openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Files	Lines
2016-06-06	Correct a problem that prevents the DSA signing algorithm from running	beck	2	-8/+12
	in constant time even if the flag BN_FLG_CONSTTIME is set. This issue was reported by Cesar Pereida (Aalto University), Billy Brumley (Tampere University of Technology), and Yuval Yarom (The University of Adelaide and NICTA). The fix was developed by Cesar Pereida.
2016-06-06	LibreSSL 2.4.1	bcook	2	-6/+6

2016-06-02	Fix typo; the period should be outside the parens. From Michael McConville	millert	1	-3/+3

2016-06-02	Let netcat support the use of service names instead of port numbers.	beck	2	-18/+34
	based on a diff from Andras Farkas <deepbluemistake@gmail.com> ok deraadt@
2016-05-30	Gix misleading indent pointed out by GCC 6.1.libressl-v2.4.0	bcook	1	-4/+4
	ok beck@ jsing@
2016-05-30	deprecate internal use of EVP_[Cipher\|Encrypt\|Decrypt]_Final.	beck	8	-24/+40
	14 years ago these were changed in OpenSSL to be the same as the _ex functions. We use the _ex functions only internally to ensure it is obvious the ctx must be cleared. ok bcook@
2016-05-30	The icdb magic number doesn't need to be visible to static links	guenther	1	-2/+2
	ok tedu@
2016-05-29	Remove dead support for changing BDB hash algorithm and cache of alternatives	guenther	1	-5/+4
	ok natano@ millert@ deraadt@
2016-05-29	Nuke sigret.c	beck	2	-198/+0
	ok deraadt@ kettenis@
2016-05-29	We don't have sigreturn anymore	beck	1	-2/+2

2016-05-29	Prefer AF_* over PF_* and 'address family' over 'protocol family'	guenther	1	-9/+9
	ok jung@
2016-05-28	Fix pledge violation with -P s used and we need to supply a password	beck	1	-3/+12
	for an http proxy - we need tty in this case. Found and fixed by Anthony Coulter <bsd@anthonycoulter.name>. ok tb@
2016-05-28	Fix nc -verbose mode when used on a unix domain socket.	beck	1	-5/+11
	Noticed by and a modified version of fix from <attila@stalphonsos.com>
2016-05-28	rcmd(3) and rcmdsh(3) use getaddrinfo(3) not gethostbyname(3).	millert	2	-9/+9

2016-05-28	Use getaddrinfo() instead of the non-standard gethostbyname2().	millert	1	-5/+14
	OK deraadt@ jca@ jung@ florian@
2016-05-27	Rename some of the internal error setting functions to more closely follow	jsing	3	-14/+48
	existing naming standards. Also provide functions for setting a struct tls_error * directly (rather than having to have a struct tls * or a struct tls_config *).
2016-05-27	Avoid leaking ca_mem when freeing a tls_config.	jsing	1	-1/+2

2016-05-27	Fix function parameters that do not have an underscore prefix.	jsing	1	-10/+10

2016-05-27	typo fixes; Anthony Coulter	sthen	1	-3/+3

2016-05-26	The destination string is declared as "s" but referred to as "dst"	millert	1	-5/+5
	in some cases. Be consistent and use "dst" everywhere like for strlcat(3) and strncat(3). From Tim Kuijsten.
2016-05-26	tests for the two segfaults in backref() that were just fixed	schwarze	1	-1/+4

2016-05-26	Fix an oversight that caused the test program to segfault:	schwarze	1	-2/+2
	Don't try to calculate strlen(NULL).
2016-05-26	systematically test all combinations of REG_STARTEND, REG_NEWLINE,	schwarze	1	-9/+85
	and REG_NOTBOL with line and word anchors
2016-05-26	support for testing REG_STARTEND together with REG_NOTBOL	schwarze	1	-1/+4

2016-05-25	use -nameopt esc_msb so "NetLock Kft" cert has the non-ascii	jsg	1	-2/+2
	and non-utf8 bytes escaped. ok sthen@
2016-05-23	Remove iruserok(_sa)? and __ivaliduser(sa)?	guenther	2	-90/+20
	ok millert@ deraadt@
2016-05-23	Eliminate __check_rhosts_file and __rcmd_errstr: they were only used by	guenther	1	-5/+1
	rlogind and rshd (remember them?) ok deraadt@