summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Create contexts for server side SNI - these include the additional SSL_CTXjsing2016-08-223-3/+174
| | | | | | | | | that is required for certificate switching with libssl and the certificate itself so that we can match against the subject and SANs. Hook up the servername callback and switch to the appropriate SSL_CTX if we find a matching certificate. ok beck@
* shorten the pkcs8 text;jmc2016-08-221-179/+63
|
* Sorry Andrew and Luke, I'm pretty sure we deleted your IRIX and VMS code.deraadt2016-08-221-4/+1
|
* shorten pkcs7 text;jmc2016-08-201-58/+37
|
* shorten the passwd text; ok jsingjmc2016-08-201-48/+14
|
* shorten the ocsp text; ok beckjmc2016-08-191-199/+71
|
* Split out the TLS server SSL_CTX allocation and configuration code, sojsing2016-08-181-19/+37
| | | | | | that it can be reused to allocate the additional SSL_CTXs needed for SNI. ok reyk@
* Rework parts of the libtls man page for clarity. Split out the connectionjsing2016-08-181-45/+35
| | | | | | | information related functions under their own heading and dedup the text relating to when these functions can be called. With input from and ok jmc@
* shorten the nseq text;jmc2016-08-181-41/+17
|
* wrterror() is fatal, delete dead code; ok tom@ natano@ tedu@otto2016-08-171-61/+22
|
* shorten genrsa; ok jsingjmc2016-08-161-42/+18
|
* The tls_conninfo serial is also unused.jsing2016-08-151-2/+1
|
* Group conninfo fields by connection and peer cert based information,jsing2016-08-151-5/+6
| | | | sort and remove unused fingerprint.
* Fix some style(9) issues.jsing2016-08-151-3/+6
|
* Explicitly pass in an SSL_CTX * to the functions that operate on one,jsing2016-08-154-37/+38
| | | | | | | | | | | instead of assuming that they should use the one associated with the TLS context. This allows these functions to be used with the additional SSL contexts that are needed to support server-side SNI. Also rename tls_configure_keypair() to tls_configure_ssl_keypair(), so that these functions have a common prefix. ok reyk@
* add a bit of spacing to previous, to keep the notes about deprecatedjmc2016-08-152-4/+6
| | | | | | functions out the way of the main body; ok guenther
* Reduce qabs() and qdiv() to aliases of llabs() and lldiv().guenther2016-08-1412-228/+36
| | | | | | Merge the manual pages and call them deprecated there. ok and manpage tweak jmc@, ok natano@
* shorten genpkey; ok guentherjmc2016-08-141-78/+23
|
* shorten gendsa;jmc2016-08-131-20/+12
|
* Avoid leaking memory if tls_config_set_alpn() is called multiple timesjsing2016-08-131-4/+5
| | | | (this was in the original commit, but got reverted in the recommit).
* Let libtls load the CA, certificate and key files for nc(1), now that itjsing2016-08-131-22/+15
| | | | | | does this at the time the tls_config_set_*_file() function is called. ok bluhm@
* Load CA, certificate and key files into memory when the appropriatejsing2016-08-133-44/+98
| | | | | | | | | | tls_config_set_*_file() function is called. This allows us to immediately propagate useful error messages, play more nicely with privsep/pledge and have a single code path. Instead of always loading the default CA when tls_config_new() is called, defer and only load the default CA when tls_configure() is invoked, if a CA has not already been specified. ok beck@ bluhm@
* Bump libtls minor due to symbol additions.jsing2016-08-121-1/+1
|
* Add ALPN support to libtls.jsing2016-08-127-16/+168
| | | | ok beck@ doug@
* trim errstr, and zap gendh (deprecated) entirely;jmc2016-08-121-26/+1
|
* shorten openssl enc, with help from jsing;jmc2016-08-121-201/+39
| | | | ok jsing beck
* shorten ecparam;jmc2016-08-101-102/+50
|
* trim the ec text;jmc2016-08-091-92/+39
|
* trim the dsaparam section; ok guentherjmc2016-08-081-56/+36
|
* Update the link for the getentropy(2) manual to man.openbsd.org/tb2016-08-0716-32/+32
| | | | ok deraadt@
* Do not *printf %s NULLderaadt2016-08-052-4/+6
| | | | ok bcook
* Obvious minor fixes:schwarze2016-08-052-36/+57
| | | | | | | | * Add missing .Dv, .Ev, and .Fa macros. * Delete deprecated .Tn macros. * Mark up global variable names with .Va, not with .Fa or .Li. * Mark up config file commands with .Ic, not with .Fa. * Fix HISTORY, trivial to verify from the CSRG archive CD.
* shorten the openssl dsa text;jmc2016-08-051-69/+35
|
* Make RES_OPTIONS point directly to resolv.conf(5) instead of going throughmartijn2016-08-051-3/+3
| | | | | | resolver(3). OK jmc@
* shorten the openssl dhparam text;jmc2016-08-031-84/+32
| | | | guenther helped rewrite the -dsaparam parts.
* Revert previous since it adds new symbols.jsing2016-08-028-170/+16
| | | | Requested by deraadt@
* Bump TLS_API for addition of ALPN support.jsing2016-08-011-2/+2
|
* Add ALPN support to libtls.jsing2016-08-017-15/+168
| | | | ok beck@ doug@
* shorten the openssl dgst text; in particular, do not try tojmc2016-08-011-53/+24
| | | | list all the available digests;
* bump for LibreSSL 2.5.xbcook2016-07-312-6/+6
|
* use the style from the man page examples for getaddrinfo, which makes ahalex2016-07-301-21/+19
| | | | | | bit more sense ok jung@ deraadt@
* remove HISTORY: it was a nonsense;jmc2016-07-281-25/+1
|
* some text cutting, after feedback from jsing;jmc2016-07-281-12/+12
|
* rework crl2pkcs7; with help from jsingjmc2016-07-231-57/+18
|
* rework DESCRIPTION a little: no-command seems clearer than no-XXX;jmc2016-07-211-17/+12
|
* rename NOTES to COMMON SYNTAX (explains itself better); rework thejmc2016-07-211-43/+44
| | | | | | passphrase section a little; move the DER|PEM stuff in there to help avoid text repetition, and prefer the lowercase (less keys to press); adjust ENVIRONMENT to format a little more nicely;
* strip back openssl crl somewhat: remove the examplesjmc2016-07-211-41/+21
| | | | and move any relevant text into the main body;
* strip back openssl ciphers:jmc2016-07-201-106/+60
| | | | | | - rearrange the descriptions of -V and -v to read more logically - move the cipherlist text into the cipherlist description - zap examples
* strip back openssl ca: in particular remove some excessively wordy sections,jmc2016-07-191-337/+120
| | | | | move some other sections into more relevant places, and remove the example ca file;
* don't mix code and decls, ok tedu@bcook2016-07-182-4/+6
|
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-01 05:02:28 +0000