openbsd/src/lib/libtls, branch libressl-v3.3.5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.3.5 2021-03-31T17:02:18+00:00 Bump minors after symbol addition 2021-03-31T17:02:18+00:00 tb 2021-03-31T17:02:18+00:00 urn:sha1:0c1b885ba6292c3b2d58d343977ac4cab728cc2b OCSP_basic_verify() doesn't set errno, so use tls_set_errorx() 2021-03-23T20:04:29+00:00 tb 2021-03-23T20:04:29+00:00 urn:sha1:9ed88205d42eaac13cb994ec2bfb335ddee622c8 ok inoguchi Use "EC/RSA key setup failure" to align error with others 2021-02-01T15:35:41+00:00 tb 2021-02-01T15:35:41+00:00 urn:sha1:327eb61213e0518897fcc95ff66a4f1b29600319 ok eric jsing Move private key setup to a helper function with proper error 2021-01-26T12:51:22+00:00 eric 2021-01-26T12:51:22+00:00 urn:sha1:58428e8a6be750d25b7030f6661bc17898fc02e4 checking. Only install the hash on the key if fake key is used, and do it for EC keys too. ok tb@ jsing@ when using fake keys, skip the private key check 2021-01-21T22:03:25+00:00 eric 2021-01-21T22:03:25+00:00 urn:sha1:8a81cf6d6ca75f4dc696ef3d2a0e2d5a286eda10 ok tb@ return -1 on error for consistency 2021-01-21T22:02:17+00:00 eric 2021-01-21T22:02:17+00:00 urn:sha1:6c591528beca425c269bbcf4f86d55affd878eee ok tb@ minor bump after symbol addition 2021-01-21T19:09:43+00:00 eric 2021-01-21T19:09:43+00:00 urn:sha1:90234a03ff2198208d587dab363a9e7a09224408 Allow setting a keypair on a tls context without specifying the private 2021-01-21T19:09:10+00:00 eric 2021-01-21T19:09:10+00:00 urn:sha1:d2ab351fe9c988b44fe7daa9c749b02330249121 key, and fake it internally with the certificate public key instead. It makes it easier for privsep engines like relayd that don't have to use bogus keys anymore. ok beck@ tb@ jsing@ Fix indent. 2021-01-05T17:37:12+00:00 jsing 2021-01-05T17:37:12+00:00 urn:sha1:34fac48299b0cc05da218aa9d764f8b28cfb190b Remove memset that was made redundant with the ASN1_time_parse() 2021-01-05T15:57:38+00:00 tb 2021-01-05T15:57:38+00:00 urn:sha1:c2affb92204dca1446bbdf5b7404fda1dc41e2c2 fix in libcrypto/asn1/a_time_tm.c r1.16. Suggested by jsing