openssl/ssl
Todd Short fe55c4a20f Remove ECDH(E) ciphers from SSLv3
SSLv3 does not support TLS extensions, and thus, cannot provide any
curves for ECDH(E). With the removal of the default (all) list of curves
being used for connections that didn't provide any curves, ECDHE is no
longer possible.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3181)
2017-04-11 13:25:19 -04:00
..
record Additional check to handle BAD SSL_write retry 2017-04-11 11:59:59 -04:00
statem Allow an ALPN callback to pretend to not exist 2017-04-10 11:57:37 -04:00
bio_ssl.c Get pointer type right in BIO_ssl_shutdown() 2017-03-07 09:56:49 -05:00
build.info Move ssl/t1_ext.c to ssl/statem/extensions_cust.c 2017-04-07 13:41:04 +01:00
d1_lib.c Code health: Stop using timeb.h / ftime() (VMS only) 2017-02-28 15:32:01 +01:00
d1_msg.c Remove some obsolete/obscure internal define switches: 2017-03-01 10:44:49 +01:00
d1_srtp.c Move client parsing of ServerHello extensions into new framework 2016-12-08 17:18:25 +00:00
methods.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
packet.c Use for loop in WPACKET_fill_lengths instead of do...while 2017-01-30 10:18:24 +00:00
packet_locl.h Miscellaneous style tweaks based on feedback received 2017-01-30 10:18:23 +00:00
pqueue.c Fix a missed size_t variable declaration 2016-11-04 12:09:46 +00:00
s3_cbc.c Clean up references to FIPS 2017-02-28 15:26:25 +01:00
s3_enc.c Use the new TLSv1.3 certificate_required alert where appropriate 2017-03-10 15:33:31 +00:00
s3_lib.c Remove ECDH(E) ciphers from SSLv3 2017-04-11 13:25:19 -04:00
s3_msg.c Provide functions to write early data 2017-03-02 17:44:14 +00:00
ssl_asn1.c Publish our INT32, UINT32, INT64, UINT64 ASN.1 types and Z variants 2017-04-10 12:10:59 +02:00
ssl_cert.c Implement a new custom extensions API 2017-04-07 13:41:04 +01:00
ssl_ciph.c Remove some obsolete/obscure internal define switches: 2017-03-01 10:44:49 +01:00
ssl_conf.c SSL_CONF support for certificate_authorities 2017-04-03 23:47:21 +01:00
ssl_err.c Implement certificate_authorities extension 2017-03-17 18:41:56 +00:00
ssl_init.c Indent ssl/ 2016-08-18 14:02:29 +02:00
ssl_lib.c New certificate_authorities functions 2017-04-03 23:47:21 +01:00
ssl_locl.h Create an ENDPOINT enum type for use internally 2017-04-07 13:41:04 +01:00
ssl_mcnf.c Fix misc size_t issues causing Windows warnings in 64 bit 2016-11-04 12:09:46 +00:00
ssl_rsa.c Create an ENDPOINT enum type for use internally 2017-04-07 13:41:04 +01:00
ssl_sess.c Move the extensions context codes into the public API 2017-04-07 13:41:04 +01:00
ssl_stat.c Add missing debug strings. 2016-09-07 16:08:38 -04:00
ssl_txt.c Move extension data into sub-structs 2017-01-09 22:26:47 -05:00
ssl_utst.c Remove heartbeat support 2016-11-13 16:24:02 -05:00
t1_enc.c Use the new TLSv1.3 certificate_required alert where appropriate 2017-03-10 15:33:31 +00:00
t1_lib.c New certificate_authorities functions 2017-04-03 23:47:21 +01:00
t1_trce.c Add TLSv1.3 draft-19 messages to trace 2017-03-16 13:16:51 -04:00
tls13_enc.c More typo fixes 2017-03-29 07:14:29 +02:00
tls_srp.c Indent ssl/ 2016-08-18 14:02:29 +02:00