openbsd/src/lib/libtls, branch libressl-v2.6.5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.6.5 2017-12-09T16:49:17+00:00 MFC: Make tls_config_parse_protocols() work correctly when passed a NULL 2017-12-09T16:49:17+00:00 jsing 2017-12-09T16:49:17+00:00 urn:sha1:b8100fcfb98cb2782f144c3357545c2162b1e3c1 pointer for a protocol string. Issue found by semarie@, who also provided the diff. If tls_config_parse_protocols() is called with a NULL pointer, return the 2017-09-25T18:07:03+00:00 jsing 2017-09-25T18:07:03+00:00 urn:sha1:4d8ee4aa62048ceec0971789b40645cbe219bc06 default protocols instead of crashing - this makes the behaviour more useful and mirrors what we already do in tls_config_set_ciphers() et al. Keep track of which keypair is in use by a TLS context. 2017-09-20T17:05:17+00:00 jsing 2017-09-20T17:05:17+00:00 urn:sha1:cb877fda6d4f301551f4f41cbe708b7a31217fba This fixes a bug where by a TLS server with SNI would always only return the OCSP staple for the default keypair, rather than returning the OCSP staple associated with the keypair that was selected via SNI. Issue reported by William Graeber and confirmed by Andreas Bartelt. Fix tested by William Graeber and Andreas Bartelt - thanks! Slightly restructure tls_ocsp_verify_cb() to make it more like libtls code. 2017-09-20T16:52:37+00:00 jsing 2017-09-20T16:52:37+00:00 urn:sha1:373953b07ced62cde74a839d1249fa9b7d8df5e7 Provide a useful error if there are no OCSP URLs in the peer certificate. 2017-09-20T16:38:23+00:00 jsing 2017-09-20T16:38:23+00:00 urn:sha1:87f911b10521db48d4a40fc8d3426bf0af0b23ce Fix indentation. 2017-09-20T16:36:45+00:00 jsing 2017-09-20T16:36:45+00:00 urn:sha1:5068b8b7a6b9aeb5547f87d2352bfa52e9d6c448 Bump libssl/libtls minors due to symbol (re)addition. 2017-08-30T16:24:56+00:00 jsing 2017-08-30T16:24:56+00:00 urn:sha1:6d77941ef30dc628bccd79f321a73668f2c02945 Bump lib{crypto,ssl,tls} majors due to symbol removals. 2017-08-28T17:49:06+00:00 jsing 2017-08-28T17:49:06+00:00 urn:sha1:7795ed9d1b5591626b5be060048191880b39c390 Fix unchecked return nit 2017-08-28T13:58:02+00:00 beck 2017-08-28T13:58:02+00:00 urn:sha1:7275129f0e25ffdd4691d2997ddb0564fba49080 ok bcook@ jsing@ Make the symbol for ASN1_time_tm_clamp_notafter visible so libtls 2017-08-27T01:39:26+00:00 beck 2017-08-27T01:39:26+00:00 urn:sha1:6c9bbaf00dfc219bed78108aaeebd92eed0c33ee can get at it, so libtls can also deal with notafter's past the realm of 32 bit time in portable