Rich Salz ae3947de09 Add a DRBG to each SSL object ...

Give each SSL object it's own DRBG, chained to the parent global
DRBG which is used only as a source of randomness into the per-SSL
DRBG.  This is used for all session, ticket, and pre-master secret keys.
It is NOT used for ECDH key generation which use only the global
DRBG. (Doing that without changing the API is tricky, if not impossible.)

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/4050)

2017-08-03 10:24:03 -04:00

..

record

Add a DRBG to each SSL object

2017-08-03 10:24:03 -04:00

statem

Add a DRBG to each SSL object

2017-08-03 10:24:03 -04:00

bio_ssl.c

Get pointer type right in BIO_ssl_shutdown()

2017-03-07 09:56:49 -05:00

build.info

Move ssl/t1_ext.c to ssl/statem/extensions_cust.c

2017-04-07 13:41:04 +01:00

d1_lib.c

Convert existing usage of assert() to ossl_assert() in libssl

2017-05-22 14:00:43 +01:00

d1_msg.c

Remove special case code for SCTP reneg handling

2017-04-25 11:13:39 +01:00

d1_srtp.c

Move client parsing of ServerHello extensions into new framework

2016-12-08 17:18:25 +00:00

methods.c

Drop support for OPENSSL_NO_TLS1_3_METHOD

2017-06-30 09:41:46 +01:00

packet_locl.h

TLS1.3 Padding

2017-05-02 09:44:43 +01:00

packet.c

Move ossl_assert

2017-08-03 10:48:00 +01:00

pqueue.c

Update copyright header

2017-07-30 17:42:00 -04:00

s3_cbc.c

Move ossl_assert

2017-08-03 10:48:00 +01:00

s3_enc.c

Move ossl_assert

2017-08-03 10:48:00 +01:00

s3_lib.c

Add a DRBG to each SSL object

2017-08-03 10:24:03 -04:00

s3_msg.c

Always flush the BIO when we send any alert

2017-06-06 22:39:41 +01:00

ssl_asn1.c

Send and receive the ticket_nonce field in a NewSessionTicket

2017-07-07 15:02:09 +01:00

ssl_cert_table.h

Move certificate table to header file so it can be tested.

2017-07-13 12:38:42 +01:00

ssl_cert.c

Move certificate table to header file so it can be tested.

2017-07-13 12:38:42 +01:00

ssl_ciph.c

Move ossl_assert

2017-08-03 10:48:00 +01:00

ssl_conf.c

Do not allow non-dhe kex_modes by default

2017-07-07 16:08:05 +01:00

ssl_err.c

make errors

2017-07-13 12:38:42 +01:00

ssl_init.c

Convert existing usage of assert() to ossl_assert() in libssl

2017-05-22 14:00:43 +01:00

ssl_lib.c

Add a DRBG to each SSL object

2017-08-03 10:24:03 -04:00

ssl_locl.h

Add a DRBG to each SSL object

2017-08-03 10:24:03 -04:00

ssl_mcnf.c

Fix misc size_t issues causing Windows warnings in 64 bit

2016-11-04 12:09:46 +00:00

ssl_rsa.c

Use certificate tables instead of ssl_cert_type

2017-07-13 12:38:42 +01:00

ssl_sess.c

Add a DRBG to each SSL object

2017-08-03 10:24:03 -04:00

ssl_stat.c

Fix errors in SSL_state_string_long

2017-07-31 08:55:37 -04:00

ssl_txt.c

Merge Nokia copyright notice into standard

2017-06-21 08:59:18 -04:00

ssl_utst.c

Remove heartbeat support

2016-11-13 16:24:02 -05:00

t1_enc.c

Fix tls1_generate_master_secret

2017-06-22 11:54:19 -04:00

t1_lib.c

Use cert tables in ssl_set_sig_mask

2017-07-13 12:38:42 +01:00

t1_trce.c

Fix the names of older ciphers.

2017-07-31 09:11:18 -04:00

tls13_enc.c

Fix TLSv1.3 exporter secret

2017-07-17 13:42:52 +01:00

tls_srp.c

Add a DRBG to each SSL object

2017-08-03 10:24:03 -04:00