling any or all TLS or DTLS versions 2016-01-19 09:57:15 -05:00
packet_locl.h Instead of a local hack, implement SIZE_MAX in numbers.h if it's missing 2016-01-02 21:11:02 +01:00
s3_cbc.c Cleanup: fix all sources that used EVP_MD_CTX_(create|init|destroy) 2015-12-07 17:40:20 +01:00
s3_enc.c Adapt all EVP_CIPHER_CTX users for it becoming opaque 2016-01-12 13:52:22 +01:00
s3_lib.c Fix GOST2012-NULL-GOST12 2016-01-19 11:37:17 +00:00
s3_msg.c Remove redundant code 2015-10-30 08:38:18 +00:00
ssl_algs.c Load module in SSL_library_init 2015-12-22 15:14:14 +00:00
ssl_asn1.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00
ssl_cert.c EDH >= 1024 bits even at security level 0 2016-01-14 11:05:24 -05:00
ssl_ciph.c GH528: "cipher -v" output is confusing. 2016-01-11 18:54:49 -05:00
ssl_conf.c Allow disabling the min and max version 2016-01-10 13:04:55 +01:00
ssl_err2.c
ssl_err.c Regenerate SSL record/statem error strings 2016-01-10 20:18:05 -05:00
ssl_lib.c Better invalid SNI name error handling 2016-01-16 17:15:42 -05:00
ssl_locl.h RT4232: Extra space in help message. 2016-01-14 11:32:18 -05:00
ssl_mcnf.c Correct missing prototype 2015-12-30 14:57:16 +01:00
ssl_rsa.c Use X509_get0_pubkey where appropriate 2015-12-31 18:44:46 +00:00
ssl_sess.c Add lh_doall_arg inlining 2016-01-11 17:50:27 +00:00
ssl_stat.c Change SSL_state_string return strings to start with a T 2015-10-30 08:39:47 +00:00
ssl_txt.c
ssl_utst.c
ssl-lib.com
t1_enc.c use TLS PRF 2016-01-19 14:00:32 +00:00
t1_ext.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00
t1_lib.c Adapt all EVP_CIPHER_CTX users for it becoming opaque 2016-01-12 13:52:22 +01:00
t1_reneg.c
t1_trce.c Remove fixed DH ciphersuites. 2015-12-19 16:14:51 +00:00
tls_srp.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00