openssl/ssl
Emilia Kasper de2c7504eb Always require an advertised NewSessionTicket message.
The server must send a NewSessionTicket message if it advertised one
in the ServerHello, so make a missing ticket message an alert
in the client.

An equivalent change was independently made in BoringSSL, see commit
6444287806d801b9a45baf1f6f02a0e3a16e144c.

Reviewed-by: Matt Caswell <matt@openssl.org>
2014-11-20 14:57:15 +01:00
..
.cvsignore
bio_ssl.c
d1_both.c RT3301: Discard too-long heartbeat requests 2014-09-08 11:22:35 -04:00
d1_clnt.c Remove ssl3_check_finished. 2014-11-20 14:57:15 +01:00
d1_enc.c
d1_lib.c Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
d1_meth.c
d1_pkt.c RT3023: Redundant logical expressions 2014-08-15 10:45:00 -04:00
d1_srtp.c Fix for SRTP Memory Leak 2014-10-15 08:56:16 -04:00
d1_srvr.c
dtls1.h Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
heartbeat_test.c
install-ssl.com
kssl_lcl.h
kssl.c RT2848: Remove extra NULL check 2014-08-19 12:43:58 -04:00
kssl.h
Makefile RT3067: simplify patch 2014-09-24 15:35:02 +02:00
s2_clnt.c RT2842: Remove spurious close-comment marker. 2014-09-08 10:50:08 -04:00
s2_enc.c
s2_lib.c Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
s2_meth.c
s2_pkt.c
s2_srvr.c
s3_both.c
s3_cbc.c RT3066: rewrite RSA padding checks to be slightly more constant time. 2014-09-24 12:45:42 +02:00
s3_clnt.c Always require an advertised NewSessionTicket message. 2014-11-20 14:57:15 +01:00
s3_enc.c Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
s3_lib.c Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
s3_meth.c New option no-ssl3-method which removes SSLv3_*method 2014-11-19 18:11:37 +00:00
s3_pkt.c RT 3060: amend patch 2014-08-22 15:35:42 +02:00
s3_srvr.c New option no-ssl3-method which removes SSLv3_*method 2014-11-19 18:11:37 +00:00
s23_clnt.c Fix no-ssl3 configuration option 2014-10-15 08:56:16 -04:00
s23_lib.c
s23_meth.c
s23_pkt.c
s23_srvr.c Keep old method in case of an unsupported protocol 2014-10-21 20:45:15 +02:00
srtp.h Fix SRTP compile issues for windows 2014-10-15 08:56:16 -04:00
ssl2.h
ssl3.h Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
ssl23.h
ssl_algs.c
ssl_asn1.c
ssl_cert.c Custom extension revision. 2014-08-28 17:06:52 +01:00
ssl_ciph.c RT1815: More const'ness improvements 2014-08-18 11:49:16 -04:00
ssl_conf.c
ssl_err2.c
ssl_err.c Process signature algorithms before deciding on certificate. 2014-11-19 14:49:12 +00:00
ssl_lib.c Copy negotiated parameters in SSL_set_SSL_CTX. 2014-10-24 13:46:37 +01:00
ssl_locl.h Remove ssl3_check_finished. 2014-11-20 14:57:15 +01:00
ssl_rsa.c Rename some callbacks, fix alignment. 2014-08-28 17:06:53 +01:00
ssl_sess.c Tighten session ticket handling 2014-10-28 17:35:59 +01:00
ssl_stat.c
ssl_task.c
ssl_txt.c
ssl_utst.c
ssl-lib.com
ssl.h New option no-ssl3-method which removes SSLv3_*method 2014-11-19 18:11:37 +00:00
ssltest.c New option no-ssl3-method which removes SSLv3_*method 2014-11-19 18:11:37 +00:00
t1_clnt.c
t1_enc.c Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
t1_ext.c Rename some callbacks, fix alignment. 2014-08-28 17:06:53 +01:00
t1_lib.c Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext. 2014-11-20 14:57:15 +01:00
t1_meth.c
t1_reneg.c
t1_srvr.c
t1_trce.c
tls1.h Support TLS_FALLBACK_SCSV. 2014-10-15 04:03:28 +02:00
tls_srp.c Check SRP parameters early. 2014-08-06 20:36:41 +01:00