boringssl

Historique

Adam Langley 764ab9802e Support and test P-224 certificates. Previously we only needed to be able to serve P-224 certificates, but now we anticipate a need to be able to connect and validate them also. Since this requires advertising support for P-224 in the handshake, we need to support P-224 ECDHE too. P-224 support is disabled by default and so clients need to both set the enabled curves explicitly and set a maximum version of TLS 1.2. Change-Id: Idc69580f47334e0912eb431a0db0e78ee2eb5bbe Reviewed-on: https://boringssl-review.googlesource.com/14225 Reviewed-by: Adam Langley <alangley@gmail.com> Commit-Queue: Adam Langley <alangley@gmail.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		il y a 7 ans
..
test	Support and test P-224 certificates.	il y a 7 ans
CMakeLists.txt	Convert bio_test to GTest.	il y a 7 ans
bio_ssl.c	Move the SSL BIO into ssl/ from decrepit/.	il y a 7 ans
custom_extensions.c	Prevent Channel ID and Custom Extensions on 0-RTT.	il y a 7 ans
d1_both.c	Trim x509.h includes.	il y a 7 ans
d1_lib.c	Don't use long for timestamps.	il y a 7 ans
d1_pkt.c	Remove support for blocking DTLS timeout handling.	il y a 7 ans
d1_srtp.c	Fix ssl_ctx_make_profiles error handling.	il y a 8 ans
dtls_method.c	Adding support for receiving early data on the server.	il y a 7 ans
dtls_record.c	Don't use the buffer BIO in DTLS.	il y a 7 ans
handshake_client.c	Adding support for receiving early data on the server.	il y a 7 ans
handshake_server.c	Tidy up ssl3_choose_cipher.	il y a 7 ans
internal.h	Clean up end_of_early_data processing.	il y a 7 ans
s3_both.c	Add Data-less Zero-RTT support.	il y a 7 ans
s3_lib.c	Move new_cipher and new_session to SSL_HANDSHAKE.	il y a 7 ans
s3_pkt.c	Add cipher asserts for read/write app data.	il y a 7 ans
ssl_aead_ctx.c	Adding version to AEAD.	il y a 7 ans
ssl_asn1.c	Don't use long for timestamps.	il y a 7 ans
ssl_buffer.c	Just allocate what's needed for SSL write buffers.	il y a 7 ans
ssl_cert.c	Add \|SSL[_CTX]_set_chain_and_key\|.	il y a 7 ans
ssl_cipher.c	Remove DHE ciphersuites from TLS.	il y a 7 ans
ssl_ecdh.c	Support and test P-224 certificates.	il y a 7 ans
ssl_file.c	Remove \|X509\| things from SSL_SESSION.	il y a 7 ans
ssl_lib.c	Adding support for receiving early data on the server.	il y a 7 ans
ssl_privkey.c	Add \|SSL[_CTX]_set_chain_and_key\|.	il y a 7 ans
ssl_privkey_cc.cc	Rename ssl_rsa.c to ssl_privkey.c.	il y a 7 ans
ssl_session.c	Support asynchronous ticket decryption with TLS 1.0–1.2.	il y a 7 ans
ssl_stat.c	Unexport the handshake's internal state.	il y a 7 ans
ssl_test.cc	Name \|select_certificate_cb\| return values	il y a 7 ans
ssl_transcript.c	Moving transcript and PRF functions to SSL_TRANSCRIPT.	il y a 7 ans
ssl_x509.c	Move ssl_verify_alarm_type into ssl_x509.c.	il y a 7 ans
t1_enc.c	Move tmp.extended_master_secret to SSL_HANDSHAKE.	il y a 7 ans
t1_lib.c	Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER.	il y a 7 ans
tls13_both.c	Adding support for receiving early data on the server.	il y a 7 ans
tls13_client.c	Prevent Channel ID and Custom Extensions on 0-RTT.	il y a 7 ans
tls13_enc.c	Send half-RTT tickets when negotiating 0-RTT.	il y a 7 ans
tls13_server.c	Adding support for receiving early data on the server.	il y a 7 ans
tls_method.c	Adding support for receiving early data on the server.	il y a 7 ans
tls_record.c	Add Data-less Zero-RTT support.	il y a 7 ans