openbsd/src/lib, branch libressl-v2.5.4

MFC.

2017-04-29T23:41:32+00:00

Fix a bug caused by the return value being set early to signal successful DTLS cookie validation. This can mask a later failure and result in a positive return value being returned from ssl3_get_client_hello(), when it should return a negative value to propagate the error. ok beck@

bump to 2.5.4

2017-04-29T19:56:13+00:00

MFC: Switch Linux getrandom() usage to non-blocking mode, continuing to

2017-04-29T18:57:00+00:00

use fallback mechanims if unsuccessful. The design of Linux getrandom is broken. It has an uninitialized phase coupled with blocking behaviour, which is unacceptable from within a library at boot time without possible recovery. ok deraadt@ jsing@

MFC: Revert previous change that forced consistency between return value and

2017-04-28T23:12:04+00:00

error code, since this breaks the documented API. Under certain circumstances this will result in incorrect successful certiticate verification (where a user supplied callback always returns 1, and later code checks the error code to potentially abort post verification)

bump version for stable release

2017-04-06T10:36:12+00:00

rephrase more enumerations of functions

2017-03-29T17:38:37+00:00

tweak previous;

2017-03-29T00:24:42+00:00

Fix typo in function name;

2017-03-28T18:21:55+00:00

from Markus Triska via OpenSSL commit 1f164c6f.

After i wrote SSL_renegotiate(3) from scratch, OpenSSL also

2017-03-28T18:19:53+00:00

documented the function. Merge the more detailed descriptions and the additional documentation of SSL_renegotiate_abbreviated(3) and SSL_renegotiate_pending(3). From Matt Caswell, OpenSSL commit 39820637.

small cleanup & optimization; ok deraadt@ millert@

2017-03-28T16:56:38+00:00