openbsd/src/lib/libtls, branch libressl-v2.2.4

Remove OpenSSL engine RSAX.

2015-07-19T22:34:27+00:00

OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@

tweak previous; ok doug

2015-07-19T17:10:23+00:00

Crank the major of libtls: the behaviour of tls_write() has been

2015-07-19T06:10:11+00:00

changed in an incompatible way regarding partial writes. OK miod@ deraadt@

Add documentation on how to use TLS_{READ,WRITE}_AGAIN.

2015-07-19T05:49:27+00:00

ok beck@

Set SSL_MODE_ENABLE_PARTIAL_WRITE and SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER

2015-07-18T22:15:09+00:00

in libtls. This gives tls_write() a similar short write semantics as write(2). So implementing daemons with libevent buffers will be easier and workarounds in syslogd and httpd can be removed. OK tedu@ beck@ reyk@

Crank major for libcrypto, ssl and tls due to MDC-2DES removal.

2015-06-20T01:09:31+00:00

ok miod@ jsing@

Add standard headers, C++ support to tls.h.

2015-06-19T06:20:11+00:00

This makes using libtls easier to include by including dependent headers, making something like this work as expected: #include #include int main() { std::cout << "tls_init: " << tls_init() << "\n"; } This also makes building a standalone libtls-portable simpler. ok doug@, jsing@

Link ssl and crypto via BSDOBJDIR, works with native and cross builds

2015-06-05T21:52:01+00:00

ok mpi@

Record inter-library dependencies between libcrypto, libssl and libtls

2015-05-17T22:39:39+00:00

Reject dNSName of " " for subjectAltName extension.

2015-04-29T00:24:31+00:00

RFC 5280 says " " must not be used as a dNSName. ok jsing@ jca@