openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Files	Lines
7 days	asn1_multi: slightly improve order of variable declarations and freeing	tb	1	-4/+4
7 days	asn1_multi: explicitly test against NULL twice	tb	1	-3/+3
7 days	asn1_multi: assign and test twice	tb	1	-5/+7
7 days	asn_multi: rename bad label to err	tb	1	-10/+10
7 days	asn1_multi: rework creation of the returned stack	tb	1	-9/+12
7 days	asn1_multi: fix a comment	tb	1	-3/+2
7 days	asn1_multi: plug leak if sk_ASN1_TYPE_push() fails	tb	1	-6/+8
7 days	a_type: add XXX to consider adding an internal ASN1_TYPE_set0()	tb	1	-1/+2
8 days	install SSL_CTX_set_num_tickets.3; ok tb@	jsg	1	-1/+2
8 days	These function -> These functions	jsg	3	-9/+9
8 days	small regression test for getexecpath(3)	deraadt	3	-2/+34
8 days	pkcs7test: fix thinko in fatal()	tb	1	-2/+2
9 days	pkcs7test: missing article	tb	1	-2/+2
9 days	pkcs7test: add an empty line	tb	1	-1/+2
9 days	spelling; ok tb@	jsg	4	-10/+10
9 days	PKCS7_stream: avoid out of bounds access	tb	1	-1/+5
9 days	Add test case causing an OOB access in PKCS7_stream	tb	1	-1/+61
9 days	PKCS7_stream: don't crash on omitted content	tb	1	-1/+15
9 days	"Stream" valid PKCS7 objects with omitted content	tb	1	-4/+104
9 days	NID_communityDefinition, not NID_id_ad_communityDefinition	tb	1	-1/+1
9 days	libssl: avoid narrowing return value in dtls1_ctrl	kenjiro	1	-2/+2
9 days	Make CRYPTO_cleanup_all_ex_data() a compatibility no-op	kenjiro	14	-47/+93
11 days	libssl: fix API misuse in legacy finished handling	tb	2	-4/+6
11 days	X509_STORE_CTX_get_error.3: zap extraneous if	tb	1	-2/+2
11 days	X509_STORE_CTX_get_error: validate chain -> validated chain (of certificates)	tb	1	-4/+4
11 days	libssl: ensure server selected ALPN was advertised	tb	1	-6/+20
11 days	tlsext: check we reject unadvertised selected protocol	tb	1	-1/+24
11 days	tlsext_alpn_client_process(): rename list and proto	tb	1	-8/+8
13 days	rsa_eay: Replace handrolled BN_bn2binpad with the real thing	tb	1	-19/+7
13 days	libcrypto: harden cms_kek_cipher() a bit	tb	1	-3/+8
13 days	Don't drop X509_V_ERR_HOSTNAME_MISMATCH when verify callback returns 1	beck	1	-2/+5
13 days	fix a double word; ok tb@	jsg	1	-3/+3
2026-08-25	ICBB -> ICDB	jsg	1	-3/+3
2026-08-25	grammar; a -> an	jsg	8	-24/+24
2026-08-23	Make deprecation of ASN1_STRING_data(3) more prominent	tb	1	-19/+22
2026-08-23	grammar; an program -> a program	jsg	1	-3/+3
2026-08-22	document MALLOC_OPTIONS=D output; OK otto@	schwarze	1	-2/+72
2026-08-21	RFC 8446 -> 9846	tb	1	-2/+2
2026-08-21	Change RFC references from 8446 to 9846 and adjust section numbers	tb	19	-99/+97
2026-08-21	SSL_get_finished: remove comment about TLSv1.0 and TLSv1.1	tb	1	-4/+2
2026-08-21	Simplify handling of remaining record content on switch to legacy stack.	jsing	1	-35/+13
2026-08-21	Allocate TLS 1.3 receive buffers lazily	kenjiro	1	-14/+7
2026-08-20	update cert.pem based on newer mozilla ca root store, ok tb@	sthen	1	-198/+192
2026-08-18	s2i_ASN1_INTEGER.3: mark up second use of usr_data for consistency	tb	1	-3/+5
2026-08-18	libssl: use correct alert for key_share without supported_groups	tb	1	-2/+2
2026-08-14	SSL_CTX_new(): fix spelling of NULL	tb	1	-3/+3
2026-08-11	wycheproof: recognize Cobblestone-{128,256}	tb	1	-1/+3
2026-08-10	hdestroy(3): stop freeing key values	daniel	2	-46/+3
2026-08-10	Check HMAC() return value to avoid a later use of uninitialized data	kenjiro	1	-3/+7
2026-08-08	switch aarch64 CPU feature detection to elf_aux_info()	naddy	1	-63/+19