boringssl/ssl
David Benjamin 5b8f104ee8 Revise hash management for reading the Finished message.
Upstream originally sampled the Finished message's hash at ChangeCipherSpec,
but our patches to add messages between the two complicated this. Move DTLS to
this path, but use the new SSL_GET_MESSAGE_DONT_HASH_MESSAGE flag to avoid
special-casing message types in ssl3_get_message.

Change-Id: I9c8ddd9cc500c94dff2ec2f696f89d50ab01b3ad
Reviewed-on: https://boringssl-review.googlesource.com/1632
Reviewed-by: Adam Langley <agl@google.com>
2014-08-27 01:55:17 +00:00
..
pqueue Convert all zero-argument functions to '(void)' 2014-08-21 01:06:07 +00:00
test Add a test to ensure False Start occurs. 2014-08-26 17:41:53 +00:00
CMakeLists.txt Add visibility rules. 2014-07-31 22:03:11 +00:00
d1_both.c Introduce a hash_message parameter to ssl_get_message. 2014-08-27 01:54:50 +00:00
d1_clnt.c Introduce a hash_message parameter to ssl_get_message. 2014-08-27 01:54:50 +00:00
d1_enc.c Remove crypto/comp and SSL_COMP support code. 2014-06-24 17:22:06 +00:00
d1_lib.c Remove SSL_OP_CISCO_ANYCONNECT. 2014-08-18 17:57:01 +00:00
d1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
d1_pkt.c Remove SSL_OP_CISCO_ANYCONNECT. 2014-08-18 17:57:01 +00:00
d1_srtp.c Fix typo in DTLS-SRTP extension parsing. 2014-07-18 00:52:51 +00:00
d1_srvr.c Rename some message functions for consistency. 2014-08-26 21:09:40 +00:00
s3_both.c Revise hash management for reading the Finished message. 2014-08-27 01:55:17 +00:00
s3_cbc.c Remove OPENSSL_NO_SHA512 2014-08-04 20:13:54 +00:00
s3_clnt.c Introduce a hash_message parameter to ssl_get_message. 2014-08-27 01:54:50 +00:00
s3_enc.c Mark some more globals as const. 2014-08-20 02:13:09 +00:00
s3_lib.c Remove DSA-based cipher suites and client auth. 2014-08-20 02:14:40 +00:00
s3_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s3_pkt.c Revise hash management for reading the Finished message. 2014-08-27 01:55:17 +00:00
s3_srvr.c Compute the Channel ID hash after ssl_get_message. 2014-08-27 01:55:06 +00:00
s23_clnt.c Remove Suite B mode. 2014-08-14 22:00:16 +00:00
s23_lib.c Remove default_timeout hook. 2014-08-18 17:25:20 +00:00
s23_meth.c Remove OPENSSL_NO_TLS{,1} 2014-08-04 19:20:19 +00:00
s23_pkt.c Inital import. 2014-06-20 13:17:32 -07:00
s23_srvr.c Remove Suite B mode. 2014-08-14 22:00:16 +00:00
ssl_algs.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_asn1.c Implement client side of TLS signed certificate stamps extension. 2014-08-21 16:21:46 +00:00
ssl_cert.c Remove some unused state and code. 2014-08-20 19:04:32 +00:00
ssl_ciph.c Prefer AES-GCM when hardware support is available. 2014-08-20 20:53:31 +00:00
ssl_error.c Rename some message functions for consistency. 2014-08-26 21:09:40 +00:00
ssl_lib.c Move a variable declaration to function start. 2014-08-26 22:07:33 +00:00
ssl_locl.h Introduce a hash_message parameter to ssl_get_message. 2014-08-27 01:54:50 +00:00
ssl_rsa.c Prune removed key types from SSL_PKEY_*. 2014-08-20 02:15:32 +00:00
ssl_sess.c Implement client side of TLS signed certificate stamps extension. 2014-08-21 16:21:46 +00:00
ssl_stat.c Clean up s23_srvr.c. 2014-08-12 21:10:56 +00:00
ssl_test.c Convert all zero-argument functions to '(void)' 2014-08-21 01:06:07 +00:00
ssl_txt.c Remove SSL_OP_CISCO_ANYCONNECT. 2014-08-18 17:57:01 +00:00
t1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
t1_enc.c Fix flipped DTLS checks. 2014-08-25 21:49:36 +00:00
t1_lib.c Implement client side of TLS signed certificate stamps extension. 2014-08-21 16:21:46 +00:00
t1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
t1_reneg.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00
t1_srvr.c Inital import. 2014-06-20 13:17:32 -07:00