kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
b31040d0d8
boringssl/ssl
History
David Benjamin b31040d0d8 Get rid of CERT_PKEY slots in SESS_CERT. 
This doesn't even change behavior. Unlike local configuration, the peer
can never have multiple certificates anyway. (Even with a renego, the
SESS_CERT is created anew.)

This does lose the implicit certificate type check, but the certificate
type is already checked in ssl3_get_server_certificate and later checked
post-facto in ssl3_check_cert_and_algorithm (except that one seems to
have some bugs like it accepts ECDSA certificates for RSA cipher suites,
to be cleaned up in a follow-up). Either way, we have the certificate
mismatch tests for this.

BUG=486295

Change-Id: I437bb723bb310ad54ee4150eda67c1cfe43377b3
Reviewed-on: https://boringssl-review.googlesource.com/5044
Reviewed-by: Adam Langley <agl@google.com>
2015-06-08 22:13:45 +00:00
..
pqueue Fix some malloc test crashs. 2015-05-21 18:00:10 +00:00
test Add tests for empty record limit and make it work in the async case. 2015-06-08 21:45:21 +00:00
CMakeLists.txt Add malloc test support to unit tests. 2015-05-21 17:59:48 +00:00
d1_both.c Fold away SSL_PROTOCOL_METHOD hooks shared between TLS and DTLS. 2015-06-01 22:29:46 +00:00
d1_clnt.c Remove SSL_in_before and SSL_ST_BEFORE. 2015-05-21 20:51:06 +00:00
d1_lib.c Further tidy up cipher logic. 2015-06-01 22:48:30 +00:00
d1_meth.c Further tidy up cipher logic. 2015-06-01 22:48:30 +00:00
d1_pkt.c Split ssl_read_bytes hook into app_data and close_notify hooks. 2015-06-01 22:27:55 +00:00
d1_srtp.c Fix STACK_OF pointer style. 2015-05-06 22:55:16 +00:00
d1_srvr.c Decide whether or not to request client certificates early. 2015-05-27 21:53:16 +00:00
internal.h Get rid of CERT_PKEY slots in SESS_CERT. 2015-06-08 22:13:45 +00:00
s3_both.c Minor typo fix in comment. 2015-06-04 21:59:45 +00:00
s3_clnt.c Get rid of CERT_PKEY slots in SESS_CERT. 2015-06-08 22:13:45 +00:00
s3_enc.c Remove unnecessary NULL checks, part 5. 2015-05-04 23:16:19 +00:00
s3_lib.c Further tidy up cipher logic. 2015-06-01 22:48:30 +00:00
s3_meth.c Further tidy up cipher logic. 2015-06-01 22:48:30 +00:00
s3_pkt.c Add tests for empty record limit and make it work in the async case. 2015-06-08 21:45:21 +00:00
s3_srvr.c Tighten up EMS resumption behaviour. 2015-06-03 22:05:50 +00:00
ssl_aead_ctx.c Factor SSL_AEAD_CTX into a dedicated type. 2015-05-21 17:59:15 +00:00
ssl_algs.c
ssl_asn1.c Further tidy up cipher logic. 2015-06-01 22:48:30 +00:00
ssl_cert.c Get rid of CERT_PKEY slots in SESS_CERT. 2015-06-08 22:13:45 +00:00
ssl_cipher.c Further tidy up cipher logic. 2015-06-01 22:48:30 +00:00
ssl_lib.c Add SSL_get_tls_unique. 2015-06-04 22:10:22 +00:00
ssl_rsa.c Switch EVP_PKEY_dup calls to EVP_PKEY_up_ref. 2015-05-06 22:57:09 +00:00
ssl_sess.c Remove remaining calls to the old lock functions. 2015-05-20 19:18:13 +00:00
ssl_stat.c Remove SSL_in_before and SSL_ST_BEFORE. 2015-05-21 20:51:06 +00:00
ssl_test.cc Reject sessions with the wrong structure version. 2015-06-01 20:30:02 +00:00
ssl_txt.c
t1_enc.c Fold TLS1_PRF_* into SSL_HANDSHAKE_MAC_* 2015-06-01 22:43:06 +00:00
t1_lib.c Switch three more renegotiate checks to initial_handshake_complete. 2015-05-21 18:31:55 +00:00
t1_reneg.c Include-what-you-use ssl/internal.h. 2015-04-10 22:15:02 +00:00