openssl/ssl
Dr. Stephen Henson 7689082b71 Extended PSK client support.
Add support for RSAPSK, DHEPSK and ECDHEPSK client side.

Update various checks to ensure certificate and server key exchange messages
are only expected when required.

Update message handling. PSK server key exchange parsing now expects an
identity hint prefix for all PSK server key exchange messages. PSK
client key exchange message requests PSK identity and key for all PSK
key exchange ciphersuites and includes identity in message.

Update flags for RSA, DH and ECDH so they are also used in PSK.

Reviewed-by: Matt Caswell <matt@openssl.org>
2015-07-30 14:43:35 +01:00
..
record Fix write failure handling in DTLS1.2 2015-07-30 10:17:53 +01:00
bio_ssl.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
d1_both.c DTLS handshake message fragments musn't span packets 2015-06-10 12:06:29 +01:00
d1_clnt.c Remove support for SSL3_FLAGS_DELAY_CLIENT_FINISHED 2015-07-27 15:00:05 +01:00
d1_lib.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
d1_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
d1_msg.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
d1_srtp.c Use p==NULL not !p (in if statements, mainly) 2015-05-11 10:06:38 -04:00
d1_srvr.c Tidy up ssl3_digest_cached_records logic. 2015-06-23 22:24:09 +01:00
install-ssl.com Updates following review comments 2015-05-16 09:20:52 +01:00
Makefile Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
s3_both.c Updates following review comments 2015-05-16 09:20:52 +01:00
s3_cbc.c Identify and move OpenSSL internal header files 2015-05-14 15:13:49 +02:00
s3_clnt.c Extended PSK client support. 2015-07-30 14:43:35 +01:00
s3_enc.c Avoid duplication. 2015-06-23 22:24:09 +01:00
s3_lib.c PSK PRF correction. 2015-07-30 14:43:35 +01:00
s3_msg.c Introduce the functions RECORD_LAYER_release, RECORD_LAYER_read_pending, and 2015-03-26 15:01:59 +00:00
s3_srvr.c Use single master secret generation function. 2015-06-29 11:47:59 +01:00
ssl_algs.c Fix missing return value checks 2015-03-23 15:23:11 +00:00
ssl_asn1.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
ssl_cert.c Remove SESS_CERT entirely. 2015-06-22 13:52:24 +01:00
ssl_ciph.c Disable unsupported PSK algorithms 2015-07-30 14:43:35 +01:00
ssl_conf.c free names before context 2015-07-21 14:27:25 +01:00
ssl_err2.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_err.c Fix race condition in NewSessionTicket 2015-06-02 09:30:12 +01:00
ssl_lib.c Enable PSK if corresponding mask set. 2015-07-30 14:43:35 +01:00
ssl_locl.h fields for PSK key, new constants 2015-07-30 14:43:34 +01:00
ssl_rsa.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
ssl_sess.c Dup peer_chain properly in SSL_SESSION 2015-06-30 14:00:43 +01:00
ssl_stat.c Version negotiation rewrite cleanup 2015-05-16 09:20:38 +01:00
ssl_txt.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
ssl_utst.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl-lib.com Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_clnt.c Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_enc.c Tidy up ssl3_digest_cached_records logic. 2015-06-23 22:24:09 +01:00
t1_ext.c Remove support for OPENSSL_NO_TLSEXT 2015-05-22 23:10:51 +01:00
t1_lib.c Make auto DH work with DHEPSK 2015-07-30 14:43:35 +01:00
t1_meth.c Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_reneg.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_srvr.c Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_trce.c PSK trace keyex fixes. 2015-06-23 22:25:20 +01:00
tls_srp.c Use single master secret generation function. 2015-06-29 11:47:59 +01:00