Tomas Mraz c6ea08836b Allow TLS-1.3 ciphersuites in @SECLEVEL=3 and above ...

The TLS-1.3 ciphersuites must not be blocked by @SECLEVEL=3 even
though they are not explicitly marked as using DH/ECDH.

Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6959)

2018-08-22 13:23:10 +10:00

..

record

Tolerate encrypted or plaintext alerts

2018-08-08 10:16:58 +01:00

statem

Change Post Handshake auth so that it is opt-in

2018-08-20 15:14:01 +01:00

bio_ssl.c

Add comments to NULL func ptrs in bio_method_st

2017-12-18 07:04:48 +10:00

build.info

Move ssl/t1_ext.c to ssl/statem/extensions_cust.c

2017-04-07 13:41:04 +01:00

d1_lib.c

More record layer conversions to use SSLfatal()

2017-12-08 16:42:02 +00:00

d1_msg.c

Remove parentheses of return.

2017-10-18 16:05:06 +01:00

d1_srtp.c

Move client parsing of ServerHello extensions into new framework

2016-12-08 17:18:25 +00:00

methods.c

Drop support for OPENSSL_NO_TLS1_3_METHOD

2017-06-30 09:41:46 +01:00

packet_locl.h

Remove __cplusplus preamble from internal headers

2018-06-22 12:24:59 +02:00

packet.c

Update copyright year

2018-04-17 15:18:40 +02:00

pqueue.c

Use void in all function definitions that do not take any arguments

2018-05-11 14:37:48 +02:00

s3_cbc.c

Move ossl_assert

2017-08-03 10:48:00 +01:00

s3_enc.c

Ensure that we write out alerts correctly after early_data

2018-08-08 10:16:58 +01:00

s3_lib.c

Turn on TLSv1.3 downgrade protection by default

2018-08-15 12:33:30 +01:00

s3_msg.c

Update copyright year

2018-02-13 13:59:25 +00:00

ssl_asn1.c

Don't use OPENSSL_strdup() for copying alpn_selected

2018-06-21 11:07:45 +01:00

ssl_cert_table.h

Update copyright year

2018-03-20 13:08:46 +00:00

ssl_cert.c

Allow TLS-1.3 ciphersuites in @SECLEVEL=3 and above

2018-08-22 13:23:10 +10:00

ssl_ciph.c

Harmonize use of sk_TYPE_find's return value.

2018-08-07 08:56:54 +02:00

ssl_conf.c

Add the ability to configure anti-replay via SSL_CONF

2018-07-02 15:06:12 +01:00

ssl_err.c

Fix some TLSv1.3 alert issues

2018-07-31 09:31:50 +01:00

ssl_init.c

Fix setting of ssl_strings_inited.

2018-08-07 15:08:03 -04:00

ssl_lib.c

Add support for SSL_CTX_set_post_handshake_auth()

2018-08-20 15:14:01 +01:00

ssl_locl.h

Add support for SSL_CTX_set_post_handshake_auth()

2018-08-20 15:14:01 +01:00

ssl_mcnf.c

Move the loading of the ssl_conf module to libcrypto

2018-04-05 15:30:12 +01:00

ssl_rsa.c

Update copyright year

2018-03-20 13:08:46 +00:00

ssl_sess.c

ssl/*: switch to switch to Thread-Sanitizer-friendly primitives.

2018-08-07 09:08:23 +02:00

ssl_stat.c

Merge HRR into ServerHello

2017-12-14 15:06:37 +00:00

ssl_txt.c

Address coverity-reported NULL dereference in SSL_SESSION_print()

2018-07-01 18:20:11 -05:00

ssl_utst.c

Remove heartbeat support

2016-11-13 16:24:02 -05:00

t1_enc.c

Ensure that we write out alerts correctly after early_data

2018-08-08 10:16:58 +01:00

t1_lib.c

Check that the public key OID matches the sig alg

2018-07-18 09:58:56 +01:00

t1_trce.c

Update code for the final RFC version of TLSv1.3 (RFC8446)

2018-08-15 12:33:30 +01:00

tls13_enc.c

Ensure that we write out alerts correctly after early_data

2018-08-08 10:16:58 +01:00

tls_srp.c

Use the private RNG for data that is not public

2018-04-02 22:22:43 +02:00