| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2015-09-02 | Replace dtls1_client_hello() with ssl3_client_hello() - both are basically | jsing | 6 | -212/+58 | |
| the same code, with two slight differences for DTLS handling. Also, make use of send_cookie to determine if the client random needs to be preserved, rather than testing if it is zeroed (hopefully your random number generator never returned all zeros, since the existing code would break). Inspired by BoringSSL. ok doug@ | |||||
| 2015-09-02 | Fewer magic numbers - we already have defines for the header lengths, so | jsing | 2 | -10/+14 | |
| make use of them. ok doug@ | |||||
| 2015-09-01 | Add an initial TLS client regress, which currently covers ClientHello | jsing | 3 | -1/+369 | |
| message generation. | |||||
| 2015-09-01 | Remove duplicate prototype for SSL_get_selected_srtp_profile(). | jsing | 2 | -4/+2 | |
| From Aaron Burghardt. | |||||
| 2015-09-01 | Remove the ssl_prepare_{client,server}hello_tlsext() functions, which are | jsing | 10 | -68/+10 | |
| now nothing more than noops. ok bcook@ doug@ | |||||
| 2015-09-01 | Make it always safe to call CBB_cleanup() providing that CBB_init() or | jsing | 2 | -4/+16 | |
| CBB_init_fixed() have been attempted. ok doug@ | |||||
| 2015-08-31 | Add framework for resolving (pun intended) libc namespace issues, using | guenther | 43 | -49/+233 | |
| wrapper .h files and asm labels to let internal calls resolve directly and not be overridable or use the PLT. Then, apply that framework to most of the functions in stdio.h, string.h, err.h, and wchar.h. Delete the should-have-been-hidden-all-along _v?(err|warn)[cx]? symbols while here. tests clean on i386, amd64, sparc64, powerpc, and mips64 naming feedback from kettenis@ and millert@ ok kettenis@ | |||||
| 2015-08-30 | Use nanosleep instead of sleep to avoid the extra layer and simplify later | guenther | 1 | -5/+8 | |
| symbol hiding ok w/tweak deraadt@ | |||||
| 2015-08-29 | Now that SSLv3 is going away, TLS_* and SSLv23 are equivalent. | doug | 7 | -288/+12 | |
| Remove the TLS method data and tls_any_* functions. Point to SSLv23. ok jsing@ | |||||
| 2015-08-29 | Delete s3_meth.c since it was only for SSLv3 support. | doug | 1 | -103/+0 | |
| ok jsing@ | |||||
| 2015-08-29 | Remove SSLv3 method data structs and unlink s3_meth.c from the build. | doug | 5 | -164/+6 | |
| ok jsing@ | |||||
| 2015-08-28 | Kill coverity 128475 | beck | 2 | -4/+4 | |
| ok doug@ | |||||
| 2015-08-27 | Improve libtls error messages. | jsing | 5 | -55/+101 | |
| The tls_set_error() function previously stored the errno but did nothing with it. Change tls_set_error() to append the strerror(3) of the stored errno so that we include useful information regarding failures. Provide a tls_set_errorx() function that does not store the errno or include strerror(3) in the error message. Call this function instead of tls_set_error() for errors where the errno value has no useful meaning. With feedback from and ok doug@ | |||||
| 2015-08-27 | Split the persistent/configuration flags from temporary state flags and | jsing | 3 | -11/+14 | |
| ensure that the temporary state flags get cleared in tls_reset(). Fixes a bug spotted by Marko Kreen whereby TLS_CONNECTING could remain on reset. While here, also move the TLS_STATE_CONNECTING check to after the TLS_CLIENT check - if TLS_STATE_CONNECTING was ever set on any other context type it would allow a bypass. ok bluhm@ | |||||
| 2015-08-27 | Change AEAD out_len argument to size_t instead of ssize_t - while here, | jsing | 2 | -20/+16 | |
| rename it to out_len so that its purpose is more obvious. Also, drop two checks that are no longer possible (and have not been for a long time). Spotted by and ok doug@ | |||||
| 2015-08-27 | Remove SSLv3 support from LibreSSL regression tests. | doug | 3 | -56/+5 | |
| 2015-08-27 | Make functions that are internal to tls verify static. | jsing | 1 | -7/+8 | |
| Spotted by Marko Kreen. Rides libtls major bump. | |||||
| 2015-08-27 | Crank major version for libssl and libtls due to SSLv3 removal. | doug | 3 | -3/+3 | |
| 2015-08-27 | Remove SSLv3 support from LibreSSL. | doug | 20 | -178/+36 | |
| This is the first wave of SSLv3 removal which removes the main SSLv3 functions. Future commits will remove the rest of the SSLv3 support. Discussed the plan at c2k15. Input from jsing@, beck@, miod@, bcook@, sthen@, naddy@, and deraadt@. ok jsing@, beck@ | |||||
| 2015-08-27 | Use static and __{BEGIN,ENV}_HIDDEN_DECLS to hide a bunch of internal | guenther | 2 | -4/+7 | |
| symbols that are not longer exported. (This improves the generated code.) ok deraadt@ | |||||
| 2015-08-27 | Move the __rand48_* declarations into rand48.h, and then hide both them | guenther | 7 | -25/+13 | |
