openbsd/src/lib/libtls, branch libressl-v2.5.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.5.1 2017-01-31T20:53:50+00:00 tweak previous; 2017-01-31T20:53:50+00:00 jmc 2017-01-31T20:53:50+00:00 urn:sha1:6c28da67c611c03b362d37ff8812dfe07a0ff0d8 Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may be 2017-01-31T16:18:57+00:00 beck 2017-01-31T16:18:57+00:00 urn:sha1:495744c28c5684b4dc97769932647f560190a501 added associated to a keypair used for SNI, and are usable for more than just the "main" certificate. Modify httpd to use this. Bump libtls minor. ok jsing@ Disable client-initiated renegotiation for libtls servers. 2017-01-31T15:57:43+00:00 jsing 2017-01-31T15:57:43+00:00 urn:sha1:668794109cbdee39a72425d2c14f0dcf25557074 ok beck@ reyk@ Marko Kreen contributed significantly to the ocsp stuff for libtls 2017-01-29T18:00:21+00:00 beck 2017-01-29T18:00:21+00:00 urn:sha1:7bec0756a83b2f934fdc8388eaaa8511392ef87e Move the ocsp staple to being part of the keypair structure internally, 2017-01-29T17:52:11+00:00 beck 2017-01-29T17:52:11+00:00 urn:sha1:a787119135c7f989cdcd1f06c15e48d2c75bc4c4 so that it does not send back bogus staples when SNI is in use. (Further change is required to be able to use staples on all keypairs and not just the main one) ok jsing@ add HISTORY and AUTHORS 2017-01-28T00:59:36+00:00 schwarze 2017-01-28T00:59:36+00:00 urn:sha1:850cb05a7787213159cf03cef8d67cbac122026d Fix Copyright notices; ok beck@ jsing@ tedu@ 2017-01-27T20:19:51+00:00 schwarze 2017-01-27T20:19:51+00:00 urn:sha1:e1e5222367e10bef8c8288e06b741d766faf6327 More s/OSCP/OCSP/ typos 2017-01-27T07:03:27+00:00 tom 2017-01-27T07:03:27+00:00 urn:sha1:2b01d8e93fb16d46ee115230ed1a242921e4969f ok jmc@ fix Dt; 2017-01-26T20:42:07+00:00 jmc 2017-01-26T20:42:07+00:00 urn:sha1:cb3261f0bf31a578e15e5e83e98e37f6189919b3 Use a flag to track when we need to call SSL_shutdown(). This avoids an 2017-01-26T12:56:37+00:00 jsing 2017-01-26T12:56:37+00:00 urn:sha1:b67df6aca845e645c0b047549941d37e2e1cdaab issue where by calling tls_close() on a TLS context that has not attempted a handshake, results in an unexpected failure. Reported by Vinay Sajip. ok beck@