openbsd/src/lib/libssl, branch libressl-v3.0.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.0.1 2019-06-14T13:41:31+00:00 Further improve the documentation of library initialization and configuration. 2019-06-14T13:41:31+00:00 schwarze 2019-06-14T13:41:31+00:00 urn:sha1:d342104b3f35ddd0a6581d33f40a3e26852d29d3 Among other improvements: * Use a uniform wording at the top of the DECSRIPTION for obsolete pages. * Better explain how to use a non-standard configuration file. * Remove obsolete functions from SEE ALSO. Triggered by some suggestions from tb@. Tweaks and OK tb@. add missing backlinks to ssl(3) 2019-06-12T09:36:30+00:00 schwarze 2019-06-12T09:36:30+00:00 urn:sha1:cf1a7ef7d544fdc455432c5b1ec7c2e9550b7ce6 List all 17 SSL pages that were missing. 2019-06-12T09:03:43+00:00 schwarze 2019-06-12T09:03:43+00:00 urn:sha1:51eeb7ff1e9ea33451d6369eff4a51f7eaa5e93b Split some excessively long lists into useful sub-categories. Add a new, very short subsection "Obsolete functions" at the end. OK tb@ jmc@ remove pointless NOTES section header lines 2019-06-08T15:25:43+00:00 schwarze 2019-06-08T15:25:43+00:00 urn:sha1:acacd6f1d4eb6c3aedb4970d6976bde14e314b36 provide getters and setters for the RSA_METHOD interface 2019-06-05T15:41:33+00:00 gilles 2019-06-05T15:41:33+00:00 urn:sha1:9726b0d68faa6893b67a94e7e23aaba30e342d10 ok tb@, jsing@, sthen@ Relax parsing of TLS key share extensions on the server. 2019-05-29T17:28:37+00:00 jsing 2019-05-29T17:28:37+00:00 urn:sha1:734d7963cd6029acc2d48de2f7466ffb952c8e32 The RFC does not require X25519 and it also allows clients to send an empty key share when the want the server to select a group. The current behaviour results in handshake failures where the client supports TLS 1.3 and sends a TLS key share extension that does not contain X25519. Issue reported by Hubert Kario via github. ok tb@ Do not send an SNI extension when resuming a session that contains a server 2019-05-29T17:25:27+00:00 jsing 2019-05-29T17:25:27+00:00 urn:sha1:cd734a6c65835c49bfbc800aa0a3e3fa251f5d5d name (which means the client sent SNI during the initial handshake). Issue reported by Renaud Allard. ok tb@ Fix typo and label indent. 2019-05-28T17:34:32+00:00 jsing 2019-05-28T17:34:32+00:00 urn:sha1:29ffc76203fca2aa37e9680ab3faa2ed7d45be62 Tidy up some names/structures following the renaming of TLS extension 2019-05-28T17:16:42+00:00 jsing 2019-05-28T17:16:42+00:00 urn:sha1:35c15e014eb51a4461c58fa7191c355817361235 functions based on message type (clienthello/serverhello), to which side is handling the processing. No intended functional change. ok beck@ *an* RSA; 2019-05-20T06:04:45+00:00 jmc 2019-05-20T06:04:45+00:00 urn:sha1:bd677763071f6e5dd7b13c371d704af3316850d4