openbsd/src/lib/libtls, branch libressl-v2.3.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.3.0 2015-09-14T21:23:00+00:00 tweak previous; 2015-09-14T21:23:00+00:00 jmc 2015-09-14T21:23:00+00:00 urn:sha1:703170d97926316a074474fc325ca26f3a028f6d Provide tls_config_insecure_noverifytime() in order to be able to disable 2015-09-14T16:16:38+00:00 jsing 2015-09-14T16:16:38+00:00 urn:sha1:3e5c8273f252e9fe9e751d6fc17106fffbb4979d certificate validity checking. ok beck@ Remove useless quoting from .Fo and .Fn function names, to prevent 2015-09-14T15:14:55+00:00 schwarze 2015-09-14T15:14:55+00:00 urn:sha1:10b413aed00e28d9b01ce81356931a9b0d74e98d development of a cargo cult in case people look at existing files for examples. This achieves a consistent .Fo and .Fn quoting style across the whole tree. some conn_version and conn_cipher bits; 2015-09-14T14:29:30+00:00 jmc 2015-09-14T14:29:30+00:00 urn:sha1:da10e04d6e15dd983749cad53359bcdeb264bcb3 Expose EOF without close-notify via tls_close(). 2015-09-14T12:29:16+00:00 jsing 2015-09-14T12:29:16+00:00 urn:sha1:8bf97226937b4c32d717d66e71258b8189a0d164 Make tls_read(3)/tls_write(3) follow read(2)/write(2) like semantics and return 0 on EOF with and without close-notify. However, if we saw an EOF from the underlying file descriptors without getting a close-notify, save this and make it visible when tls_close(3) is called. This keeps the semantics we want, but makes it possible to detect truncation at higher layers, if necessary. ok beck@ guenther@ Return an error if tls_handshake() or tls_close() is called on a context 2015-09-14T12:20:40+00:00 jsing 2015-09-14T12:20:40+00:00 urn:sha1:fae01b5a6e7434e3b290843262eb0e20209f3ac9 for which they are not valid operations. ok beck@ add missing function return types 2015-09-14T12:05:33+00:00 schwarze 2015-09-14T12:05:33+00:00 urn:sha1:8851f61663dd8cedaa31b15ff0450cafa1d948c2 Crank major version due to removal of SHA-0 and MD4 from libcrypto. 2015-09-13T23:42:29+00:00 doug 2015-09-13T23:42:29+00:00 urn:sha1:da36d6a18c187f8d3c2e38a0e5940d8073110b10 work around the stupid semantics of SSL_read and SSL_write to make sure 2015-09-13T15:39:15+00:00 beck 2015-09-13T15:39:15+00:00 urn:sha1:9d3ded74986d6dd9799bf1cd48d58632c66215ad we can indicate an EOF properly on tls_read and tls_write ok jsing@ Don't leak conninfo - spotted by marko kreen. 2015-09-13T13:44:07+00:00 beck 2015-09-13T13:44:07+00:00 urn:sha1:9e1762e567ed62de223b5caef7953dba6942a6ed ok jsing@