openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Move cipher configuration handling to the shared SSL configuration function	jsing	2014-09-29	1	-1/+12
\| \| \| \|	so that applies to both the ressl client and server.
*	Add an option that allows the enabled SSL protocols to be explicitly	jsing	2014-09-29	1	-1/+18
\| \| \| \| \| \| \| \|	configured. Discussed with several. ok bcook@
*	Add a new API function SSL_CTX_use_certificate_chain() that allows to	reyk	2014-09-28	1	-16/+5
\| \| \| \| \| \| \| \| \| \| \|	read the PEM-encoded certificate chain from memory instead of a file. This idea is derived from an older implementation in relayd that was needed to use the function with a privep'ed process in a chroot. Now it is time to get it into LibreSSL to make the API more privsep- friendly and to make it available for other programs and the ressl library. ok jsing@ miod@
*	revamp the config interface to own memory. easier to use correctly without	tedu	2014-09-28	1	-4/+7
\| \| \| \| \| \|	caller worrying about leaks or lifetimes. after feedback from jsing
*	use void * instead of char *. ok jsing	tedu	2014-08-15	1	-3/+3
\|
*	Add support for loading the public/private key from memory, rather than	jsing	2014-08-06	1	-10/+72
\| \| \| \|	directly from file.
*	Add $OpenBSD$ tags.	jsing	2014-08-05	1	-0/+1
\|
*	A ressl server needs different configuration from a ressl client - provide	jsing	2014-08-04	1	-0/+3
\| \| \| \| \|	a specific server configuration function and call this from ressl_configure.
*	Provide a utility function for loading a private/public keypair.	jsing	2014-08-04	1	-0/+20
\|
*	Improve ressl_{read,write} handling of non-blocking reads/writes.	jsing	2014-08-04	1	-16/+28
\|
*	Free the SSL context first and let the reference counting do its thing.	jsing	2014-08-04	1	-5/+2
\|
*	Tabs, not spaces.	jsing	2014-07-13	1	-5/+5
\|
*	Split the context allocation out from the configuration. This will allow	jsing	2014-07-13	1	-4/+12
\| \| \| \| \| \|	us to properly report errors that occur during configuration processing. Discussed with tedu@
*	Move the client code into a separate file.	jsing	2014-07-13	1	-160/+0
\|
*	Use a single ressl.h header file.	jsing	2014-07-13	1	-2/+1
\| \| \| \|	Discussed with beck@ and tedu@.
*	Initial version of libressl - a library that provides a clean, simple,	jsing	2014-07-12	1	-0/+335
	consistent and secure-by-default API for SSL clients (and soon servers). This is a long way from complete and the interface will likely change substantially - committing now so that further work can happen in the tree. Initiated by tedu@ and inspired by discussions with tedu@, beck@ and other developers.