openbsd/src/usr.bin/openssl, branch OPENBSD_7_2_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_2_BASE 2022-09-14T16:31:36+00:00 remove an extraneous empty line 2022-09-14T16:31:36+00:00 tb 2022-09-14T16:31:36+00:00 urn:sha1:b90fb1a563a5bd5fbe53dc5355f9de11f4dd687e Adjust for opaque structs in ts.h 2022-09-11T18:08:17+00:00 tb 2022-09-11T18:08:17+00:00 urn:sha1:1a27aebc8e7d98572e7f85acc40edf4735e87d92 ok jsing Adjust for opaque structs in pkcs12.h 2022-09-11T18:07:46+00:00 tb 2022-09-11T18:07:46+00:00 urn:sha1:40113eb39e43ecfaa2a05e210c2d61610a1a5110 ok jsing Avoid division by zero if no connection was made. 2022-08-31T12:29:08+00:00 tb 2022-08-31T12:29:08+00:00 urn:sha1:5fdcead22234749d49d79e5fc2b4d6bd7f4d5f27 CID 184043 Check return values in ssl_print_tmp_key() 2022-08-31T07:12:30+00:00 tb 2022-08-31T07:12:30+00:00 urn:sha1:e9b277782866239b8ebf2ee6fd7350e695cca639 Use EVP_PKEY_get0_EC_KEY() instead of the get1 version to avoid an EVP_PKEY_free(). Check return values: if either EVP_PKEY_get0_EC_KEY() or EC_KEY_get0_group() fail, a NULL dereference occurs. CID 43289 ok jsing Check HMAC() return value to avoid a later use of uninitialized 2022-08-30T20:40:14+00:00 tb 2022-08-30T20:40:14+00:00 urn:sha1:a2701e1610925369192d4d0f4f871abf3115d2d0 CID 25421 Add workarounds for some symbols that are hidden under !LIBRESSL_INTERNAL 2022-08-03T20:17:38+00:00 tb 2022-08-03T20:17:38+00:00 urn:sha1:ad02ddcb2294f02f2bb3323d39e6043dfc90d54c until the next bump exposes new symbols that we can use. fix indent 2022-07-19T20:15:19+00:00 tb 2022-07-19T20:15:19+00:00 urn:sha1:ec2e701cc9dc8074434759b4102c781a20adb990 Document -tls1_{1,2,3} in openssl ciphers 2022-07-19T16:08:09+00:00 tb 2022-07-19T16:08:09+00:00 urn:sha1:d29e337a0bb15ee7036e52754e42c2b3136a1c4d ok jsing Allow displaying ciphers according to protocol version 2022-07-19T16:07:35+00:00 tb 2022-07-19T16:07:35+00:00 urn:sha1:fa292259e6e362d01a413d7edc7b87fc7320bc32 Instead of only using the default client method, allow selecting a specific protocol version and display the supported ciphers accordingly. This removes the noop status of -tls1 and adds -tls1_{1,2,3} as in other commands. ok jsing