Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove the libssl/ssl directory | beck | 2016-09-03 | 2 | -54/+0 |
| | |||||
* | Crank majors for lib{crypto,ssl,tls} due to symbol removals, symbol | jsing | 2016-04-28 | 1 | -1/+1 |
| | | | | additions and functionality changes. | ||||
* | Make sure stdio functions don't end up in the library, from miod@ | beck | 2016-03-06 | 1 | -1/+5 |
| | | | | ok doug@ bcook@ | ||||
* | bump the major for libcrypto/ssl/tls for a CRYPTO_chacha_20 ABI change | bcook | 2015-12-09 | 1 | -2/+2 |
| | | | | ok jsing@, deraadt@, beck@ | ||||
* | bump minors after adding EVP_aead_chacha20_poly1305_ietf() | reyk | 2015-11-02 | 1 | -1/+1 |
| | | | | OK jsing@ | ||||
* | Crank major version due to removal of SHA-0 and MD4 from libcrypto. | doug | 2015-09-13 | 1 | -2/+2 |
| | |||||
* | Mechanical minor bump to follow libcrypto. | miod | 2015-09-13 | 1 | -1/+1 |
| | |||||
* | Merge the remnants of s3_enc.c into t1_enc.c. | jsing | 2015-09-11 | 1 | -2/+2 |
| | | | | ok beck@ | ||||
* | Put the *method* data structures and functions in the same place. | jsing | 2015-09-11 | 1 | -2/+2 |
| | | | | | | | We can also now nuke ssl23_get_method() since it is the same as tls1_get_method(). And the empty file can bite the dust. ok bcook@ miod@ | ||||
* | Remove SSLv3 method data structs and unlink s3_meth.c from the build. | doug | 2015-08-29 | 1 | -2/+2 |
| | | | | ok jsing@ | ||||
* | Crank major version for libssl and libtls due to SSLv3 removal. | doug | 2015-08-27 | 1 | -1/+1 |
| | |||||
* | Remove OpenSSL engine RSAX. | doug | 2015-07-19 | 1 | -1/+1 |
| | | | | | | | | | OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@ | ||||
* | Crank major and remove legacy variables. | doug | 2015-07-19 | 1 | -1/+1 |
| | | | | | | Libtls is riding this crank. ok miod@ bcook@ | ||||
* | Fix pointer to unsigned long conversion. | doug | 2015-06-27 | 1 | -2/+2 |
| | | | | | | | bcook@ notes that this check really only impacted 64-bit Windows. Also, changed the check to be unsigned for consistency. ok bcook@ | ||||
* | Crank major for libcrypto, ssl and tls due to MDC-2DES removal. | doug | 2015-06-20 | 1 | -1/+1 |
| | | | | ok miod@ jsing@ | ||||
* | Fix library search path so we link against the freshly built libcrypto.so | tobiasu | 2015-06-05 | 1 | -2/+2 |
| | | | | | | instead of a stale one. ok miod@ mpi@ | ||||
* | Use a relative path against BSDOBJDIR to pick libcrypto; makes cross-lib | miod | 2015-05-26 | 1 | -2/+2 |
| | | | | work again. | ||||
* | Record inter-library dependencies between libcrypto, libssl and libtls | kettenis | 2015-05-17 | 2 | -1/+4 |
| | |||||
* | Bump libcrypto and libssl majors, due to various recent churn. | jsing | 2015-02-22 | 1 | -1/+1 |
| | | | | Discussed with/requested by deraadt@ at the conclusion of s2k15. | ||||
* | Crank libssl major due to the recent changes and removals. | jsing | 2015-02-07 | 1 | -2/+2 |
| | | | | ok beck@ deraadt@ miod@ | ||||
* | Stop defining TERMIOS, ANSI_SOURCE and OPENSSL_NO_RC5 for libssl builds. | jsing | 2015-02-07 | 1 | -3/+1 |
| | | | | | | | The first two are unused in libssl/libcrypto and OPENSSL_NO_RC5 is already defined via openssl/opensslfeatures.h. ok beck@ doug@ miod@ | ||||
* | Import BoringSSL's crypto bytestring and crypto bytebuilder APIs. | doug | 2015-02-06 | 1 | -1/+2 |
| | | | | | | | | | | | | | | This is imported with as few changes as possible for the initial commit. I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc() and changed a few header includes. BoringSSL has this as part of their public API. We're leaving it internal to libssl for now. Based on BoringSSL's CBB/CBS API as of commit c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54. input + ok jsing@, miod@ | ||||
* | Support CA verification in chroot'ed processes without direct file | reyk | 2015-01-22 | 1 | -1/+1 |
| | | | | | | | | | | access to the certificates. SSL_CTX_load_verify_mem() is a frontend to the new X509_STORE_load_mem() function that allows to load the CA chain from a memory buffer that is holding the PEM-encoded files. This function allows to handle the verification in privsep'ed code. Adopted for LibreSSL based on older code from relayd (by pyr@ and myself) With feedback and OK bluhm@ | ||||
