Dr. Stephen Henson 2b573382f8 Don't alow TLS v1.0 ciphersuites for SSLv3 ...

This disables some ciphersuites which aren't supported in SSL v3:
specifically PSK ciphersuites which use SHA256 or SHA384 for the MAC.

Thanks to the Open Crypto Audit Project for identifying this issue.

Reviewed-by: Matt Caswell <matt@openssl.org>

2015-11-14 00:06:32 +00:00

..

record

Standardise our style for checking malloc failures

2015-11-09 22:48:41 +00:00

statem

Don't alow TLS v1.0 ciphersuites for SSLv3

2015-11-14 00:06:32 +00:00

bio_ssl.c

Handle SSL_ERROR_WANT_X509_LOOKUP

2015-09-20 14:19:49 +01:00

d1_lib.c

Standardise our style for checking malloc failures

2015-11-09 22:48:41 +00:00

d1_msg.c

Move in_handshake into STATEM

2015-10-30 08:39:47 +00:00

d1_srtp.c

PACKETise ServerHello processing

2015-09-07 10:45:38 +01:00

install-ssl.com

Updates following review comments

2015-05-16 09:20:52 +01:00

Makefile

More state machine reorg

2015-10-30 08:38:18 +00:00

methods.c

Ensure the dtls1_get_*_methods work with DTLS_ANY_VERSION

2015-11-05 15:05:58 +00:00

packet_locl.h

Avoid undefined behaviour in PACKET_buf_init

2015-10-21 16:13:53 +01:00

s3_cbc.c

Identify and move OpenSSL internal header files

2015-05-14 15:13:49 +02:00

s3_enc.c

Avoid duplication.

2015-06-23 22:24:09 +01:00

s3_lib.c

Don't alow TLS v1.0 ciphersuites for SSLv3

2015-11-14 00:06:32 +00:00

s3_msg.c

Remove redundant code

2015-10-30 08:38:18 +00:00

ssl_algs.c

CCM support.

2015-08-14 06:56:11 +01:00

ssl_asn1.c

Enable -Wmissing-variable-declarations and

2015-09-11 04:51:55 +01:00

ssl_cert.c

Standardise our style for checking malloc failures

2015-11-09 22:48:41 +00:00

ssl_ciph.c

Don't alow TLS v1.0 ciphersuites for SSLv3

2015-11-14 00:06:32 +00:00

ssl_conf.c

Standardise our style for checking malloc failures

2015-11-09 22:48:41 +00:00

ssl_err2.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl_err.c

Rebuild error source files.

2015-11-05 15:48:37 +00:00

ssl_lib.c

Fix SSL_use_certificate_chain_file

2015-11-10 23:02:44 +00:00

ssl_locl.h

Don't alow TLS v1.0 ciphersuites for SSLv3

2015-11-14 00:06:32 +00:00

ssl_rsa.c

Fix SSL_use_certificate_chain_file

2015-11-10 23:02:44 +00:00

ssl_sess.c

Standardise our style for checking malloc failures

2015-11-09 22:48:41 +00:00

ssl_stat.c

Change SSL_state_string return strings to start with a T

2015-10-30 08:39:47 +00:00

ssl_txt.c

Remove BIO_s_file_internal macro.

2015-10-02 14:22:05 -04:00

ssl_utst.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl-lib.com

Move SSLv3_*method() functions

2015-05-16 09:20:58 +01:00

t1_enc.c

ccm8 support

2015-08-14 06:56:11 +01:00

t1_ext.c

Remove support for OPENSSL_NO_TLSEXT

2015-05-22 23:10:51 +01:00

t1_lib.c

Don't alow TLS v1.0 ciphersuites for SSLv3

2015-11-14 00:06:32 +00:00

t1_reneg.c

PACKETise ServerHello processing

2015-09-07 10:45:38 +01:00

t1_trce.c

Add full PSK trace support

2015-07-30 14:43:35 +01:00

tls_srp.c

Use single master secret generation function.

2015-06-29 11:47:59 +01:00