kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
00505ec2e1
boringssl/ssl
History
David Benjamin 00505ec2e1 Add EVP_md5_sha1. 
Use it in ssl3_cert_verify_hash so signing a pre-TLS-1.2 handshake hash can go
through RSA_sign and be intercepted via RSA_METHOD appropriately. This avoids
Windows needing to intercept sign_raw. (CAPI keys cannot provide sign_raw,
unless the input size happens to be that of NID_md5_sha1.)

Also use it in processing ServerKeyExchange to avoid special-casing RSA.

BUG=crbug.com/437023

Change-Id: Ia07433f468b75fdf7bfc8fa90c9751639b2478e6
Reviewed-on: https://boringssl-review.googlesource.com/2420
Reviewed-by: David Benjamin <davidben@google.com>
2014-12-02 20:45:07 +00:00
..
pqueue Test insertion of duplicates in pqueue_test. 2014-11-06 01:46:57 +00:00
test Fix standalone Windows build. 2014-12-02 20:27:57 +00:00
CMakeLists.txt Merge the get_ssl_method hooks between TLS and SSLv3. 2014-09-30 22:58:59 +00:00
d1_both.c Remove DTLSv1_listen. 2014-11-10 22:39:24 +00:00
d1_clnt.c Remove redundant s->server assignments in handshake. 2014-12-02 19:35:38 +00:00
d1_enc.c Remove KSSL_DEBUG. 2014-11-04 19:35:38 +00:00
d1_lib.c Remove a place where SSL_clear cleans up after client/server confusion. 2014-12-02 19:31:57 +00:00
d1_meth.c Merge client/server SSL_METHODs into the generic one. 2014-12-02 19:35:15 +00:00
d1_pkt.c Replace s->first_packet with a s->s3->have_version bit. 2014-12-02 19:35:27 +00:00
d1_srtp.c Add less dangerous versions of SRTP functions. 2014-10-27 21:58:09 +00:00
d1_srvr.c Remove redundant s->server assignments in handshake. 2014-12-02 19:35:38 +00:00
s3_both.c Add EVP_md5_sha1. 2014-12-02 20:45:07 +00:00
s3_cbc.c Add malloc failure tests. 2014-11-19 01:24:46 +00:00
s3_clnt.c Add EVP_md5_sha1. 2014-12-02 20:45:07 +00:00
s3_enc.c Fix a couple more malloc test crashes. 2014-11-19 22:17:50 +00:00
s3_lib.c Merge client/server SSL_METHODs into the generic one. 2014-12-02 19:35:15 +00:00
s3_meth.c Merge client/server SSL_METHODs into the generic one. 2014-12-02 19:35:15 +00:00
s3_pkt.c Replace s->first_packet with a s->s3->have_version bit. 2014-12-02 19:35:27 +00:00
s3_srvr.c Add EVP_md5_sha1. 2014-12-02 20:45:07 +00:00
s23_clnt.c Factor out the client max-version logic into a helper function. 2014-12-02 19:42:39 +00:00
s23_lib.c Remove default_timeout hook. 2014-08-18 17:25:20 +00:00
s23_meth.c Remove method swap in SSL_set_session. 2014-12-02 19:26:30 +00:00
s23_pkt.c
s23_srvr.c Left-pad a V2ClientHello's random, not right-pad. 2014-12-02 19:44:12 +00:00
ssl_algs.c Remove indirection in loading ciphers. 2014-09-15 21:06:10 +00:00
ssl_asn1.c Remove psk_identity_hint from SSL_SESSION. 2014-11-10 23:59:47 +00:00
ssl_cert.c Remove s->type from SSL. 2014-12-02 19:34:28 +00:00
ssl_ciph.c Remove client-side support for ServerKeyExchange in the RSA key exchange. 2014-11-10 23:00:09 +00:00
ssl_error.c Don't assign handshake_func in the handshake functions. 2014-12-02 19:30:49 +00:00
ssl_lib.c Replace s->first_packet with a s->s3->have_version bit. 2014-12-02 19:35:27 +00:00
ssl_locl.h Factor out the client max-version logic into a helper function. 2014-12-02 19:42:39 +00:00
ssl_rsa.c Clean up ssl_set_cert_masks. 2014-11-18 22:21:52 +00:00
ssl_sess.c Remove method swap in SSL_set_session. 2014-12-02 19:26:30 +00:00
ssl_stat.c Trim impossible state combinations. 2014-12-02 19:31:00 +00:00
ssl_test.c Remove psk_identity_hint from SSL_SESSION. 2014-11-10 23:59:47 +00:00
ssl_txt.c Remove some remnants of SSLv2. 2014-11-17 20:27:13 +00:00
t1_enc.c Add malloc failure tests. 2014-11-19 01:24:46 +00:00
t1_lib.c Remove SSL_set_session_secret_cb (EAP-FAST) 2014-11-21 21:51:10 +00:00
t1_reneg.c