summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* ssl_kex: exercise an invalid point as welltb2026-06-091-1/+34
* ssl_kex: ensure decode_error alert is raisedtb2026-06-091-1/+13
* Add a point at infinity check to ecdh_compute_key()tb2026-06-081-1/+4
* tlsext: add XXX to consider refusing anything but uncompressed point formattb2026-06-081-1/+3
* The ssl_kex regress now passes.tb2026-06-081-3/+1
* ssl_kex: ensure the public key uses uncompressed encodingtb2026-06-081-2/+22
* Adjust ssl_kex test for signature change in ssl_kex_peer_public_ecdhe_ecp()tb2026-06-081-5/+10
* Add a decode_error argument to ssl_kex_peer_public_ecdhe_ecp()tb2026-06-083-8/+11
* regress/libssl/unit: add a currently failing test for ECDHE kextb2026-06-082-1/+166
* tls_conn_version: add missing .Pp in HISTORYtb2026-06-071-2/+3
* ec_convert: point_conversion_t -> point_conversion_form_t in a commenttb2026-06-071-3/+3
* ssl_kex: include ssl_local.htb2026-06-071-1/+2
* add X25519MLKEM768 to the start of the default ECDHE curves list, allowingsthen2026-06-062-6/+6
* Correctly handle failure to buffer DTLS messages.jsing2026-06-061-3/+5
* Move DTLS change cipher spec handling to its own function.jsing2026-06-064-14/+22
* Move DTLS handshake message handling to its own function.jsing2026-06-063-14/+30
* Remove ssl3_handshake_msg_hdr_len()jsing2026-06-062-11/+3
* libssl: don't break TLSv1.2 with X25519MLKEM768tb2026-06-062-3/+30
* Add regress tests for DTLS handshake messages.jsing2026-06-062-1/+375
* Drop gcc3 -Wunininitialized workaroundtb2026-06-041-2/+2
* libssl: const correct ssl_*version* APItb2026-06-042-18/+21
* rfc3779: uwrap a linetb2026-06-041-3/+2
* rfc3779: whitespace fixestb2026-06-041-4/+3
* Clean up signature algorithm handling.jsing2026-05-315-261/+66
* Disallow wildcard matching of a TLD specified as a FQDN.jsing2026-05-301-1/+4
* Add a regress test that matches a wildcard for a TLD specified as a FQDN.jsing2026-05-301-1/+9
* Improve test failure message.jsing2026-05-301-3/+4
* Disable builtins in strlcpytest.c. Otherwise, clang w/ optimizationsanton2026-05-301-1/+3
* bettertls/verify: resuls -> resultstb2026-05-291-2/+2
* Fix test_valid_uri() by passing the correct entry to strlen().jsing2026-05-261-2/+2
* remove prototype for removed dtls1_get_cipher()jsg2026-05-251-2/+1
* Remove unused prototype.jsing2026-05-251-2/+1
* rfc3779 test: various minor tweakstb2026-05-221-15/+32
* rfc3779 regress: tweak order of variable declarationstb2026-05-221-2/+2
* rfc3779 test: exercise IPAddressFamily_cmp a bit moretb2026-05-211-1/+168
* remove '#undef _' added for Windows CEjsg2026-05-191-5/+1
* libcrypto/ui: mechanically rename the union _ into utb2026-05-191-29/+29
* libcrypto/ui: move ui_string_st to ui_lib.c. It's only used there.tb2026-05-192-35/+35
* x509_addr: do not call memcmp() on NULLtb2026-05-181-5/+5
* Introduce and use dtls12_handshake_msg.jsing2026-05-166-77/+363
* x509_prn: zap more than useless commentstb2026-05-161-8/+1
* x509_prn: hoist unknown_ext_print() above its only caller; drop prototypetb2026-05-161-29/+25
* asn1_print_obstring_ctx: cast to const char * rather than char *tb2026-05-161-2/+2
* unknown_ext_print: avoid casting away consttb2026-05-161-2/+2
* Ensure X509V3_EXT_print() only returns 0 and 1tb2026-05-161-3/+3
* remove unused ssleay.cnf file; ok tb@jsg2026-05-161-78/+0
* ASN1{,_parse}_dump: document return value 2 on EOCtb2026-05-161-3/+7
* BIO_dump: Xr BIO_printf rather than BIO_write/fwritetb2026-05-161-6/+4
* Sync cert.pem with mozilla roots; quite a few CA certificates weresthen2026-05-141-1146/+1
* Add a guarded .note.GNU-stack section to crypto assembly files.jsing2026-05-129-9/+45