openbsd/src/lib/libtls, branch libressl-v2.2.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.2.0 2015-06-05T21:52:01+00:00 Link ssl and crypto via BSDOBJDIR, works with native and cross builds 2015-06-05T21:52:01+00:00 tobiasu 2015-06-05T21:52:01+00:00 urn:sha1:020815bd7a9c6eeda60d31af91ca5813e28b31d5 ok mpi@ Record inter-library dependencies between libcrypto, libssl and libtls 2015-05-17T22:39:39+00:00 kettenis 2015-05-17T22:39:39+00:00 urn:sha1:c5f087c6c031837a968277278b7d6de4ae1692fb Reject dNSName of " " for subjectAltName extension. 2015-04-29T00:24:31+00:00 doug 2015-04-29T00:24:31+00:00 urn:sha1:06353d44d291291e48ddb83745d3e3801acf6d57 RFC 5280 says " " must not be used as a dNSName. ok jsing@ jca@ Treat SSL_ERROR_ZERO_RETURN as a success, rather than a failure. Also 2015-04-15T16:08:43+00:00 jsing 2015-04-15T16:08:43+00:00 urn:sha1:4f7c2c40b561a9607fc1cad0288bad2bebbdd5db ensure that outlen is set to zero so that tls_read() has read(2) like semantics for EOF. Spotted by doug@ Make tls_close() more robust - do not rely on a close notify being received 2015-04-15T16:05:23+00:00 jsing 2015-04-15T16:05:23+00:00 urn:sha1:803fe901561ae85e774d8c387c4853742a37d03c from the other side and only return TLS_READ_AGAIN/TLS_WRITE_AGAIN if we failed to send a close notify on a non-blocking socket. Otherwise be more forceful and always shutdown/close the socket regardless of other failures. Also do not consider ENOTCONN or ECONNRESET to be a shutdown failure, since there are various situations where this can occur. ok doug@ guenther@ comma fix; 2015-04-03T22:33:43+00:00 jmc 2015-04-03T22:33:43+00:00 urn:sha1:da25c8b7d4e629fad761cd53bd302b0333d6e6e2 Handle the case where multiple calls to SSL_shutdown() are required to 2015-04-02T13:19:15+00:00 jsing 2015-04-02T13:19:15+00:00 urn:sha1:e3e998d846e2f8ea152663cd7dd4bedf950e9601 close the connection. Also correctly handle the error on failure. Diff from cookieandscream via github. Correct man page title. 2015-04-02T05:54:22+00:00 jsing 2015-04-02T05:54:22+00:00 urn:sha1:5afcf0b97bf806f075cbd05bbf3d672f3908c35d Diff from Tim van der Molen. ok jmc@ Document the fact that the tls_accept_*() functions can return 2015-04-02T05:53:08+00:00 jsing 2015-04-02T05:53:08+00:00 urn:sha1:30367480287303a2e4d74251bc4901eb7f9e6cbb TLS_READ_AGAIN and TLS_WRITE_AGAIN. Based on a diff from Tim van der Molen. Bump libtls minor due to API addition. 2015-03-31T14:04:12+00:00 jsing 2015-03-31T14:04:12+00:00 urn:sha1:717d3d10879b77c0faa64f9f3cd2a6cb72856ce6