| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Fix checks of memory caps of constraints names | tb | 2021-03-12 | 3 | -20/+32 |
| * | spelling: refenece -> reference | jmc | 2021-03-12 | 1 | -3/+3 |
| * | spelling | jsg | 2021-03-12 | 12 | -37/+37 |
| * | Remove ssl_downgrade_max_version(). | jsing | 2021-03-11 | 5 | -54/+15 |
| * | Check for the existence of p5-IO-Socket-SSL by checking for its SSL.pm | tb | 2021-03-11 | 1 | -3/+4 |
| * | Guard TLS1_get_{client_,}version() macros with #ifndef LIBRESSL_INTERNAL. | jsing | 2021-03-10 | 1 | -1/+3 |
| * | Revise TLS extension regress to match version handling changes. | jsing | 2021-03-10 | 1 | -57/+25 |
| * | Improve internal version handling. | jsing | 2021-03-10 | 9 | -108/+145 |
| * | Change the implementation of the malloc cache to keep lists of | otto | 2021-03-09 | 1 | -152/+118 |
| * | LibreSSL 3.3.2 | bcook | 2021-03-07 | 1 | -3/+3 |
| * | Separate variable declaration and assignment. | jsing | 2021-03-02 | 1 | -2/+4 |
| * | Replace two handrolled tls12_record_protection_engaged(). | jsing | 2021-03-02 | 1 | -3/+3 |
| * | Move key/IV length checks closer to usage sites. | jsing | 2021-03-02 | 1 | -5/+11 |
| * | Add tls12_record_protection_unused() and call from CCS functions. | jsing | 2021-03-02 | 1 | -8/+17 |
| * | Fix misleading indentation in SSL_get_error() | tb | 2021-03-02 | 1 | -2/+2 |
| * | Move handling of cipher/hash based cipher suites into the new record layer. | jsing | 2021-02-27 | 5 | -200/+141 |
| * | Identify DTLS based on the version major value. | jsing | 2021-02-27 | 1 | -2/+2 |
| * | Set is_trusted in x509_verify_ctx_add_chain() | tb | 2021-02-26 | 1 | -2/+2 |
| * | zap spades of trailing whitespace | tb | 2021-02-26 | 1 | -266/+266 |
| * | Fix two bugs in the legacy verifier | tb | 2021-02-25 | 1 | -6/+10 |
| * | Update regress to match TLS versions change. | jsing | 2021-02-25 | 1 | -6/+6 |
| * | Only use TLS versions internally (rather than both TLS and DTLS versions). | jsing | 2021-02-25 | 9 | -128/+132 |
| * | Rename depth to num_untrusted so it identifies what it actually represents. | jsing | 2021-02-25 | 1 | -6/+6 |
| * | Avoid passing last and depth to x509_verify_cert_error() on ENOMEM. | jsing | 2021-02-25 | 1 | -3/+2 |
| * | - Make use of the fact that we know how the chunks are aligned, and | otto | 2021-02-25 | 2 | -49/+83 |
| * | Fix comment explaining last_untrusted. This should really be called | tb | 2021-02-24 | 1 | -2/+2 |
| * | Make the new validator check for EXFLAG_CRITICAL | tb | 2021-02-24 | 1 | -8/+15 |
| * | Make this test module aware so it passes with Go 1.16 | tb | 2021-02-23 | 2 | -0/+8 |
| * | Fix bizarre punctuation and capitalization in a comment. | tb | 2021-02-22 | 1 | -2/+2 |
| * | Simplify version checks in the TLSv1.3 client | tb | 2021-02-22 | 1 | -22/+10 |
| * | Factor out/change some of the legacy client version handling code. | jsing | 2021-02-22 | 3 | -12/+36 |
| * | ugly whitespace | tb | 2021-02-20 | 2 | -14/+14 |
| * | Rename f_err into fatal_err. | tb | 2021-02-20 | 7 | -183/+183 |
| * | Rename the truncated label into decode_err. This describes its purpose | tb | 2021-02-20 | 2 | -73/+73 |
| * | Revise regress to match change in SSL{_CTX,}_get_{min,max}_proto_version(). | jsing | 2021-02-20 | 1 | -34/+45 |
| * | Return a min/max version of zero if set to zero. | jsing | 2021-02-20 | 3 | -17/+41 |
| * | Add DTLSv1.2 methods. | jsing | 2021-02-20 | 2 | -3/+159 |
| * | Handle DTLS1_2_VERSION in various places. | jsing | 2021-02-20 | 3 | -6/+9 |
| * | Revise HelloVerifyRequest handling for DTLSv1.2. | jsing | 2021-02-20 | 2 | -4/+14 |
| * | Group HelloVerifyRequest decoding and add missing check for trailing data. | jsing | 2021-02-20 | 1 | -4/+5 |
| * | Add various public DTLS related defines. | jsing | 2021-02-20 | 2 | -2/+14 |
| * | Clean up/simplify dtls1_get_cipher(). | jsing | 2021-02-20 | 1 | -7/+8 |
| * | Pull in fix for EVP_CipherUpdate() overflow from OpenSSL. | tb | 2021-02-18 | 1 | -1/+23 |
| * | mark test-inlabel-wildcard-cert-no-CA-client as an expected failure | tb | 2021-02-18 | 1 | -1/+2 |
| * | Add x509 certificate validation regression tests | jan | 2021-02-16 | 3 | -2/+242 |
| * | Only print the certificate file once on verifification failure. | jsing | 2021-02-15 | 1 | -4/+2 |
| * | Some people still argue that rand(3) and random(3) have suitable deterministic | deraadt | 2021-02-12 | 2 | -4/+10 |
| * | Sync cert.pem with Mozilla NSS root CAs, except "GeoTrust Global CA", ok tb@ | sthen | 2021-02-12 | 1 | -659/+417 |
| * | A few more flag combo's to test | otto | 2021-02-12 | 1 | -2/+14 |
| * | KNF | tb | 2021-02-11 | 1 | -4/+7 |
