openbsd/src/lib, branch libressl-v2.4.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.2 2016-07-23T19:31:37+00:00 This commit was manufactured by cvs2git to create branch 'OPENBSD_6_0'. 2016-07-23T19:31:37+00:00 cvs2svn admin@example.com 2016-07-23T19:31:37+00:00 urn:sha1:f62463c2c218cf95320c8841ba552dc2c8ce4738 don't mix code and decls, ok tedu@ 2016-07-18T01:04:52+00:00 bcook 2016-07-18T01:04:52+00:00 urn:sha1:c7c0c4b1ecb389c009d446c6c9253677915896dc use memset to initialize the union 2016-07-17T22:01:01+00:00 bcook 2016-07-17T22:01:01+00:00 urn:sha1:c5ec86df737ed666779cf51e5f3a89a62397e0de remove unused OPENSSL_NO_OBJECT case 2016-07-17T21:23:50+00:00 bcook 2016-07-17T21:23:50+00:00 urn:sha1:45c9aa3806e0d3ab3751cd424acd1b069b6d54ee ok tedu@ Initialize buffers before use, noted by Kinichiro Inoguchi. 2016-07-17T21:21:40+00:00 bcook 2016-07-17T21:21:40+00:00 urn:sha1:fdee4729e12ac97473d08c1a7e9d17c5468fe82c ok beck@ Clean up OCSP_check_validity() a bit more. 2016-07-16T16:14:28+00:00 beck 2016-07-16T16:14:28+00:00 urn:sha1:8109af5f2daf46b062aa3ffda9db6ff7889f818f - Return on first failure rather than continuing. - Don't compare times by comparing strings that possibly were not parsable as a time. ok deraadt@ Limit the support of the "backward compatible" ssl2 handshake to only be 2016-07-16T04:42:35+00:00 beck 2016-07-16T04:42:35+00:00 urn:sha1:36d93f606de1abf57d21891eacdb1eb3e7a4db2e used if TLS 1.0 is enabled. Sugessted/discussed with jsing@ and bcook@. ok guenther@ sthen@ Split the existing TLS cipher suite groups into four: 2016-07-13T16:30:48+00:00 jsing 2016-07-13T16:30:48+00:00 urn:sha1:6356c57c473f626e89cf1f4fd3931ac373f63f4a "secure" (TLSv1.2+AEAD+PFS) "compat" (HIGH:!aNULL) "legacy" (HIGH:MEDIUM:!aNULL) "insecure" (ALL:!aNULL:!eNULL) This allows for flexibility and finer grained control, rather than having two extremes (an issue raised by Marko Kreen some time ago). ok beck@ tedu@ zero the read buffer after copying data to user so it doesn't linger. 2016-07-10T23:07:34+00:00 tedu 2016-07-10T23:07:34+00:00 urn:sha1:0c1f5bc42e542ed62830610289c52eab0f978335 ok beck Revert previous - it introduces problems with a common privsep use case. 2016-07-07T14:09:03+00:00 jsing 2016-07-07T14:09:03+00:00 urn:sha1:264aec397e864b1312511d8a90f858c97ac5bb0c