summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* This commit was manufactured by cvs2git to create tag 'OPENBSD_6_0_BASE'.OPENBSD_6_0_BASEcvs2svn2016-07-231187-380610/+0
* rework crl2pkcs7; with help from jsingjmc2016-07-231-57/+18
* rework DESCRIPTION a little: no-command seems clearer than no-XXX;jmc2016-07-211-17/+12
* rename NOTES to COMMON SYNTAX (explains itself better); rework thejmc2016-07-211-43/+44
* strip back openssl crl somewhat: remove the examplesjmc2016-07-211-41/+21
* strip back openssl ciphers:jmc2016-07-201-106/+60
* strip back openssl ca: in particular remove some excessively wordy sections,jmc2016-07-191-337/+120
* don't mix code and decls, ok tedu@bcook2016-07-182-4/+6
* use memset to initialize the unionbcook2016-07-172-4/+8
* remove unused OPENSSL_NO_OBJECT casebcook2016-07-172-28/+2
* Initialize buffers before use, noted by Kinichiro Inoguchi.bcook2016-07-172-14/+14
* strip back asn1parse; ok beck jsingjmc2016-07-171-108/+27
* Clean up OCSP_check_validity() a bit more.beck2016-07-162-22/+20
* since we no longer pull source directly from openssl, the time isjmc2016-07-161-427/+57
* Limit the support of the "backward compatible" ssl2 handshake to only bebeck2016-07-162-2/+18
* Adjust existing tls_config_set_cipher() callers for TLS cipher groupjsing2016-07-131-2/+2
* Split the existing TLS cipher suite groups into four:jsing2016-07-133-11/+22
* Fix usage() output and getopt sortingguenther2016-07-131-6/+6
* zero the read buffer after copying data to user so it doesn't linger.tedu2016-07-102-2/+4
* Revert previous since the libtls change has been reverted.jsing2016-07-071-16/+24
* Revert previous - it introduces problems with a common privsep use case.jsing2016-07-073-72/+35
* add ca cert error check and make the path configurablebcook2016-07-071-1/+9
* call BN_init on temporaries to avoid use-before-set warningsbcook2016-07-076-6/+28
* J/j is a three valued option, document and fix code to actuall support thatotto2016-07-061-3/+5
* Check that the given ciphers string is syntactically valid and results injsing2016-07-061-1/+17
* Remove manual file loading (now that libtls does this for us) and adjustjsing2016-07-061-24/+16
* Always load CA, key and certificate files at the time the configurationjsing2016-07-063-35/+72
* Correctly handle an EOF that occurs prior to the TLS handshake completing.jsing2016-07-061-3/+6
* remove extra assignment of s from 1.11, fix regression testbcook2016-07-051-2/+1
* remove unneeded duplicate call - spotted by jsing@beck2016-07-052-6/+2
* On systems where we do not have BN_ULLONG defined (most 64-bit systems),bcook2016-07-058-26/+111
* Add several fixes from OpenSSL to make OCSP work with intermediatebeck2016-07-052-20/+48
* make less awful.. test against cloudflare toobeck2016-07-052-9/+19
* Add a nasty little ocsp regress test in the hope pedants will make it better.beck2016-07-043-1/+140
* do not uppercase "hop limit";jmc2016-07-021-4/+4
* Simplify IP proto-specific sockopt error handling.bcook2016-07-011-34/+26
* Tighten behavior of _rs_allocate failure for portable arc4random implementati...bcook2016-06-3014-14/+28
* Tighten behavior of _rs_allocate on Windows.bcook2016-06-302-8/+14
* bump to 2.4.2bcook2016-06-302-6/+6
* adapt S option: add C, rm F (not relevant with 0 cache and disablesotto2016-06-301-3/+3
* Remove flags for disabling constant-time operations.bcook2016-06-3018-424/+207
* Add -M and -m options to specify the outgoing and incoming minimum TTLjca2016-06-282-9/+52
* Back out previous; otto saw a potential race that could lead to atb2016-06-281-32/+23
* If an error path if close() is called, save errno so that original errorderaadt2016-06-281-5/+13
* Be more careful initializing and tracking socket s through main, this isderaadt2016-06-271-7/+6
* defer munmap to after unlocking malloc. this can (unfortunately) be antedu2016-06-271-23/+32
* whitespacederaadt2016-06-271-2/+2
* increase the minimum for auto rounds to 6. that was the previous low boundtedu2016-06-261-2/+2
* Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP usesbeck2016-06-252-4/+4
* Fix the ocsp code to actually check for errors when comparing time valuesbeck2016-06-252-14/+62