summaryrefslogtreecommitdiff
path: root/src/lib/libssl/s3_clnt.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* no space before labeltedu2014-05-291-18/+18
|
* line up else bettertedu2014-05-291-5/+2
|
* unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.tedu2014-05-291-40/+0
| | | | ok deraadt jsing
* EVP_MD_CTX_create() calls malloc and can return NULL. However, only one ofjsing2014-05-281-0/+5
| | | | | | | the calls in libssl actually checks the return value before using it. Add NULL checks for the remaining three calls. ok miod@
* There is no point in checking if a pointer is non-NULL before calling free,jsing2014-05-281-18/+9
| | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@
* Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofjsing2014-05-251-8/+0
| | | | | | | this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@
* DeIMPLEMENT libssl. Expand the IMPLEMENT_* macros since it is far morejsing2014-05-241-3/+38
| | | | | | | | readable and one less layer of abstraction. Use C99 initialisers for clarity, grepability and to protect from future field reordering/removal. ok miod@ (tedu@ also thought it was a wonderful idea, beck@ also agreed, but ran away squealing since it reminded him of the VOP layer...)
* Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now.jsing2014-05-221-1/+0
| | | | ok beck@ miod@
* KSSL is dead... nuke KSSL_DEBUG from orbit.jsing2014-05-201-7/+0
| | | | ok beck@ miod@
* Remove SRP and Kerberos support from libssl. These are complex protocolstedu2014-05-051-258/+0
| | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected.
* Fix indentation.mcbride2014-04-241-211/+208
|
* Make it compile again.jsing2014-04-241-1/+1
|
* More KNF, things that couldn't be verified with md5(1), and some whitespacemcbride2014-04-241-45/+42
| | | | I missed on the first go around.
* KNFmcbride2014-04-241-636/+890
|
* remove redundant asign. from David Hilltedu2014-04-241-1/+0
|
* Unifdef -UPKCS1_CHECK and remove SSL_OP_PKCS1_CHECK_[12], this is leftovermiod2014-04-231-6/+0
| | | | | | | | ``debug'' code from a 15+ years old bugfix and the SSL_OP_PKCS1_CHECK_* constants have had a value of zero since ages. No production code should use them. ok beck@
* more malloc/realloc/calloc cleanups; ok beck kettenisderaadt2014-04-211-3/+1
|
* More KNF and style consistency tweaksguenther2014-04-191-4/+3
|
* whack a bunch of disabled code. ok beck lteotedu2014-04-171-17/+3
|
* no longer need to fool emacs indentation and other if (0) oddities.tedu2014-04-171-6/+2
|
* always build in RSA and DSA. ok deraadt miodtedu2014-04-171-51/+0
|
* quick pass at removing ability to disable sha256 and sha512. ok miodtedu2014-04-171-4/+0
|
* Change library to use intrinsic memory allocation functions instead ofbeck2014-04-171-11/+11
| | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
* add back SRP. i was being too greedy.tedu2014-04-161-0/+106
|
* disentangle SRP code from TLStedu2014-04-161-106/+0
|
* remove FIPS mode support. people who require FIPS can buy something thattedu2014-04-151-3/+0
| | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok miod
* make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miodtedu2014-04-141-11/+0
|
* So the OpenSSL codebase does "get the time, add it as a random seed"deraadt2014-04-141-2/+0
| | | | | | | in a bunch of places inside the TLS engine, to try to keep entropy high. I wonder if their moto is "If you can't solve a problem, at least try to do it badly". ok miod
* First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-141-1790/+1539
| | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.
* Do not include "e_os.h" anymore. Simply pull in the necessary headers.mpi2014-04-131-1/+1
| | | | ok miod@, deraadt@
* Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.miod2014-04-131-5/+6
|
* resolve conflictsdjm2012-10-131-38/+359
|
* OpenSSL 1.0.0f: mergedjm2012-01-051-3/+3
|
* openssl-1.0.0e: resolve conflictsdjm2011-11-031-0/+3
|
* Security fix for CVE-2010-4180 as mentioned in ↵jasper2010-12-151-0/+3
| | | | | | | | | | | http://www.openssl.org/news/secadv_20101202.txt. where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@
* resolve conflicts, fix local changesdjm2010-10-011-162/+462
|
* resolve conflictsdjm2009-01-091-5/+5
|
* update to openssl-0.9.8i; tested by several, especially krw@djm2009-01-051-8/+34
|
* resolve conflictsdjm2008-09-061-144/+877
|
* resolve conflictsdjm2006-06-271-3/+3
|
* resolve conflictsdjm2005-04-291-1/+6
|
* merge 0.9.7dmarkus2004-04-081-2/+2
|
* more fixes from 0.9.7c, ok deraadt, clodermarkus2003-09-301-0/+1
|
* Remove some double semicolons (hmm, do two semis equal a maxi?).millert2003-08-061-1/+1
| | | | I've skipped the GNU stuff for now. From Patrick Latifi.
* merge 0.9.7b with local changes; crank majors for libssl/libcryptomarkus2003-05-121-18/+34
|
* pull in fix from openssl-0.9.7-stable-SNAP-20020921:markus2002-09-231-16/+5
| | | | | | *) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller]
* merge with openssl-0.9.7-stable-SNAP-20020911,markus2002-09-141-2/+10
| | | | | new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@
* merge openssl-0.9.7-beta3, tested on vax by miod@markus2002-09-101-2/+2
|
* sync with http://www.openssl.org/news/patch_20020730_0_9_7.txtmarkus2002-07-301-0/+1
| | | | | (adds fix for unused kerberos and engine code, and some more assertions, as well as a 64bit integer string fix for conf_mod.c)
* apply patches from OpenSSL Security Advisory [30 July 2002],markus2002-07-301-0/+9
| | | | http://marc.theaimsgroup.com/?l=openssl-dev&m=102802395104110&w=2