| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Replace the remaining ssl3_get_cipher_by_char() calls with n2s() and | jsing | 2014-08-23 | 1 | -23/+1 |
| | | | | | | | ssl3_get_cipher_by_id(). ok bcook@ | ||||
| * | Provide a ssl3_get_cipher_by_id() function that allows ciphers to be looked | jsing | 2014-08-11 | 1 | -1/+14 |
| | | | | | | | | | up by their ID. For one, this avoids an ugly mess in ssl_sess.c, where the cipher value is manually written into a buffer, just so the cipher can be located using ssl3_get_cipher_by_char(). ok bcook@ miod@ | ||||
| * | Tweak cipher list comments and add missing cipher value comments. | jsing | 2014-08-10 | 1 | -5/+26 |
| | | |||||
| * | Remove disabled (weakened export and non-ephemeral DH) cipher suites from | jsing | 2014-08-10 | 1 | -470/+5 |
| | | | | | | | | | the cipher list. This reduces code size, saves data segment space and prevents them from being turned back on at runtime by flipping a bit in memory. ok guenther@ | ||||
| * | Oops, revert changes commited by mistake. The previous commit was supposed | miod | 2014-08-07 | 1 | -2/+4 |
| | | | | | to only apply to s23_srvr.c. | ||||
| * | When you expect a function to return a particular value, don't put a comment | miod | 2014-08-07 | 1 | -4/+2 |
| | | | | | | | | | | | | saying that you expect it to return that value and compare it against zero because it is supposedly faster, for this leads to bugs (especially given the high rate of sloppy cut'n'paste within ssl3 and dtls1 routines in this library). Instead, compare for the exact value it ought to return upon success. ok deraadt@ | ||||
| * | The bell tolls for BUF_strdup - Start the migration to using | beck | 2014-07-13 | 1 | -2/+2 |
| | | | | | | | intrinsics. This is the easy ones, a few left to check one at a time. ok miod@ deraadt@ | ||||
| * | The correct name for EDH is DHE, likewise EECDH should be ECDHE. | jsing | 2014-07-12 | 1 | -67/+67 |
| | | | | | | | Based on changes to OpenSSL trunk. ok beck@ miod@ | ||||
| * | Remove the PSK code. We don't need to drag around this | beck | 2014-07-11 | 1 | -71/+1 |
| | | | | | | baggage. ok miod@ jsing@ | ||||
| * | decompress libssl. ok beck jsing | tedu | 2014-07-10 | 1 | -5/+1 |
| | | |||||
| * | tedu the SSL export cipher handling - since we do not have enabled export | jsing | 2014-07-09 | 1 | -18/+12 |
| | | | | | | | ciphers we no longer need the flags or code to support it. ok beck@ miod@ | ||||
| * | remove unused, private version strings except SSL_version_str | bcook | 2014-07-09 | 1 | -3/+1 |
| | | | | | | | Also remove unused des_ver.h, which exports some of these strings, but is not installed. ok miod@ tedu@ | ||||
| * | Mark the weakened 40-bit export ciphers as invalid - no one in their right | jsing | 2014-07-08 | 1 | -9/+9 |
| | | | | | | | mind should be using them. ok deraadt@ miod@ | ||||
| * | Remove SSL_FIPS. | jsing | 2014-07-08 | 1 | -84/+84 |
| | | | | | ok deraadt@ miod@ | ||||
| * | Nuke SSL_NOT_EXP since it does nothing. | jsing | 2014-07-08 | 1 | -124/+124 |
| | | | | | ok deraadt@ miod@ | ||||
| * | Specify the correct strength bits for 3DES cipher suites. | jsing | 2014-06-21 | 1 | -15/+13 |
| | | | | | | | From OpenSSL. ok miod@ | ||||
| * | Add ChaCha20-Poly1305 based ciphersuites. | jsing | 2014-06-13 | 1 | -1/+52 |
| | | | | | | | Based on Adam Langley's chromium patches. Tested by and ok sthen@ | ||||
| * | Switch the AES-GCM cipher suites to SSL_CIPHER_ALGORITHM2_AEAD. | jsing | 2014-06-13 | 1 | -21/+68 |
| | | |||||
| * | Remove support for the `opaque PRF input' extension, which draft has expired | miod | 2014-06-13 | 1 | -55/+1 |
| | | | | | | | | | 7 years ago and never made it into an RFC. That code wasn't compiled in anyway unless one would define the actual on-the-wire extension id bytes; crank libssl major. With help and enlightenment from Brendan MacDonell. | ||||
| * | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 |
| | | |||||
| * | Remove another NULL check before a BIO_free(). | jsing | 2014-06-07 | 1 | -4/+4 |
| | | |||||
| * | ssl3_free_digest_list() has its own NULL check. | jsing | 2014-06-07 | 1 | -5/+3 |
| | | |||||
| * | BIO_free has an implicit NULL check, so do not bother checking for NULL | jsing | 2014-06-07 | 1 | -2/+1 |
| | | | | | before calling it. | ||||
| * | ssl3_release_{read,write}_buffer() handle being called with NULL buffers, | jsing | 2014-06-07 | 1 | -4/+3 |
| | | | | | so do not bother checking before calling. | ||||
| * | The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all have | jsing | 2014-06-07 | 1 | -27/+14 |
| | | | | | | implicit NULL checks, so there is no point ensuring that the pointer is non-NULL before calling them. | ||||
