openbsd/src/lib/libssl, branch libressl-v2.5.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.5.1 2017-01-31T15:35:46+00:00 Provide an SSL_OP_NO_CLIENT_RENEGOTIATION option that disallows 2017-01-31T15:35:46+00:00 jsing 2017-01-31T15:35:46+00:00 urn:sha1:3ad3f36472b7244bbdcd534b2487fb1c780509fa client-initiated renegotiation. The current default behaviour remains unchanged. ok beck@ reyk@ Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Put comment back in the right place. 2017-01-29T15:31:15+00:00 jsing 2017-01-29T15:31:15+00:00 urn:sha1:f8c627888330b75c2eea8a3c27d0efe947a4f9da Avoid clearing the mac_packet flag in the wrong place. 2017-01-29T15:20:18+00:00 jsing 2017-01-29T15:20:18+00:00 urn:sha1:6b6ab37138277705113e3d34b9354c9c9bd5e9c5 In many cases we got away with this, however if a server sends multiple handshake messages in the same record only the first message would be added to the MAC. Should fix breakage reported by various people. knf 2017-01-26T12:44:52+00:00 beck 2017-01-26T12:44:52+00:00 urn:sha1:da182059d20bea63316fbeeab8bb8134b10764be Convert ssl3_get_client_hello() to CBS. 2017-01-26T12:28:00+00:00 jsing 2017-01-26T12:28:00+00:00 urn:sha1:b141c006bb6adfcae96ba102630b285a36c875aa ok beck@ Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the ugly 2017-01-26T12:16:13+00:00 beck 2017-01-26T12:16:13+00:00 urn:sha1:a141ed2bc17672028f4c648479f1cc3c598be1e9 line wraps that resulted Send the error function codes to rot in the depths of hell where they belong 2017-01-26T10:40:21+00:00 beck 2017-01-26T10:40:21+00:00 urn:sha1:a4abf558fd44464a5a48bfeb5393b01002f66c5e We leave a single funciton code (0xFFF) to say "SSL_internal" so the public API will not break, and we replace all internal use of the two argument SSL_err() with the internal only SSL_error() that only takes a reason code. ok jsing@ Merge the single two line function from ssl_err2.c into ssl_err.c. 2017-01-26T09:16:01+00:00 jsing 2017-01-26T09:16:01+00:00 urn:sha1:b7978753e566fd60946300b252a9d9d89559733e ok beck@ english is hard. 2017-01-26T08:19:43+00:00 beck 2017-01-26T08:19:43+00:00 urn:sha1:b25d45f33f8f745e5e6aa54a25353bd9d64244da