| Commit message (Expand) | Author | Age | Files | Lines |
* | MFC: Reject excessively large primes in DH key generation. Problem reportedlibressl-v2.6.5OPENBSD_6_2 | jsing | 2018-06-13 | 1 | -1/+6 |
* | MFC: Avoid a timing side-channel leak when generating DSA and ECDSA | jsing | 2018-06-13 | 2 | -7/+4 |
* | Bump to LibreSSL 2.6.5 | bcook | 2018-06-13 | 1 | -3/+3 |
* | bump to 2.6.4libressl-v2.6.4 | bcook | 2017-12-11 | 1 | -3/+3 |
* | MFC: Make tls_config_parse_protocols() work correctly when passed a NULL | jsing | 2017-12-09 | 1 | -3/+5 |
* | MFC: Correct TLS extensions handling when no extensions are present. | jsing | 2017-12-09 | 3 | -3/+35 |
* | This commit was manufactured by cvs2git to create branch 'OPENBSD_6_2'.libressl-v2.6.3 | cvs2svn | 2017-09-26 | 0 | -0/+0 |
* | bump version in advance of final release | bcook | 2017-09-26 | 1 | -3/+3 |
* | bump wo 2.6.2libressl-v2.6.2 | bcook | 2017-09-26 | 1 | -3/+3 |
* | If tls_config_parse_protocols() is called with a NULL pointer, return the | jsing | 2017-09-25 | 1 | -1/+4 |
* | Annotate some API-side memory leaks for future resolution. | jsing | 2017-09-25 | 1 | -1/+3 |
* | Fix various issues in the OCSP extension parsing code: | jsing | 2017-09-25 | 1 | -20/+14 |
* | When building the OCSP extension, only add the length prefixed extensions | jsing | 2017-09-25 | 1 | -6/+6 |
* | Make delayed free non-optional and make F do an extensive double free check. | otto | 2017-09-23 | 1 | -21/+26 |
* | Keep track of which keypair is in use by a TLS context. | jsing | 2017-09-20 | 4 | -14/+25 |
* | Slightly restructure tls_ocsp_verify_cb() to make it more like libtls code. | jsing | 2017-09-20 | 1 | -6/+7 |
* | Provide a useful error if there are no OCSP URLs in the peer certificate. | jsing | 2017-09-20 | 1 | -1/+4 |
* | Fix indentation. | jsing | 2017-09-20 | 1 | -1/+1 |
* | mapalign returns MAP_FAILED for failuer; from George Koehler | otto | 2017-09-12 | 1 | -2/+2 |
* | check double free before canary for chunks; ok millert@ | otto | 2017-09-11 | 1 | -5/+5 |
* | New POSIX xlocale implementation written from scratch.libressl-v2.6.1 | schwarze | 2017-09-05 | 11 | -96/+396 |
* | Move mutex, condvar, and thread-specific data routes, pthread_once, and | guenther | 2017-09-05 | 2 | -11/+182 |
* | Checking sizeof size_t by SIZE_MAX instead of _LP64 | inoguchi | 2017-09-03 | 1 | -7/+7 |
* | delete pointless .Tn ASCII found by jca@ with mandoc -Tlint | schwarze | 2017-09-02 | 1 | -5/+4 |
* | Remove OPENSSL_NO_NEXTPROTONEG - some software creates conflicting | jsing | 2017-08-31 | 1 | -1/+0 |
* | Mention strtok_r in STANDARDS | jca | 2017-08-31 | 1 | -2/+6 |
* | Move the full extension building into tlsext_{client,server}hello_build(), | jsing | 2017-08-30 | 2 | -47/+26 |
* | Bump libssl/libtls minors due to symbol (re)addition. | jsing | 2017-08-30 | 2 | -2/+2 |
* | Bring back the NPN related symbols. | jsing | 2017-08-30 | 3 | -3/+36 |
* | Bring back the RSA_SSLV23_PADDING define. | jsing | 2017-08-30 | 1 | -1/+2 |
* | Fix ifdef to if in gcm128.c | inoguchi | 2017-08-30 | 1 | -2/+2 |
* | When OCSP status type is unknown, ignore the extension. | doug | 2017-08-29 | 1 | -1/+6 |
* | When parsing extensions by calling the parse functions directly, ensure | jsing | 2017-08-29 | 1 | -2/+82 |
* | Actually parse the ALPN extension in a client hello, even if no ALPN | jsing | 2017-08-29 | 1 | -4/+4 |
* | ECDHE-RSA-DES-CBC3-SHA should not be marked HIGH. | jsing | 2017-08-28 | 1 | -2/+2 |
* | Some style(9). | jsing | 2017-08-28 | 1 | -3/+6 |
* | Remove chacha20-poly1305-old regress and test vectors. | jsing | 2017-08-28 | 2 | -627/+0 |
* | Remove SSLv23 padding mode. | jsing | 2017-08-28 | 2 | -7/+5 |
* | Bump lib{crypto,ssl,tls} majors due to symbol removals. | jsing | 2017-08-28 | 3 | -6/+6 |
* | Remove EVP_aead_chacha20_poly1305_old() now that the original/old | jsing | 2017-08-28 | 3 | -83/+28 |
* | Remove documentation for EVP_aead_chacha20_poly1305_ietf() - this was | jsing | 2017-08-28 | 1 | -13/+3 |
* | Put the opening curly brace in the right place. | jsing | 2017-08-28 | 1 | -2/+3 |
* | Remove RSA_padding_add_SSLv23()/RSA_padding_check_SSLv23() and related | jsing | 2017-08-28 | 9 | -202/+11 |
* | Define OPENSSL_NO_NEXTPROTONEG since there is no longer any NPN. | jsing | 2017-08-28 | 1 | -0/+1 |
* | Completely remove NPN remnants. | jsing | 2017-08-28 | 7 | -107/+9 |
* | Use current chacha20-poly1305 cipher suite values. | jsing | 2017-08-28 | 1 | -7/+7 |
* | Update due to removal of original chacha20-poly1305 cipher suites. | jsing | 2017-08-28 | 1 | -42/+39 |
* | Remove the original (pre-IETF) chacha20-poly1305 cipher suites. | jsing | 2017-08-28 | 4 | -73/+5 |
* | Fix unchecked return nit | beck | 2017-08-28 | 1 | -2/+5 |
* | Rewrite SRTP extension using CBB/CBS and the new extension framework. | doug | 2017-08-27 | 6 | -275/+652 |