openssl/ssl
Matt Caswell ebda646db6 Modify is_tls13_capable() to take account of the servername cb
A servername cb may change the available certificates, so if we have one
set then we cannot rely on the configured certificates to determine if we
are capable of negotiating TLSv1.3 or not.

Fixes #13291

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13304)
2020-12-09 14:46:16 +00:00
..
record tag unused function arguments as ossl_unused 2020-12-03 11:22:06 +10:00
statem Modify is_tls13_capable() to take account of the servername cb 2020-12-09 14:46:16 +00:00
bio_ssl.c Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() call 2020-11-11 12:12:11 +01:00
build.info Modify the ERR init functions to use the internal ERR string loaders 2020-11-24 15:21:44 +01:00
d1_lib.c Update copyright year 2020-11-26 14:18:57 +00:00
d1_msg.c Update copyright year 2020-11-26 14:18:57 +00:00
d1_srtp.c Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() call 2020-11-11 12:12:11 +01:00
ktls.c Move KTLS inline functions only used by libssl into ssl/ktls.c. 2020-08-31 09:34:19 +01:00
methods.c Update some inclusions of <openssl/macros.h> 2019-11-07 11:37:25 +01:00
pqueue.c Update copyright year 2020-11-26 14:18:57 +00:00
s3_cbc.c TLS fixes for CBC mode and no-deprecated 2020-09-09 17:59:08 +10:00
s3_enc.c SSL: refactor all SSLfatal() calls 2020-11-11 12:12:23 +01:00
s3_lib.c Return sensible values for some SSL ctrls 2020-11-18 14:14:52 +00:00
s3_msg.c Update copyright year 2020-11-26 14:18:57 +00:00
ssl_asn1.c Update copyright year 2020-11-26 14:18:57 +00:00
ssl_cert_table.h Following the license change, modify the boilerplates in ssl/ 2018-12-06 14:20:59 +01:00
ssl_cert.c Only disabled what we need to in a no-dh build 2020-11-18 14:14:52 +00:00
ssl_ciph.c Move some libssl global variables into SSL_CTX 2020-11-23 09:31:23 +00:00
ssl_conf.c Implement a replacement for SSL_set_tmp_dh() 2020-11-18 14:14:52 +00:00
ssl_err_legacy.c Modify the ERR init functions to use the internal ERR string loaders 2020-11-24 15:21:44 +01:00
ssl_err.c ERR: Rebuild all generated error headers and source files 2020-11-24 15:22:33 +01:00
ssl_init.c Modify the ERR init functions to use the internal ERR string loaders 2020-11-24 15:21:44 +01:00
ssl_lib.c Move some libssl global variables into SSL_CTX 2020-11-23 09:31:23 +00:00
ssl_local.h TLS: Use EVP_PKEY_get_group_name() to get the group name 2020-12-08 20:13:54 +01:00
ssl_mcnf.c SSL: refactor all SSLfatal() calls 2020-11-11 12:12:23 +01:00
ssl_rsa_legacy.c Deprecate RSA harder 2020-11-18 23:38:34 +01:00
ssl_rsa.c Deprecate RSA harder 2020-11-18 23:38:34 +01:00
ssl_sess.c SSL: refactor all SSLfatal() calls 2020-11-11 12:12:23 +01:00
ssl_stat.c Reorganize local header files 2019-09-28 20:26:35 +02:00
ssl_txt.c Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() call 2020-11-11 12:12:11 +01:00
ssl_utst.c Reorganize local header files 2019-09-28 20:26:35 +02:00
sslerr.h Update copyright year 2020-11-26 14:18:57 +00:00
t1_enc.c SSL: refactor all SSLfatal() calls 2020-11-11 12:12:23 +01:00
t1_lib.c TLS: Use EVP_PKEY_get_group_name() to get the group name 2020-12-08 20:13:54 +01:00
t1_trce.c t1_trce: Fix remaining places where the 24 bit shift overflow happens 2020-05-20 17:31:56 +02:00
tls13_enc.c SSL: refactor all SSLfatal() calls 2020-11-11 12:12:23 +01:00
tls_depr.c Implement a replacement for SSL_set_tmp_dh() 2020-11-18 14:14:52 +00:00
tls_srp.c SSL: refactor all SSLfatal() calls 2020-11-11 12:12:23 +01:00