| * | More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup. | jsing | 2014-05-31 | 1 | -5/+1 |
| | | |||||
| * | ECDH and ECDSA will not work overly well if there is no EC, so unifdef | jsing | 2014-05-31 | 1 | -6/+0 |
| | | | | | | | OPENSSL_NO_EC. ok tedu@ | ||||
| * | TLS would not be entirely functional without extensions, so unifdef | jsing | 2014-05-31 | 1 | -14/+0 |
| | | | | | | | OPENSSL_NO_TLSEXT. ok tedu@ | ||||
| * | remove some #if 0 code. we don't need any more reminders that we're using | tedu | 2014-05-30 | 1 | -9/+0 |
| | | | | | a not quite appropriate data structure. ok jsing | ||||
| * | Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS and | jsing | 2014-05-30 | 1 | -2/+2 |
| | | | | | | | SSL_USE_TLS1_2_CIPHERS. Largely based on OpenSSL head. | ||||
| * | unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them. | tedu | 2014-05-29 | 1 | -36/+0 |
| | | | | | ok deraadt jsing | ||||
| * | Make it substantially easier to identify protocol version requirements | jsing | 2014-05-29 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | by adding an enc_flags field to the ssl3_enc_method, specifying four flags that are used with this field and providing macros for evaluating these conditions. Currently the version requirements are identified by continually checking the version number and other criteria. This change also adds separate SSL3_ENC_METHOD data for TLS v1.1 and v1.2, since they have different enc_flags from TLS v1. Based on changes in OpenSSL head. No objection from miod@ | ||||
| * | There is no point in checking if a pointer is non-NULL before calling free, | jsing | 2014-05-28 | 1 | -25/+14 |
| | | | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@ | ||||
| * | Replace the following logic: | miod | 2014-05-26 | 1 | -8/+10 |
| | | | | | | | | | | | | | | | | | | | | | | if (nothing to allocate) ptr = malloc(1) else { if ((ptr = malloc(size to allocate)) memcpy(ptr, data to copy, size to allocate) } if (ptr == NULL) OMG ERROR with a saner logic where the NULL pointer check if moved to the actual malloc branch, so that we do not need to malloc a single byte, just to avoid having a NULL pointer. Whoever thought allocating a single byte was a smart idea was obviously not taking his meds. ok beck@ guenther@ | ||||
| * | Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much of | jsing | 2014-05-25 | 1 | -24/+0 |
| | | | | | | | | this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@ | ||||
| * | Use C99 initialisers for SSL3_ENC_METHOD structs. | jsing | 2014-05-24 | 1 | -14/+16 |
| | | | | | ok miod@ | ||||
| * | Clean up the SSL cipher initialisation and use C99 initialisers for | jsing | 2014-05-23 | 1 | -1709/+1712 |
| | | | | | | | clarity, grepability and to protect from future field reordering/removal. ok miod@ | ||||
| * | There are two actual uses of e_os2.h in libssl - an OPENSSL_GLOBAL (an | jsing | 2014-05-22 | 1 | -1/+1 |
| | | | | | | | | | | empty define) and an OPENSSL_EXTERN (which is defined as, well... extern). The use of OPENSSL_EXTERN is already inconsistent since the lines above and below just use plain old "extern". Expand the two uses of these macros and stop including e_os2.h in libssl. ok miod@ | ||||
| * | Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now. | jsing | 2014-05-22 | 1 | -1/+0 |
| | | | | | ok beck@ miod@ | ||||
| * | KSSL is dead... nuke KSSL_DEBUG from orbit. | jsing | 2014-05-20 | 1 | -3/+0 |
| | | | | | ok beck@ miod@ | ||||
| * | deleted seed some time ago | tedu | 2014-05-17 | 1 | -101/+0 |
| | | |||||
| * | Remove SRP and Kerberos support from libssl. These are complex protocols | tedu | 2014-05-05 | 1 | -445/+0 |
| | | | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | ||||
| * | More KNF, things that couldn't be verified with md5(1), and some whitespace | mcbride | 2014-04-24 | 1 | -7/+9 |
| | | | | | I missed on the first go around. | ||||
| * | KNF | mcbride | 2014-04-24 | 1 | -99/+181 |
| | | |||||
| * | more malloc/realloc/calloc cleanups; ok beck kettenis | deraadt | 2014-04-21 | 1 | -2/+1 |
| | | |||||
| * | More KNF and style consistency tweaks | guenther | 2014-04-19 | 1 | -8/+9 |
| | | |||||
| * | spacing | tedu | 2014-04-18 | 1 | -10/+11 |
| | | |||||
| * | whack a bunch of disabled code. ok beck lteo | tedu | 2014-04-17 | 1 | -169/+0 |
| | | |||||
| * | always build in RSA and DSA. ok deraadt miod | tedu | 2014-04-17 | 1 | -42/+3 |
| | | |||||
| * | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -14/+14 |
| | | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | ||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |