Benjamin Kaduk c8feba723a Error out when forcing an unsupported TLS version ...

If the result of a SSL_{CTX_,}set_{min,max}_proto_version() call
leaves the min and max version identical, and support for that version
is compiled out of the library, return an error.  Such an object has
no hope of successfully completing a handshake, and this error may
be easier to decipher than the resulting handshake failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3422)

2017-07-05 12:58:34 -05:00

..

record

drop some no-longer-relevant TODO(TLS1.3) entries

2017-06-12 09:19:05 +01:00

statem

Fix potential crash in tls_construct_finished.

2017-07-03 16:34:33 +02:00

bio_ssl.c

Get pointer type right in BIO_ssl_shutdown()

2017-03-07 09:56:49 -05:00

build.info

Move ssl/t1_ext.c to ssl/statem/extensions_cust.c

2017-04-07 13:41:04 +01:00

d1_lib.c

Convert existing usage of assert() to ossl_assert() in libssl

2017-05-22 14:00:43 +01:00

d1_msg.c

Remove special case code for SCTP reneg handling

2017-04-25 11:13:39 +01:00

d1_srtp.c

…

methods.c

Drop support for OPENSSL_NO_TLS1_3_METHOD

2017-06-30 09:41:46 +01:00

packet_locl.h

TLS1.3 Padding

2017-05-02 09:44:43 +01:00

packet.c

Convert existing usage of assert() to ossl_assert() in libssl

2017-05-22 14:00:43 +01:00

pqueue.c

…

s3_cbc.c

Convert existing usage of assert() to ossl_assert() in libssl

2017-05-22 14:00:43 +01:00

s3_enc.c

Merge Nokia copyright notice into standard

2017-06-21 08:59:18 -04:00

s3_lib.c

Merge Nokia copyright notice into standard

2017-06-21 08:59:18 -04:00

s3_msg.c

Always flush the BIO when we send any alert

2017-06-06 22:39:41 +01:00

ssl_asn1.c

Merge Nokia copyright notice into standard

2017-06-21 08:59:18 -04:00

ssl_cert.c

Modify Sun copyright to follow OpenSSL style

2017-06-20 11:13:45 -04:00

ssl_ciph.c

PSK related tweaks based on review feedback

2017-06-21 14:45:36 +01:00

ssl_conf.c

Ignore -named_curve auto value to improve backwards compatibility

2017-06-08 21:28:36 +01:00

ssl_err.c

Add TLSv1.3 client side external PSK support

2017-06-21 14:45:35 +01:00

ssl_init.c

Convert existing usage of assert() to ossl_assert() in libssl

2017-05-22 14:00:43 +01:00

ssl_lib.c

Error out when forcing an unsupported TLS version

2017-07-05 12:58:34 -05:00

ssl_locl.h

Update SSL_export_keying_material() for TLSv1.3

2017-06-29 10:15:49 +01:00

ssl_mcnf.c

…

ssl_rsa.c

Try to be more consistent about the alerts we send

2017-05-19 08:47:08 +01:00

ssl_sess.c

ssl_session_dup() missing ext.alpn_session

2017-06-28 14:53:23 -05:00

ssl_stat.c

Merge Nokia copyright notice into standard

2017-06-21 08:59:18 -04:00

ssl_txt.c

Merge Nokia copyright notice into standard

2017-06-21 08:59:18 -04:00

ssl_utst.c

…

t1_enc.c

Fix tls1_generate_master_secret

2017-06-22 11:54:19 -04:00

t1_lib.c

Update SSL_export_keying_material() for TLSv1.3

2017-06-29 10:15:49 +01:00

t1_trce.c

Fix the names of ChaCha20-Poly1305 cipher suites in t1_trce.c.

2017-06-22 16:43:03 +01:00

tls13_enc.c

Fix TLSv1.3 exporter

2017-07-03 10:48:34 +01:00

tls_srp.c

Use memset to clear SRP_CTX instead of NULL and zero assignments

2017-06-08 20:59:24 +01:00