openbsd/src/lib/libssl/ssl3.h, branch OPENBSD_6_8_BASE

Use IANA allocated GOST ClientCertificateTypes.

2020-06-05T18:14:05+00:00

IANA has allocated numbers for GOST ClientCertificateType. Use them in addition to private values (left in place for compatibility). Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Use internal versions of SSL3_BUFFER, SSL3_RECORD and DTLS1_RECORD_DATA.

2020-03-12T17:01:53+00:00

SSL3_BUFFER, SSL3_RECORD and DTLS1_RECORD_DATA are currently still in public headers, even though their usage is internal. This moves to using _INTERNAL suffixed versions that are in internal headers, which then allows us to change them without any potential public API fallout. ok inoguchi@ tb@

Clean up and simplify the handshake transcript code.

2018-11-08T22:28:52+00:00

This provides a cleaner, simpler and more readable API, with code that uses a BUF_MEM instead of a BIO. ok beck@ ("hurry up") and tb@.

Make more of libssl's record layer state internal.

2018-10-24T18:04:50+00:00

In January 2017, we changed large amounts of libssl's data structures to be non-visible/internal, however intentionally left things that the software ecosystem was needing to use. The four or so applications that reached into libssl for record layer related state now implement alternative code. As such, make these data structures internal. ok tb@

Nuke SSL3_FLAGS_DELAY_CLIENT_FINISHED and SSL3_FLAGS_POP_BUFFER.

2018-04-07T16:55:13+00:00

These flags enabled experimental behaviour in the write path, which nothing uses. Removing this code greatly simplifies ssl3_write(). ok beck@ inoguchi@ sthen@ tb@

Completely remove NPN remnants.

2017-08-28T17:36:58+00:00

Based on a diff from doug@, similar diff from inoguchi@

Move most of the SSL3_STATE fields to internal - the ones that remain are

2017-01-22T09:02:07+00:00

known to be used by ports. ok beck@

Convert publically visible structs to translucent structs.

2017-01-22T03:50:45+00:00

This change adds an internal opaque struct for each of the significant publically visible structs. The opaque struct is then allocated and attached to the publically visible struct when the appropriate *_new() function is called, then cleared and freed as necessary. This will allow for changes to be made to the internals of libssl, without requiring a major bump each time the publically visible structs are modified. ok beck@

Explicitly include openssl/opensslconf.h in headers that use OPENSSL_NO_*

2016-12-30T15:10:57+00:00

defines - do not rely on another heading making those available for us.

Add support for ECDHE with X25519.

2016-12-21T16:44:31+00:00

Testing of an earlier revision by naddy@. ok beck@