Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2021-05-12 | Add obj_xref for ECDH schemes in RFC 5753 | inoguchi | 2 | -1/+34 | |
Found missing sigoid_srt record in crypto/objects/obj_xref.h, and this causes error while executing openssl cms -encrypt with EC key/cert. Added required definitions to obj_xref.txt and obj_xref.h. Issue reported by Theodore Wynnychenko (tmw <at> uchicago.edu) on misc. ok tb@ | |||||
2021-05-11 | Document SSL_CTX_get_ssl_method(3) | tb | 1 | -4/+15 | |
2021-05-11 | Merge some details from OpenSSL 1.1.1. | tb | 2 | -6/+24 | |
2021-05-11 | missing word in previous | tb | 1 | -1/+2 | |
2021-05-11 | Merge documentation for EVP_DigestVerify() from OpenSSL 1.1.1. | tb | 1 | -4/+37 | |
2021-05-11 | Merge documentation for EVP_DigestSign from OpenSSL 1.1.1. | tb | 1 | -4/+39 | |
2021-05-11 | zap stray comma | tb | 1 | -3/+3 | |
2021-05-10 | Replace unnecessary calls to EC_GROUP_get_curve_GF{p,2m}() with | tb | 1 | -15/+3 | |
EC_GROUP_get_curve() and remove no longer needed prototypes. | |||||
2021-05-10 | It's no longer necessary to link ecdhtest statically. | tb | 1 | -2/+2 | |
2021-05-10 | Merge documentation for EC_GROUP_{set,get}_curve(3) from OpenSSL 1.1.1. | tb | 1 | -20/+57 | |
2021-05-10 | Merge documentation for EC_POINT_{get,set}_coordinates and | tb | 1 | -20/+70 | |
for EC_POINT_set_compressed_coordinates from OpenSSL 1.1.1. | |||||
2021-05-10 | give libtls the same bump as libssl | tb | 1 | -2/+2 | |
2021-05-10 | bump libssl major after struct visibility changes and symbol addition | tb | 1 | -2/+2 | |
2021-05-10 | bump libcrypto minor after symbol addition | tb | 1 | -1/+1 | |
2021-05-10 | Make SSL_CIPHER, SSL_CTX, SSL_SESSION, {DTLS1,SSL3}_STATE | tb | 3 | -8/+7 | |
and a few other structs in libssl opaque. from/ok jsing | |||||
2021-05-10 | Provide SSL_SESSION_get0_cipher(3) | tb | 3 | -2/+10 | |
ok jsing | |||||
2021-05-10 | Provide SSL_CTX_get_ssl_method(3) | tb | 3 | -2/+11 | |
ok jsing | |||||
2021-05-10 | Provide SSL_CIPHER_find(3) | tb | 3 | -2/+10 | |
ok jsing | |||||
2021-05-10 | Expose EVP_Digest{Sign,Verify}(3) | tb | 2 | -5/+3 | |
ok jsing | |||||
2021-05-10 | Expose EC_POINT_{get,set}_affine_coordinates(3) and | tb | 2 | -7/+11 | |
EC_POINT_set_compressed_coordinates(3) ok jsing | |||||
2021-05-10 | Expose EC_GROUP_{get,set}_curve(3) | tb | 2 | -3/+4 | |
ok jsing | |||||
2021-05-09 | Add draft-ietf-sidrops-rpki-rsc OID | job | 2 | -0/+2 | |
Listed under 'SMI Security for S/MIME CMS Content Type (1.2.840.113549.1.9.16.1)' https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-1 OK tb@ | |||||
2021-05-09 | Prepare to provide EVP_Digest{Sign,Verify} | tb | 2 | -3/+35 | |
These are one-shot versions combining EVP_Digest{Sign,Verify}{Update,Final}. and are part of the OpenSSL 1.1.1 API. While they simplify callers in some situations slightly, their real use is for EdDSA that by design can't be split into Update/Final steps. Based on OpenSSL commit 7539418981c140648a620d72edd7398564878b5c ok inoguchi | |||||
2021-05-05 | Replace DTLS w_epoch with epoch from TLSv1.2 record layer. | jsing | 5 | -29/+20 | |
ok inoguchi@ tb@ | |||||
2021-05-05 | Rewrite TLSv1.2 key block handling. | jsing | 5 | -134/+247 | |
For TLSv1.2 a single key block is generated, then partitioned into individual secrets for use as IVs and keys. The previous implementation splits this across two functions tls1_setup_key_block() and tls1_change_cipher_state(), which means that the IV and key sizes have to be known in multiple places. This implementation generates and partitions the key block in a single step, meaning that the secrets are then simply handed out when requested. ok inoguchi@ tb@ | |||||
2021-05-04 | Rename shutdown_all() to shutdown_peers() for consistency. | tb | 1 | -3/+3 | |
2021-05-03 | Use limits.h instead of sys/limits.h in dtlstest.c for portable | inoguchi | 1 | -2/+2 | |
discussed and input from jsing@ | |||||
2021-05-03 | Modify regress ssl_get_shared_ciphers for portable | inoguchi | 2 | -6/+6 | |
- Split out the intermediate path (../certs/) to Makefile - Change 'shutdown' to 'shutdown_all' ok tb@ | |||||
2021-05-03 | Hook openssl-ruby test to regress tree | tb | 1 | -1/+2 | |