| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
under a free license, omitting functions we don't have and tweaked by me;
the functions were provided by jsing@ in ssl.h rev. 1.166.
While here, also document SSL_CTX_get_extra_chain_certs(3) because
it is closely related to companion functions are already documented
and the API is kind of incomplete without it.
|
|
|
|
|
|
| |
provided OPENSSL_init_crypto(3) and OPENSSL_init_ssl(3).
Write the documentation from scratch
because the text OpenSSL provides is full of bloat.
|
|
|
|
|
| |
SSL_SESSION_has_ticket(3) and SSL_SESSION_get_ticket_lifetime_hint(3).
Merge the documentation from OpenSSL, tweaked by me.
|
| |
|
|
|
|
|
| |
SSL_SESSION_get_protocol_version(3).
Import the documentation form OpenSSL, tweaked by me, OK tb@.
|
|
|
|
|
|
| |
jsing@ provided SSL_get_client_random(3), SSL_get_server_random(3), and
SSL_SESSION_get_master_key(3). Import the documentation from OpenSSL,
with some tweaks.
|
|
|
|
|
| |
SSL_CTX_get0_certificate(3). It is public in OpenSSL, too,
but OpenSSL has no documentation, so write some from scratch.
|
| |
|
|
|
|
|
|
|
|
|
| |
While importing:
* Fix the prototypes, they all contained wrong datatypes.
* Delete SSL3_VERSION which is no longer supported.
* Delete TLS1_3_VERSION and DTLS1_2_VERSION, not yet supported.
* Delete the lie that these would be macros.
* Improve SEE ALSO and HISTORY sections.
|
|
|
|
|
|
| |
the read accessors we don't have and fixing the prototypes - the
data type of each and every argument differs in the OpenSSL manuals.
Reference the new page from SSL_set_tmp_ecdh(3) as suggested by jsing@.
|
|
|
|
| |
Feedback and OK jsing@.
|
|
|
|
| |
from Matt Caswell <matt@openssl.org>, OpenSSL commit 508fafd8
|
|
|
|
|
| |
from Matt Caswell <matt at openssl dot org>, OpenSSL commit b31db505.
Improve crosslinking while here.
|
|
|
|
|
| |
from <Jon dot Spillett at oracle dot com>
via OpenSSL commit 8c55c461
|
|
|
|
|
|
|
|
| |
where BUGS is longer than DESCRIPTION. The function is listed in
ssl(3) and <openssl/ssl.h>, so it's clearly public.
The code looks slightly mysterious to me, so it would be welcome if
somebody more familiar with TLS protocols could check factual accuracy.
|
|
|
|
|
| |
SSL_num_renegotiations(3) written from scratch. These functions
are listed in ssl(3) and <openssl/ssl.h>, so they are clearly public.
|
|
|
|
|
|
|
| |
in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface.
More could probably be said, the code looks somewhat mysterious to me,
but i think this stub is already better than nothing.
|
|
|
|
|
|
|
| |
listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface.
We might wish to merge the improved code from OpenSSL 1.1.0,
but that's major bump, so i'm documenting the BUGS for now.
|
|
|
|
| |
in ssl(3) and <openssl/ssl.h>, so it is clearly public.
|
|
|
|
| |
Mentioned in ssl(3) and <openssl/ssl.h>, so it is public.
|
|
|
|
|
| |
a public interface since it's listed both in ssl(3) and in
<openssl/ssl.h>. Nothing to pilfer from OpenSSL in this case...
|
|
|
|
|
|
| |
The function prototype is listed in ssl(3) and <openssl/ssl.h>, so
it's clearly a public interface, but OpenSSL has no documentation
about it whatsoever.
|
| |
|
|
|
|
| |
relevant for us, calling the page SSL_set_max_send_fragment(3)
|
| |
|
| |
|
| |
|
|
|
|
| |
Call it SSL_set1_param(3) since we don't have these get0 functions.
|
|
|
|
|
| |
to libcrypto and parts belonging to libssl. Extract the parts
relevant for our libssl and import them with some tweaks.
|
|
|
|
|
|
|
|
| |
excluding interface changes that don't apply to LibreSSL,
except that i left the confusing discussion of RETURN VALUES
completely unchanged, to warn users that this is a mess:
OpenSSL first published this interface, then later changed
its syntax and semantics in multiple ways.
|
|
|
|
|
| |
libraries, in particular considering that there are unrelated
files in doc/; requested by jsing@ and beck@
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
correctly - logically complete that now by removing MLINKS from base;
authors need only to ensure there is an entry in NAME for any function/
util being added. MLINKS will still work, and remain for perl to ease
upgrades;
ok nicm (curses) bcook (ssl)
ok schwarze, who provided a lot of feedback and assistance
ok tb natano jung
|
| |
|
|
|
|
|
| |
As discussed with beck@ jsing@ and others
OK beck@
|
|
|
|
|
|
|
|
| |
since yesterday, "mandoc -Tlint -Wfatal" can no longer fail.
Instead, as suggested by deraadt@, provide a manlint target
that is *not* run during make build, but can be run
whenever you want to check syntax of manuals.
"nice stuff" deraadt@
|
| |
|
|
|
|
| |
ok bcook@
|
|
|
|
| |
ok miod@ bcook@
|
|
|
|
|
|
| |
Jeff Trawick, Jean-Paul Calderone, Michal Bozon, Jeffrey Walton and Rich Salz,
via OpenSSL trunk (with some parts not applying to us, such as SSLv2 support,
at least partially removed).
|
|
|
|
|
|
|
| |
pages instead of doing it in the Makefiles and move a libssl page where
it belongs.
ok miod@
|
|
|
|
|
|
| |
follow soon.
Tweaks from an ok jim@
|
|
|
|
|
|
|
|
|
| |
as configuration files; split manpages and .pc files between libcrypto and
libssl.
No functional change, only there to make engineering easier, and libcrypto
sources are still found in libssl/src/crypto at the moment.
ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects.
|
|
|
|
|
|
|
| |
that might fail.
* Keep the build log clean.
* Make sure syntax checks run again when doing: make clean; make
ok espie@
|
|
|
|
| |
okay guenther@
|
| |
|
| |
|
|
|
|
|
| |
discussed with lots of people, tested by naddy@,
"move fast" deraadt@
|
|
|
|
|
|
| |
these are not built by default, but only built when MANPS is set.
kristaps@ and jmc@ agree with the idea,
and the patch doesn't bother deraadt@ at all
|