openbsd/src/lib/libtls, branch libressl-v2.2.1

Crank major for libcrypto, ssl and tls due to MDC-2DES removal.

2015-06-20T01:09:31+00:00

ok miod@ jsing@

Add standard headers, C++ support to tls.h.

2015-06-19T06:20:11+00:00

This makes using libtls easier to include by including dependent headers, making something like this work as expected: #include #include int main() { std::cout << "tls_init: " << tls_init() << "\n"; } This also makes building a standalone libtls-portable simpler. ok doug@, jsing@

Link ssl and crypto via BSDOBJDIR, works with native and cross builds

2015-06-05T21:52:01+00:00

ok mpi@

Record inter-library dependencies between libcrypto, libssl and libtls

2015-05-17T22:39:39+00:00

Reject dNSName of " " for subjectAltName extension.

2015-04-29T00:24:31+00:00

RFC 5280 says " " must not be used as a dNSName. ok jsing@ jca@

Treat SSL_ERROR_ZERO_RETURN as a success, rather than a failure. Also

2015-04-15T16:08:43+00:00

ensure that outlen is set to zero so that tls_read() has read(2) like semantics for EOF. Spotted by doug@

Make tls_close() more robust - do not rely on a close notify being received

2015-04-15T16:05:23+00:00

from the other side and only return TLS_READ_AGAIN/TLS_WRITE_AGAIN if we failed to send a close notify on a non-blocking socket. Otherwise be more forceful and always shutdown/close the socket regardless of other failures. Also do not consider ENOTCONN or ECONNRESET to be a shutdown failure, since there are various situations where this can occur. ok doug@ guenther@

comma fix;

2015-04-03T22:33:43+00:00

Handle the case where multiple calls to SSL_shutdown() are required to

2015-04-02T13:19:15+00:00

close the connection. Also correctly handle the error on failure. Diff from cookieandscream via github.

Correct man page title.

2015-04-02T05:54:22+00:00

Diff from Tim van der Molen. ok jmc@