openbsd/src/lib/libtls/tls_conninfo.c, branch OPENBSD_6_8_BASE

Provide tls_conn_cipher_strength().

2019-11-02T13:37:59+00:00

This returns the strength in bits of the symmetric cipher used for the connection. Diff from gilles@ ok tb@

Tidy/standardise some code.

2018-02-10T04:48:44+00:00

Remove NULL check from tls_conninfo_cert_pem() - all of the other conninfo

2018-02-10T04:48:17+00:00

functions require the conninfo passed in to be non-NULL.

Add support to libtls for client-side TLS session resumption.

2018-02-10T04:41:24+00:00

A libtls client can specify a session file descriptor (a regular file with appropriate ownership and permissions) and libtls will manage reading and writing of session data across TLS handshakes. Discussed at length with deraadt@ and tedu@. Rides previous minor bump. ok beck@

Do not bother NULLing pointers in a struct that is about to be freed.

2018-02-08T10:02:48+00:00

Make the symbol for ASN1_time_tm_clamp_notafter visible so libtls

2017-08-27T01:39:26+00:00

can get at it, so libtls can also deal with notafter's past the realm of 32 bit time in portable

Add tls_peer_cert_chain_pem - To retreive the peer certificate and chain

2017-04-05T03:19:22+00:00

as PEM format. This allows for it to be used or examined with tools external to libtls bump minor ok jsing@

Internal changes to allow for relayd engine privsep. sends the hash of the

2017-04-05T03:13:53+00:00

public key as an identifier to RSA, and adds an function for relayd to use to disable private key checking when doing engine privsep. ok jsing@

Avoid leaking conninfo servername.

2017-01-09T15:31:20+00:00

Issue found by and fix from Shuo Chen .

make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden

2016-11-04T18:07:24+00:00

functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@