| Commit message (Expand) | Author | Age | Files | Lines |
* | Plug leaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -1/+5 |
* | Plug a number of leaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -2/+9 |
* | Garbage collect the unused hash and print kp->pubkey_hash instead of NULL. | tb | 2022-02-08 | 1 | -7/+4 |
* | Fix memleaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -3/+5 |
* | Change second argument of x25519_ge_scalarmult_base() from | tb | 2022-02-08 | 1 | -2/+2 |
* | Avoid a NULL dereference in BN_mod_exp2_mont() | tb | 2022-02-07 | 1 | -2/+2 |
* | Check for zero modulus in BN_MONT_CTX_set(). | tb | 2022-02-07 | 1 | -1/+4 |
* | Remove i <= 0 checks from SSL_get_error() | jsing | 2022-02-06 | 1 | -15/+16 |
* | Handle zero byte reads/writes that trigger handshakes in the TLSv1.3 stack. | jsing | 2022-02-06 | 1 | -1/+5 |
* | cope with recent S3I removal; ok tb@ | anton | 2022-02-06 | 1 | -2/+2 |
* | remove please from manual pages | jsg | 2022-02-06 | 2 | -6/+6 |
* | Adapt appstest.sh for the new TLS_ names. | tb | 2022-02-05 | 1 | -9/+5 |
* | Add a workaround due to OpenSSL's limitation of SSL_CTX_set_cipher_list | tb | 2022-02-05 | 1 | -1/+5 |
* | Mechanically adjust from AEAD- to TLS_ to adjust to the new cipher names. | tb | 2022-02-05 | 1 | -10/+5 |
* | Adjust the ssl_get_shared_ciphers to the new names. | tb | 2022-02-05 | 1 | -23/+23 |
* | Switch TLSv1.3 cipher names from AEAD- to OpenSSL's TLS_ | tb | 2022-02-05 | 3 | -16/+22 |
* | Revise for S3I removal. | jsing | 2022-02-05 | 1 | -81/+81 |
* | Bye bye S3I. | jsing | 2022-02-05 | 23 | -772/+755 |
* | Bump libressl's version in pkgconfig to 2.0.0 | tb | 2022-02-04 | 2 | -4/+6 |
* | Remove a strange inheritance check from addr_validate_path_internal() | tb | 2022-02-04 | 1 | -4/+1 |
* | Fix capitalization of ChaCha20 | tb | 2022-02-04 | 1 | -3/+3 |
* | Unindent and unwrap lines. Pull up a NULL check. No functional change. | tb | 2022-02-03 | 1 | -28/+26 |
* | Remove commented variable declarations | tb | 2022-02-03 | 1 | -6/+1 |
* | Fix copy-paste error: X509_V_ERR_CRL_SIGNATURE_FAILURE means that the | tb | 2022-02-03 | 1 | -3/+3 |
* | Use X509_*get0_pubkey() wherever possible to simplify and clean up | tb | 2022-02-03 | 3 | -36/+22 |
* | Remove some stale comments. | tb | 2022-02-03 | 1 | -21/+1 |
* | Cleanup/simplify ssl_cert_type() | jsing | 2022-02-03 | 6 | -34/+24 |
* | Use TLS_PADDING_* defines. | jsing | 2022-02-01 | 1 | -4/+6 |
* | Provide our own signature padding defines. | jsing | 2022-02-01 | 2 | -6/+38 |
* | Revise/simplify for signer interface change. | jsing | 2022-02-01 | 1 | -20/+10 |
* | Revise signer callback interface. | jsing | 2022-02-01 | 2 | -83/+128 |
* | Add test coverage for tls_signer when used with a TLS server. | jsing | 2022-01-30 | 1 | -2/+189 |
* | Add initial regress for tls_signer. | jsing | 2022-01-30 | 3 | -1/+305 |
* | Add limits.h for INT_MAX in tls_signer.c | inoguchi | 2022-01-29 | 1 | -1/+3 |
* | Error check for sk_push in libssl | inoguchi | 2022-01-28 | 1 | -4/+7 |
* | Error check for sk_push in libssl | inoguchi | 2022-01-28 | 1 | -2/+5 |
* | Expose tls_signer_error() | jsing | 2022-01-28 | 1 | -0/+1 |
* | sort includes as usual | tb | 2022-01-27 | 1 | -2/+2 |
* | Do not depend on engine.h pulling in err.h and evp.h | tb | 2022-01-27 | 2 | -6/+10 |
* | whitespace | tb | 2022-01-26 | 1 | -4/+4 |
* | minor bump after api additiom | eric | 2022-01-25 | 1 | -1/+1 |
* | Introduce a signer interface intented to make TLS privsep simpler | eric | 2022-01-25 | 7 | -5/+438 |
* | Rewrite paragraph to refer to EVP_CIPHER_CTX_new() and HMAC_CTX_new() | tb | 2022-01-25 | 1 | -6/+6 |
* | Remove some HMAC_CTX_init() remnants in HMAC(3). | tb | 2022-01-25 | 1 | -31/+5 |
* | Fix another return 0 bug in SSL_shutdown() | tb | 2022-01-25 | 1 | -6/+8 |
* | Avoid an infinite loop in SSL_shutdown() | tb | 2022-01-25 | 1 | -2/+4 |
* | Document X509_V_ERR_UNNESTED_RESOURCE. Previous version looked good | tb | 2022-01-24 | 1 | -2/+9 |
* | Garbage collect unused ret in ssl3_get_new_session_ticket() | tb | 2022-01-24 | 1 | -5/+4 |
* | In ssl3_get_server_key_exchange() switch a 'goto err' to | tb | 2022-01-24 | 1 | -2/+2 |
* | Avoid use of uninitialized in tlsext_sni_server_parse() | tb | 2022-01-24 | 1 | -1/+3 |