| and __dorand48() and __rand48_deterministic ok deraadt@ | |||||
| 2015-08-25 | unify versions, so they are easier to diff. | deraadt | 8 | -18/+18 | |
| 2015-08-25 | KNF | deraadt | 2 | -12/+8 | |
| 2015-08-23 | ISO8859-1 support has been removed | guenther | 1 | -8/+1 | |
| ok semarie@ | |||||
| 2015-08-22 | Remove all duplicate prototypes for *_main functions (these are already | jsing | 42 | -185/+102 | |
| provided by progs.h). Also, move the FUNCTION type (and flags) into openssl.c since that is the only place of use. Lastly, remove pointless 'extern' from the prototypes and use char **argv instead of char *argv[] (the former is used elsewhere). ok deraadt@ doug@ | |||||
| 2015-08-22 | Unify error message between client and server. | jsing | 1 | -2/+2 | |
| 2015-08-22 | SSL_set_app_data is a macro for SSL_set_ex_data(), which is a wrapper | jsing | 2 | -6/+10 | |
| around CRYPTO_set_ex_data(), which can fail. Since this is the case, check the return value of CRYPTO_set_ex_data^WSSL_set_ex_data^WSSL_set_app_data. | |||||
| 2015-08-22 | Store a reference to the libtls context in the SSL client connection app | jsing | 1 | -1/+3 | |
| data (as is already done for server connections). From Marko Kreen. | |||||
| 2015-08-22 | Make tls_read()/tls_write always set outlen to zero on error - this got | jsing | 1 | -5/+5 | |
| broken by r1.4. Spotted by Marko Kreen. | |||||
| 2015-08-20 | All these files include <stdlib.h>, so do not need to cast | deraadt | 2 | -5/+5 | |
| malloc/calloc/realloc* returns. | |||||
| 2015-08-20 | bump to 2.3.0 for the next LibreSSL release cycle | bcook | 2 | -6/+6 | |
| 2015-08-19 | Properly handle missing TLS extensions in client hello as a non-failure. | bcook | 2 | -2/+6 | |
| Noticed by @Ligushka from github. ok miod@, doug@ | |||||
| 2015-08-19 | bring prototypes into scope, requires movement of a large global object | deraadt | 8 | -202/+208 | |
| out of .h file ok jsing | |||||
| 2015-08-18 | typos | miod | 10 | -10/+10 | |
| 2015-08-11 | Improve openssl s_client -starttls xmpp support. | landry | 2 | -7/+28 | |
| From https://rt.openssl.org/Ticket/Display.html?id=2860&user=guest&pass=guest - add a -xmpphost option to specify the xmpp virtual host - fix an infinite loop when the vhost isnt what the server expects - fix communication with openfire & prosody servers with tweaks & ok bcook@ doug@ manpage bits jmc@ | |||||
| 2015-08-02 | spelling; ok deraadt | jmc | 2 | -4/+4 | |
| 2015-08-02 | remove ssl3 bits; ok doug | jmc | 1 | -58/+14 | |
| 2015-07-31 | Don't hardcode /usr/src, use BSDSRCDIR | tobiasu | 1 | -2/+2 | |
| 2015-07-31 | Fix SRTP parsing. | doug | 2 | -6/+4 | |
| jsing@ noticed that during the CBS conversion, an extra CBS_len comparison was introduced. It should be 0 after extracting MKI. ok jsing@ bcook@ deraadt@ | |||||
| 2015-07-29 | Add linker warnings in case SSLv3_{,client,server}_method are referenced. | miod | 5 | -5/+35 | |
| Use of this symbols proves the existence of a code path willingly using SSLv3, even with OPENSSL_NO_SSL3 being defined, which hints that it needs fixing. Discussed with the LibreSSL cabal during c2k15; ok deraadt@ | |||||
| 2015-07-29 | Use named initialisers for X509V3_EXT_METHOD structs (for the usual | jsing | 38 | -456/+1176 | |
| reasons) - only change in generated assembly is due to line numbering. | |||||
| 2015-07-29 | Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generated | jsing | 40 | -108/+108 | |
| assembly. ok bcook@ | |||||
| 2015-07-29 | Expand obsolete M_ASN1_STRING_* macros in asn1_lib.c, apply some style(9) | jsing | 2 | -12/+10 | |
| and drop an unnecessary return from a void function. ok bcook@ doug@ | |||||
| 2015-07-27 | use file system path (.Pa) semantic markup macros where appropriate. | sobrado | 1 | -7/+7 | |
| ok jmc@ | |||||
| 2015-07-27 | Less asn1_mac.h - asn1_lib.c does not need it and x_pkey.c should be | jsing | 4 | -20/+10 | |
| using ASN1err() instead of ASN1_MAC_H_err(). ok miod@ | |||||
| 2015-07-26 | remove unused variable | chl | 1 | -2/+2 | |
| ok tedu@ | |||||
| 2015-07-25 | double words fix; docs are slowly getting moved to mdoc, but this | sobrado | 4 | -4/+4 | |
| change will help people translating them. ok jmc@, schwarze@ | |||||
| 2015-07-25 | Place the ASN.1 template macros (and remaining implement macros) under | jsing | 2 | -6/+12 | |
| #ifndef LIBRESSL_INTERNAL - we're not using these anymore! | |||||
| 2015-07-25 | double word fix. | sobrado | 1 | -2/+2 | |
| ok jmc@, schwarze@ | |||||
| 2015-07-25 | Expand another ASN.1 template macro that snuck through last time around. | jsing | 2 | -4/+16 | |
| No change in generated assembly. | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |