| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Link to SSL_read_early_data(3) | kn | 2022-09-17 | 1 | -3/+3 |
| | | | | | OK tb | ||||
| * | fix repeated words | jsg | 2022-09-10 | 1 | -3/+3 |
| | | | | | ok ok miod@ ack ack jmc@ | ||||
| * | AESCGM -> AESGCM | jsg | 2022-07-17 | 1 | -4/+4 |
| | | |||||
| * | add .Xr links to SSL_CTX_set_security_level(3) | schwarze | 2022-07-13 | 5 | -15/+20 |
| | | |||||
| * | Start documenting our new pet octopus, SSL_CTX_set_security_level(3). | schwarze | 2022-07-13 | 2 | -1/+161 |
| | | | | | | | | Or should we call it a centipede? Feedback and OK on a previous version from jsing@ and from our chief myriapodologist, tb@. | ||||
| * | man pages: add missing commas between subordinate and main clauses | naddy | 2022-03-31 | 4 | -18/+18 |
| | | | | | | | | jmc@ dislikes a comma before "then" in a conditional, so leave those untouched. ok jmc@ | ||||
| * | man pages: add missing word, The foo() ... -> The foo() function ... | naddy | 2022-03-29 | 1 | -5/+6 |
| | | | | | ok jmc@ schwarze@ | ||||
| * | man pages: add missing commas in enumerations | naddy | 2022-03-29 | 1 | -3/+3 |
| | | |||||
| * | Avoid gendered language in man pages when not referring to a specific | jsg | 2022-02-18 | 1 | -4/+4 |
| | | | | | | | | | person. Rewrite or use singular they. ok thfr@ sthen@ daniel@ ian@ job@ kmos@ jcs@ ratchov@ phessler@ and others I'm likely missing on an earlier version. feedback tj@, feedback and ok jmc@ | ||||
| * | remove please from manual pages | jsg | 2022-02-06 | 1 | -3/+3 |
| | | | | | ok jmc@ sthen@ millert@ | ||||
| * | Rewrite paragraph to refer to EVP_CIPHER_CTX_new() and HMAC_CTX_new() | tb | 2022-01-25 | 1 | -6/+6 |
| | | | | | | | to match reality. spotted by/ok jmc | ||||
| * | spelling | jsg | 2022-01-15 | 2 | -6/+6 |
| | | | | | ok tb@ | ||||
| * | s/ECDHE/ECDH/ | jsing | 2021-11-30 | 1 | -3/+3 |
| | | | | | | | | If we can provide an EC key that is used, then it is by definition non-ephemeral. ok tb@ | ||||
| * | spelling | jsg | 2021-11-26 | 1 | -3/+3 |
| | | | | | ok schwarze@ | ||||
| * | Fix HISTORY section: 6.9 -> 7.0 | tb | 2021-10-27 | 1 | -3/+3 |
| | | |||||
| * | sort. alphanumerics have lower ASCII values than '_' | tb | 2021-10-25 | 1 | -5/+5 |
| | | |||||
| * | Install SSL_read_early_data.3. I should have done this during the last | tb | 2021-10-25 | 1 | -4/+2 |
| | | | | | libssl bump. | ||||
| * | merge documentation for SSL_read_ex(3), SSL_peek_ex(3), and SSL_write_ex(3) | schwarze | 2021-10-24 | 2 | -61/+130 |
| | | | | | from the OpenSSL 1.1.1 branch, which is still under a free license | ||||
| * | fix wrong and missing return types and wrong macros in the SYNOPSIS; | schwarze | 2021-10-23 | 1 | -10/+18 |
| | | | | | while here, also apply some minor wording improvements | ||||
| * | Add new OpenSSL API SSL_CTX_set_num_tickets and friends. | beck | 2021-10-23 | 1 | -0/+55 |
| | | | | | | | | | | Since we don't support session tickets in LibreSSL at the moment these functions currently do not have any effect. Again, symbols will appear with tb@'s reptar sized bump.. ok tb@ | ||||
| * | oops, wrong dir. | tb | 2021-10-23 | 2 | -301/+0 |
| | | | | | pointed out by schwarze | ||||
| * | Import documentation for X509_get_extension_flags, X509_get_key_usage, | tb | 2021-10-23 | 1 | -0/+211 |
| | | | | | | | | X509_get_extended_key_usage from OpenSSL. Will be linked to the build after the bump. input/lgtm schwarze | ||||
| * | Import documentation for X509_SIG_get{0,m} from OpenSSL. Will be linked | tb | 2021-10-23 | 1 | -0/+90 |
| | | | | | | | to the build after the bump. tweak & lgtm schwarze | ||||
| * | tweak previous: properly mark up function pointer typedef | schwarze | 2021-10-23 | 1 | -6/+18 |
| | | | | | plus .Dv NULL, SEE ALSO, HISTORY | ||||
| * | Add SSL_CTX_set_keylog_callback and SSL_CTX_get_keylog_callback | beck | 2021-10-23 | 2 | -1/+46 |
| | | | | | | | | | Some things in ports care about calling these functions. Since we will not provide private key logging functionality they are documented as being for compatibility and that they don't do anything. ok tb@ | ||||
| * | provide a small manual page for the SSL_set_psk_use_session_callback(3) | schwarze | 2021-09-14 | 2 | -1/+88 |
| | | | | | | stub, written from scratch; OK tb@ on SSL_set_psk_use_session_callback.3 | ||||
| * | Merge the stub SSL_SESSION_is_resumable(3) manual page from the | schwarze | 2021-09-14 | 3 | -3/+86 |
| | | | | | | | OpenSSL 1.1.1 branch, which is still under a free license. A few tweaks to wording and structure by me. OK tb@ on SSL_SESSION_is_resumable.3 | ||||
| * | merge the description of SSL_get_tlsext_status_type(3) | schwarze | 2021-09-11 | 1 | -3/+35 |
| | | | | | from the OpenSSL 1.1.1 branch, which is still under a free license | ||||
| * | Do not ignore SSL_TLSEXT_ERR_FATAL from the ALPN callback | tb | 2021-09-10 | 1 | -3/+7 |
| | | | | | | | | | | | | | | | | | | | | As reported by Jeremy Harris, we inherited a strange behavior from OpenSSL, in that we ignore the SSL_TLSEXT_ERR_FATAL return from the ALPN callback. RFC 7301, 3.2 states: 'In the event that the server supports no protocols that the client advertises, then the server SHALL respond with a fatal "no_application_protocol" alert.' Honor this requirement and succeed only on SSL_TLSEXT_ERR_{OK,NOACK} which is the current behavior of OpenSSL. The documentation change is taken from OpenSSL 1.1.1 as well. As pointed out by jsing, there is more to be fixed here: - ensure that the same protocol is selected on session resumption - should the callback be called even if no ALPN extension was sent? - ensure for TLSv1.2 and earlier that the SNI has already been processed ok beck jsing | ||||
| * | comment out the detailed description of SSL_get_servername(3), | schwarze | 2021-09-01 | 1 | -7/+9 |
| | | | | | | | leaving only the basic description in the RETURN VALUES section; tb@ pointed out LibreSSL does not currently provide all those guarantees, and he also OK'ed this diff | ||||
| * | sync with OpenSSL 1.1.1, which is still under a free license; | schwarze | 2021-08-30 | 1 | -15/+107 |
| | | | | | | | | in particular, this includes new text by Matt Caswell from OpenSSL commit 721eb8f6 Nov 28 12:03:00 2019 +0000 and corrects a wrong argument type that i introduced into the SYNOPSIS; requested by tb@ | ||||
| * | Fix .Xr order. From mandoc -Tlint. | tb | 2021-06-26 | 2 | -7/+7 |
| | | |||||
| * | space between macro args and punctuation; | jmc | 2021-06-12 | 1 | -10/+10 |
| | | |||||
| * | RFC 4507bis can refer to various RFCs but this instance is about | tb | 2021-06-12 | 1 | -4/+5 |
| | | | | | | | | RFC 5077. Note that session resumption via session tickets is only for TLSv1.2 and earlier. prompted by a question by/ok jmc | ||||
| * | space between RFC and number; | jmc | 2021-06-11 | 6 | -26/+26 |
| | | |||||
| * | add AES-GCM constants from RFC 7714 for SRTP | landry | 2021-06-11 | 1 | -2/+6 |
| | | | | | | | | | | | SRTP_AEAD_AES_128_GCM/SRTP_AEAD_AES_256_GCM can be used as DTLS-SRTP protection profiles - seen with an update of telephony/baresip i'm working on. adapted from openssl commit 43e5faa2539ae8aae6ef55be2239b9b1a77fea45 ok tb@ jsing@ | ||||
| * | Merge documentation for SSL_CIPHER_find(3) from OpenSSL 1.1.1. | tb | 2021-05-12 | 1 | -2/+29 |
| | | |||||
| * | Install SSL_SESSION_get0_cipher.3 | tb | 2021-05-12 | 1 | -1/+2 |
| | | |||||
| * | Document SSL_SESSION_get0_cipher(3) | tb | 2021-05-12 | 1 | -0/+94 |
| | | | | | | | | Based on the OpenSSL 1.1.1 manual written by Rich Salz with a healthy dose of improvements by schwarze. ok schwarze | ||||
| * | Document SSL_CTX_get_ssl_method(3) | tb | 2021-05-11 | 1 | -4/+15 |
| | | |||||
| * | mention DTLS1_2_VERSION | tb | 2021-04-15 | 1 | -3/+4 |
| | | |||||
| * | Mention DTLS1_2_VERSION here, too | tb | 2021-04-15 | 1 | -6/+8 |
| | | |||||
| * | Document SSL_OP_NO_DTLSv1{,_2} | tb | 2021-04-15 | 1 | -2/+15 |
| | | |||||
| * | Document DTLSv1_2_{,client_,server_}method(3) | tb | 2021-04-15 | 1 | -4/+36 |
| | | |||||
| * | Merge documentation for SSL_is_dtls() from OpenSSL | tb | 2021-04-15 | 1 | -5/+21 |
| | | |||||
| * | Update for DTLSv1.2 support. | tb | 2021-03-31 | 1 | -2/+4 |
| | | |||||
| * | Document SSL_set_hostflags(3) and SSL_get0_peername(3) | tb | 2021-03-31 | 1 | -18/+4 |
| | | | | | ok bcook inoguchi jsing | ||||
| * | Document SSL_use_certificate_chain_file(3) | tb | 2021-03-31 | 1 | -11/+3 |
| | | | | | ok bcook inoguchi jsing | ||||
| * | Prepare documenting SSL_use_certificate_chain_file | tb | 2021-03-19 | 1 | -2/+19 |
| | | |||||
| * | missing word in comment | tb | 2021-01-30 | 1 | -3/+3 |
| | | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |