openssl/ssl
Dr. Stephen Henson 85269210ff Extended PSK server support.
Add support for RSAPSK, DHEPSK and ECDHEPSK server side.

Update various checks to ensure certificate and server key exchange messages
are only sent when required.

Update message handling. PSK server key exchange parsing now include an
identity hint prefix for all PSK server key exchange messages. PSK
client key exchange message expects PSK identity and requests key for
all PSK key exchange ciphersuites.

Update flags for RSA, DH and ECDH so they are also used in PSK.

Reviewed-by: Matt Caswell <matt@openssl.org>
2015-07-30 14:43:35 +01:00
..
record Fix write failure handling in DTLS1.2 2015-07-30 10:17:53 +01:00
bio_ssl.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
d1_both.c DTLS handshake message fragments musn't span packets 2015-06-10 12:06:29 +01:00
d1_clnt.c Remove support for SSL3_FLAGS_DELAY_CLIENT_FINISHED 2015-07-27 15:00:05 +01:00
d1_lib.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
d1_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
d1_msg.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
d1_srtp.c Use p==NULL not !p (in if statements, mainly) 2015-05-11 10:06:38 -04:00
d1_srvr.c Tidy up ssl3_digest_cached_records logic. 2015-06-23 22:24:09 +01:00
install-ssl.com Updates following review comments 2015-05-16 09:20:52 +01:00
Makefile Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
s3_both.c Updates following review comments 2015-05-16 09:20:52 +01:00
s3_cbc.c Identify and move OpenSSL internal header files 2015-05-14 15:13:49 +02:00
s3_clnt.c Extended PSK client support. 2015-07-30 14:43:35 +01:00
s3_enc.c Avoid duplication. 2015-06-23 22:24:09 +01:00
s3_lib.c PSK PRF correction. 2015-07-30 14:43:35 +01:00
s3_msg.c Introduce the functions RECORD_LAYER_release, RECORD_LAYER_read_pending, and 2015-03-26 15:01:59 +00:00
s3_srvr.c Extended PSK server support. 2015-07-30 14:43:35 +01:00
ssl-lib.com Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
ssl_algs.c Fix missing return value checks 2015-03-23 15:23:11 +00:00
ssl_asn1.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
ssl_cert.c Remove SESS_CERT entirely. 2015-06-22 13:52:24 +01:00
ssl_ciph.c Disable unsupported PSK algorithms 2015-07-30 14:43:35 +01:00
ssl_conf.c free names before context 2015-07-21 14:27:25 +01:00
ssl_err.c Fix race condition in NewSessionTicket 2015-06-02 09:30:12 +01:00
ssl_err2.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_lib.c Enable PSK if corresponding mask set. 2015-07-30 14:43:35 +01:00
ssl_locl.h Extended PSK server support. 2015-07-30 14:43:35 +01:00
ssl_rsa.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
ssl_sess.c Dup peer_chain properly in SSL_SESSION 2015-06-30 14:00:43 +01:00
ssl_stat.c Version negotiation rewrite cleanup 2015-05-16 09:20:38 +01:00
ssl_txt.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
ssl_utst.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_clnt.c Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_enc.c Tidy up ssl3_digest_cached_records logic. 2015-06-23 22:24:09 +01:00
t1_ext.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
t1_lib.c Make auto DH work with DHEPSK 2015-07-30 14:43:35 +01:00
t1_meth.c Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_reneg.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_srvr.c Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_trce.c PSK trace keyex fixes. 2015-06-23 22:25:20 +01:00
tls_srp.c Use single master secret generation function. 2015-06-29 11:47:59 +01:00