openbsd/src/usr.bin/openssl, branch libressl-v3.1.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.1.0 2020-02-19T20:42:12+00:00 Tag subcommand sections 2020-02-19T20:42:12+00:00 kn 2020-02-19T20:42:12+00:00 urn:sha1:8aa6d0caaf1ff768405a5963654a96d6b56ef099 Allow semantic lookup by manually tagging sections (.Sh) for which no automatic tagging has been implemented; this thereby also eliminates false positives such that ":tx509<Enter>" now jumps to the X509 section. feedback remi inoguchi schwarze OK tb Add -tls1_3 and -notls1_3 options to openssl(1) s_client. 2020-02-16T16:39:01+00:00 jsing 2020-02-16T16:39:01+00:00 urn:sha1:0247fea12677c0df2e4e2fa695e67807aa9ea241 Also stop using version pinned methods, instead setting the min and max protocol versions. Requested by inoguchi@ ok inoguchi@ tb@ add a couple of XXX for future cleanup 2020-01-25T05:29:10+00:00 tb 2020-01-25T05:29:10+00:00 urn:sha1:a77de724fe06e092e028921c9a8426256f5b820f Teach openssl s_client a bit about TLSv1.3. 2020-01-24T09:42:32+00:00 tb 2020-01-24T09:42:32+00:00 urn:sha1:204d7b74de47e4c868b17b2badcf3cece1250a13 ok beck jsing Make -peekaboo mode also use SSL_pending after peeking, to ensure 2020-01-23T03:35:54+00:00 beck 2020-01-23T03:35:54+00:00 urn:sha1:f9fd863530438e25f21b6f006a58f073f273db1c SSL_pending implementation is correct. annoying jsing@ Simplify the peekaboo code. 2020-01-22T06:40:42+00:00 jsing 2020-01-22T06:40:42+00:00 urn:sha1:24e2a02e17a0f1229648b4dd6046a6a9463ea814 ok beck@ Add -peekaboo option to s_client, to test SSL_peek 2020-01-22T04:51:48+00:00 beck 2020-01-22T04:51:48+00:00 urn:sha1:bf9da0a40766c4c53baae742d06d3fd51706e563 peeks data before reading, compares to subsequent read. ok jsing@ Check CMS API return value in openssl(1) cms 2020-01-04T14:17:55+00:00 inoguchi 2020-01-04T14:17:55+00:00 urn:sha1:700c85fb1ff2056f2ff74fb9caa85282357fc74f ok jsing@ use "Currently" in the doc for "openssl enc" when talking about default 2019-12-18T12:38:15+00:00 sthen 2019-12-18T12:38:15+00:00 urn:sha1:edd6a4725a85b6c93403f8157a94001976a52938 md, to hint that it might not always be the case (e.g. if dealing with files from a different version of the tool). ok tb@ In January, the default digest used in the openssl enc command was 2019-12-18T07:54:28+00:00 tb 2019-12-18T07:54:28+00:00 urn:sha1:98c4031be8a69f942a4c5b80ad6dfef28f69b03e changed from md5 to sha256. Update manual to reflect that. From Fabio Scotoni ok jmc