openbsd/src/lib/libssl/tls1.h, branch OPENBSD_7_9 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2025-04-18T07:34:01+00:00 Fix annoying whitespace 2025-04-18T07:34:01+00:00 tb 2025-04-18T07:34:01+00:00 urn:sha1:1afbc22dbc8e6d4c3acfc0dfe953e57a700731ba remove duplicate defines; ok tb@ 2024-10-23T01:57:19+00:00 jsg 2024-10-23T01:57:19+00:00 urn:sha1:ab34d71bcab207147c9318dde7698c75df4c5d4b Make {SSL3,TLS}_CT_* internal 2024-03-02T11:46:55+00:00 tb 2024-03-02T11:46:55+00:00 urn:sha1:a0b9f13997d3fef1ae0bb36ea3411779fd154d72 And here goes a bunch of unused macros that just had to be in two headers so they could get out of sync. Three of these constants are used in a single function... ok jsing Export SSL_get_{peer_,}signature_type_nid() 2024-03-02T11:44:47+00:00 tb 2024-03-02T11:44:47+00:00 urn:sha1:e6ba1ba77c418a957100a7562bf08d1ab8eb012e Also move the prototypes to the correct header. Oversight reported by Frank Lichtenheld, thanks! Fixes https://github.com/libressl/openbsd/issues/147 ok jsing Remove GOST and STREEBOG support from libssl. 2024-02-03T15:58:34+00:00 beck 2024-02-03T15:58:34+00:00 urn:sha1:20afa90e552d2efed2187dbafc92170a3895e921 This version of GOST is old and not anywhere close to compliant with modern GOST standards. It is also very intrusive in libssl and makes a mess everywhere. Efforts to entice a suitably minded anyone to care about it have been unsuccessful. At this point it is probably best to remove this, and if someone ever showed up who truly needed a working version, it should be a clean implementation from scratch, and have it use something closer to the typical API in libcrypto so it would integrate less painfully here. This removes it from libssl in preparation for it's removal from libcrypto with a future major bump ok tb@ Correct value for TLSEXT_TYPE_quic_transport_parameters 2022-07-17T14:39:09+00:00 jsing 2022-07-17T14:39:09+00:00 urn:sha1:d17c24b48d83680f3fa6ae93f085e8cc038e726d Use the correct value for TLSEXT_TYPE_quic_transport_parameters according to RFC 9001 section 8.2. Also move the define under LIBRESSL_HAS_QUIC to avoid things finding it prematurely. ok beck@ tb@ Remove #ifndef around the definition of OPENSSL_TLS_SECURITY_LEVEL. 2022-07-13T14:28:09+00:00 tb 2022-07-13T14:28:09+00:00 urn:sha1:365c3fb49e39fda4859948f84c262fc649b1a349 We do not intend to make this a compile-time option. Reminded by schwarze who asked about it ok jsing Expose security level symbols and error codes in the headers. 2022-07-07T13:02:59+00:00 tb 2022-07-07T13:02:59+00:00 urn:sha1:5826289e403f75180a81d9f1596e0f1cdbfb456e ok jsing Add support for sending QUIC transport parameters 2022-06-29T17:39:21+00:00 beck 2022-06-29T17:39:21+00:00 urn:sha1:8c47de5e510352beee68efa6184f2e0085167eec This is the start of adding the boringssl API for QUIC support, and the TLS extensions necessary to send and receive QUIC transport data. Inspired by boringssl's https://boringssl-review.googlesource.com/24464 ok jsing@ tb@ Provide OPENSSL_TLS_SECURITY_LEVEL define 2022-06-28T20:36:55+00:00 tb 2022-06-28T20:36:55+00:00 urn:sha1:3628f027e307db44ceb406c2ef4c3852af79ba09 ok beck jsing sthen