openbsd/src/lib/libtls, branch libressl-v2.1.10 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.1.10 2015-02-26T10:36:30+00:00 Prefix function parameter names with underscores in tls.h, since this makes 2015-02-26T10:36:30+00:00 jsing 2015-02-26T10:36:30+00:00 urn:sha1:edbffccc662d783a95fcd535b216b27918cb35d0 them guaranteed to not conflict per POSIX. ok espie@ guenther@ Bump libtls major due to symbol removal. 2015-02-22T15:11:00+00:00 jsing 2015-02-22T15:11:00+00:00 urn:sha1:27785fc6558f773dc521d2792407f89342ce1de9 Rename tls_config_insecure_noverifyhost() to 2015-02-22T15:09:54+00:00 jsing 2015-02-22T15:09:54+00:00 urn:sha1:8f0da3833933c03ed608960137176284dab5c213 tls_config_insecure_noverifyname(), so that it is more accurate and keeps inline with the distinction between DNS hostname and server name. Requested by tedu@ during s2k15. Check return values when setting dheparams and ecdhecurve for the default 2015-02-22T14:59:37+00:00 jsing 2015-02-22T14:59:37+00:00 urn:sha1:3b98da1c070ff20b1bcfc07b8950ab42bcc1f4e7 configuration. In the interests of being secure by default, make the default TLS ciphers 2015-02-22T14:50:41+00:00 jsing 2015-02-22T14:50:41+00:00 urn:sha1:1607f10de0cc9943f49fa1cbf6edb53c60012a4f be those that are TLSv1.2 with AEAD and PFS. Provide a "compat" mode that allows the previous default ciphers to be selected. Discussed with tedu@ during s2k15. explain how tls_accept_socket works. 2015-02-21T21:41:00+00:00 tedu 2015-02-21T21:41:00+00:00 urn:sha1:2a62d537cb9010dd8195073119bceb929c7871f0 tls_config_set_protocols is really void. Greg Martin. 2015-02-21T19:58:39+00:00 tedu 2015-02-21T19:58:39+00:00 urn:sha1:7b8235f13085d0f2cb52bc050dca4289f998c663 fill out docs a bit more, notably the read/write again behaviors. 2015-02-21T19:54:59+00:00 tedu 2015-02-21T19:54:59+00:00 urn:sha1:0f2cad7cd6bd52815d178f29fd9f893de002a999 ok jsing s/tls_load_keys/tls_load_file/ 2015-02-15T13:36:06+00:00 jsing 2015-02-15T13:36:06+00:00 urn:sha1:0fb8de3b2f47ff78f387f6add8b26a43fce02689 Document tls_config_parse_protocols() and update documentation for 2015-02-15T13:33:14+00:00 jsing 2015-02-15T13:33:14+00:00 urn:sha1:3dbac869f1034ed967bdef2a4b0f58103bff3088 tls_config_set_protocols().