openbsd/src/lib/libtls, branch libressl-v2.1.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.1.2 2014-12-07T16:56:17+00:00 Allow specific libtls hostname validation errors to propagate. 2014-12-07T16:56:17+00:00 bcook 2014-12-07T16:56:17+00:00 urn:sha1:26bb73d6664efd39d99f8477df943507a7f03b5e Remove direct calls to printf from the tls_check_hostname() path. This allows NUL byte error messages to bubble up to the caller, to be logged in a program-appropriate way. It also removes non-portable calls to getprogname(). ok jsing@ Fix a memory leak in tls_check_subject_altname() by calling 2014-12-07T16:01:03+00:00 jsing 2014-12-07T16:01:03+00:00 urn:sha1:a084a5c7e10a39f3c0442e0cd4b26c09e5ad5837 sk_GENERAL_NAME_pop_free() instead of sk_GENERAL_NAME_free(). The latter only frees the stack itself and does not free the items. From Basskrapfen on github. revert previous change for now, adjusting based on comments from jsing@ 2014-12-07T15:48:02+00:00 bcook 2014-12-07T15:48:02+00:00 urn:sha1:cd9aa6e67c54c989bae7409a97dfc1997ba3767f Allow specific libtls hostname validation errors to propagate. 2014-12-07T15:00:32+00:00 bcook 2014-12-07T15:00:32+00:00 urn:sha1:a761ebff2cb2a2b78b88a343ed309d18ed93993e Remove direct calls to printf from the tls_check_hostname() path. This allows NUL byte error messages to bubble up to the caller, to be logged in a program-appropriate way. It also removes non-portable calls to getprogname(). The semantics of tls_error() are changed slightly: the last error message is not necessarily preserved between subsequent calls into the library. When the previous call to libtls succeeds, client programs should treat the return value of tls_error() as undefined. ok tedu@ delete extra word in Nd 2014-11-11T04:17:34+00:00 deraadt 2014-11-11T04:17:34+00:00 urn:sha1:ab9578498ec40521edb4a691a71a8301b9276c0a missing outlen in tls_write decl 2014-11-07T13:57:43+00:00 tedu 2014-11-07T13:57:43+00:00 urn:sha1:49c4e57dbb0e8862668add5d62a468171bbed5e9 Add a tls_connect_fds() function that allows a secure connection to be 2014-11-02T14:45:05+00:00 jsing 2014-11-02T14:45:05+00:00 urn:sha1:44fdefc6525622fe6d745eb387fa3266f9028afb established using a pair of existing file descriptors. Based on a diff/request from Jan Klemkow. Rides previous libtls rename/library bump. Discussed with tedu@. Rename libressl to libtls to avoid confusion and to make it easier to 2014-10-31T13:46:17+00:00 jsing 2014-10-31T13:46:17+00:00 urn:sha1:0832c4987f7c76663376596ce39d96366e9f82e5 distinguish between LibreSSL (the project) and libressl (the library). Discussed with many.