openbsd/src/lib, branch libressl-v2.9.0

Delete a note taken during the rev. 1.1 man page splite

2018-12-14T20:18:27+00:00

that should have been deleted before commit. The cross reference is already present below SEE ALSO. Glitch noticed by jsing@.

Improve speed for the multi-threaded case by reducing lock contention.

2018-12-10T07:57:49+00:00

tested by many; ok florian@

style; OK otto

2018-12-09T11:32:02+00:00

Remove an ugly hack in the client certificate verification code that works

2018-12-07T07:22:09+00:00

around broken GOST implementations. It looks like client certificates with GOST have been completely broken since reimport of the GOST code, so no-one is using LibreSSL this way. The client side was fixed only last week for TLSv1.0 and TLSv1.1. This workaround is now in the way of much needed simplifcation and cleanup, so it is time for it to go. suggested by and ok jsing

remove a stray line accidentally left behind in rev. 1.120;

2018-12-05T17:11:59+00:00

patch from Hiltjo Posthuma

Send SSL_AD_DECODE alerts in the case of a bad hello request or an

2018-12-03T17:16:12+00:00

invalid change cipher spec. Found due to dead assignment warnings by the Clang static analyzer. ok inoguchi (previous version), jsing

Restore function prototype for ASN1_dup, fixing usage on I32LP64 platforms.

2018-11-30T04:51:19+00:00

This prototype was removed inadvertantly in r1.50. OK jsing@

missed adding tls_default_ca_cert_file here. found by sthen

2018-11-29T15:51:49+00:00

expose the default cert file as a function, not a define. it's really

2018-11-29T14:24:23+00:00

an internal detail of the library, so the string should live inside it, not in the application code. ok jsing

Refactor a tangle in ssl3_send_client_verify() into one function for each

2018-11-29T06:21:09+00:00

type, sigalgs/rsa/ec/gost. Move a few special dances for GOST where they belong now. This prompted a fix for a long-standing bug with GOST client certificate authentication where tls1_transcript_data() fails since the transcript was already freed before. Add a bit of missing error checking and leave some further cleanup for later. idea, guidance & ok jsing