| Commit message (Expand) | Author | Age | Files | Lines |
* | This commit was manufactured by cvs2git to create tag 'OPENBSD_6_0_BASE'.OPENBSD_6_0_BASE | cvs2svn | 2016-07-23 | 1187 | -380610/+0 |
* | rework crl2pkcs7; with help from jsing | jmc | 2016-07-23 | 1 | -57/+18 |
* | rework DESCRIPTION a little: no-command seems clearer than no-XXX; | jmc | 2016-07-21 | 1 | -17/+12 |
* | rename NOTES to COMMON SYNTAX (explains itself better); rework the | jmc | 2016-07-21 | 1 | -43/+44 |
* | strip back openssl crl somewhat: remove the examples | jmc | 2016-07-21 | 1 | -41/+21 |
* | strip back openssl ciphers: | jmc | 2016-07-20 | 1 | -106/+60 |
* | strip back openssl ca: in particular remove some excessively wordy sections, | jmc | 2016-07-19 | 1 | -337/+120 |
* | don't mix code and decls, ok tedu@ | bcook | 2016-07-18 | 2 | -4/+6 |
* | use memset to initialize the union | bcook | 2016-07-17 | 2 | -4/+8 |
* | remove unused OPENSSL_NO_OBJECT case | bcook | 2016-07-17 | 2 | -28/+2 |
* | Initialize buffers before use, noted by Kinichiro Inoguchi. | bcook | 2016-07-17 | 2 | -14/+14 |
* | strip back asn1parse; ok beck jsing | jmc | 2016-07-17 | 1 | -108/+27 |
* | Clean up OCSP_check_validity() a bit more. | beck | 2016-07-16 | 2 | -22/+20 |
* | since we no longer pull source directly from openssl, the time is | jmc | 2016-07-16 | 1 | -427/+57 |
* | Limit the support of the "backward compatible" ssl2 handshake to only be | beck | 2016-07-16 | 2 | -2/+18 |
* | Adjust existing tls_config_set_cipher() callers for TLS cipher group | jsing | 2016-07-13 | 1 | -2/+2 |
* | Split the existing TLS cipher suite groups into four: | jsing | 2016-07-13 | 3 | -11/+22 |
* | Fix usage() output and getopt sorting | guenther | 2016-07-13 | 1 | -6/+6 |
* | zero the read buffer after copying data to user so it doesn't linger. | tedu | 2016-07-10 | 2 | -2/+4 |
* | Revert previous since the libtls change has been reverted. | jsing | 2016-07-07 | 1 | -16/+24 |
* | Revert previous - it introduces problems with a common privsep use case. | jsing | 2016-07-07 | 3 | -72/+35 |
* | add ca cert error check and make the path configurable | bcook | 2016-07-07 | 1 | -1/+9 |
* | call BN_init on temporaries to avoid use-before-set warnings | bcook | 2016-07-07 | 6 | -6/+28 |
* | J/j is a three valued option, document and fix code to actuall support that | otto | 2016-07-06 | 1 | -3/+5 |
* | Check that the given ciphers string is syntactically valid and results in | jsing | 2016-07-06 | 1 | -1/+17 |
* | Remove manual file loading (now that libtls does this for us) and adjust | jsing | 2016-07-06 | 1 | -24/+16 |
* | Always load CA, key and certificate files at the time the configuration | jsing | 2016-07-06 | 3 | -35/+72 |
* | Correctly handle an EOF that occurs prior to the TLS handshake completing. | jsing | 2016-07-06 | 1 | -3/+6 |
* | remove extra assignment of s from 1.11, fix regression test | bcook | 2016-07-05 | 1 | -2/+1 |
* | remove unneeded duplicate call - spotted by jsing@ | beck | 2016-07-05 | 2 | -6/+2 |
* | On systems where we do not have BN_ULLONG defined (most 64-bit systems), | bcook | 2016-07-05 | 8 | -26/+111 |
* | Add several fixes from OpenSSL to make OCSP work with intermediate | beck | 2016-07-05 | 2 | -20/+48 |
* | make less awful.. test against cloudflare too | beck | 2016-07-05 | 2 | -9/+19 |
* | Add a nasty little ocsp regress test in the hope pedants will make it better. | beck | 2016-07-04 | 3 | -1/+140 |
* | do not uppercase "hop limit"; | jmc | 2016-07-02 | 1 | -4/+4 |
* | Simplify IP proto-specific sockopt error handling. | bcook | 2016-07-01 | 1 | -34/+26 |
* | Tighten behavior of _rs_allocate failure for portable arc4random implementati... | bcook | 2016-06-30 | 14 | -14/+28 |
* | Tighten behavior of _rs_allocate on Windows. | bcook | 2016-06-30 | 2 | -8/+14 |
* | bump to 2.4.2 | bcook | 2016-06-30 | 2 | -6/+6 |
* | adapt S option: add C, rm F (not relevant with 0 cache and disables | otto | 2016-06-30 | 1 | -3/+3 |
* | Remove flags for disabling constant-time operations. | bcook | 2016-06-30 | 18 | -424/+207 |
* | Add -M and -m options to specify the outgoing and incoming minimum TTL | jca | 2016-06-28 | 2 | -9/+52 |
* | Back out previous; otto saw a potential race that could lead to a | tb | 2016-06-28 | 1 | -32/+23 |
* | If an error path if close() is called, save errno so that original error | deraadt | 2016-06-28 | 1 | -5/+13 |
* | Be more careful initializing and tracking socket s through main, this is | deraadt | 2016-06-27 | 1 | -7/+6 |
* | defer munmap to after unlocking malloc. this can (unfortunately) be an | tedu | 2016-06-27 | 1 | -23/+32 |
* | whitespace | deraadt | 2016-06-27 | 1 | -2/+2 |
* | increase the minimum for auto rounds to 6. that was the previous low bound | tedu | 2016-06-26 | 1 | -2/+2 |
* | Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP uses | beck | 2016-06-25 | 2 | -4/+4 |
* | Fix the ocsp code to actually check for errors when comparing time values | beck | 2016-06-25 | 2 | -14/+62 |