* | libssl major++ | jsing | 2014-12-10 | 1 | -1/+1 |
| | |||||
* | Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov. | miod | 2014-11-18 | 1 | -1/+1 |
| | | | | | This causes a libssl major version bump as this affects the layout of some internal-but-unfortunately-made-visible structs. | ||||
* | Crank libssl major due to recent additions, removals and changes. | jsing | 2014-10-31 | 1 | -2/+2 |
| | |||||
* | Bump minor version for ECDH auto. | jsing | 2014-10-03 | 1 | -1/+1 |
| | | | | | While there are no additional symbols, there is an additional command that clients will potentially depend on. | ||||
* | Bump minor after adding SSL_CTX_use_certificate_chain(). | reyk | 2014-09-28 | 1 | -1/+1 |
| | | | | ok jsing@ miod@ | ||||
* | -DOPENSSL_NO_KRB5 is no longer needed | deraadt | 2014-07-12 | 1 | -2/+2 |
| | | | | ok guenther | ||||
* | enough churn, a crank is advised by guenther.. | deraadt | 2014-07-12 | 1 | -1/+1 |
| | |||||
* | crank major for decompression feature | tedu | 2014-07-10 | 1 | -1/+1 |
| | |||||
* | Remove support for the `opaque PRF input' extension, which draft has expired | miod | 2014-06-13 | 1 | -2/+2 |
| | | | | | | | | 7 years ago and never made it into an RFC. That code wasn't compiled in anyway unless one would define the actual on-the-wire extension id bytes; crank libssl major. With help and enlightenment from Brendan MacDonell. | ||||
* | Make make includes work again without kssl.h | beck | 2014-05-29 | 1 | -2/+2 |
| | |||||
* | define LIBRESSL_INTERNAL, and use it to hide the bad stuff from ourselves | tedu | 2014-05-25 | 1 | -1/+2 |
| | | | | ok beck | ||||
* | Omit -Werror if building with gcc3, for it triggers "redefinition of `pqueue'" | miod | 2014-05-18 | 1 | -2/+6 |
| | | | | warnings now that pqueue.h has been removed from public scope. | ||||
* | No longer make pqueue.h a public (and installed) header file. Replace its | miod | 2014-05-15 | 1 | -2/+2 |
| | | | | | | | | | inclusion in <ssl/dtls1.h> by the benign `struct _pqueue; typedef struct _pqueue *pqueue;'. Note that said dtls1.h should probably be considered a private header as well... ok beck@ | ||||
* | Move the `pqueue' part of libcrypto, which is a glorified sorted linked list | miod | 2014-05-12 | 2 | -4/+5 |
| | | | | | | | | | | | | | of 64-bit data, and only used by DTLS, to libssl where it belongs. Remove pqueue_print() which is a debugging interface and serves no useful purpose, except for the regress test, which grows its own pqueue_print() routine. Bump libcrypto major and libssl minor. WARNING: do not update your tree right now, more changes are coming, which will ride the libcrypto major bump. | ||||
* | Remove SRP and Kerberos support from libssl. These are complex protocols | tedu | 2014-05-05 | 1 | -2/+2 |
| | | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | ||||
* | Make libssl and libcrypto compile with -Werror | beck | 2014-04-23 | 1 | -2/+2 |
| | | | | ok miod@ | ||||
* | Chop off more SSLv2 tentacles and start fixing and noting y2038 issues. | guenther | 2014-04-20 | 1 | -1/+1 |
| | | | | | | | APIs that pass times as longs will have to change at some point... Bump major on both libcrypto and libssl. ok tedu@ | ||||
* | -Wall | tedu | 2014-04-17 | 1 | -1/+2 |
| | |||||
* | TANSTAAFL - delete the buf freelist code. if you need a better malloc, get | tedu | 2014-04-16 | 1 | -2/+1 |
| | | | | a better malloc. ok beck deraadt | ||||
* | add back SRP. i was being too greedy. | tedu | 2014-04-16 | 1 | -2/+2 |
| | |||||
* | disentangle SRP code from TLS | tedu | 2014-04-16 | 1 | -2/+2 |
| | |||||
* | remove ssl2 support even more completely. | tedu | 2014-04-15 | 1 | -3/+1 |
| | | | | | | in the process, always include ssl3 and tls1, we don't need config options for them. when the time comes to expire ssl3, it will be with an ax. checked by miod | ||||
* | Crank major for libcrypto and libssl; more symbol removals to occur during the | miod | 2014-04-15 | 1 | -1/+1 |
| | | | | | next few moments, don't rush your update. Requested by deraadt@ | ||||
* | o_dir.c has a questionable odor.. now that we got rid of OPENSSL_DIR_XXX | beck | 2014-04-14 | 1 | -2/+1 |
| | | | | | | remove it from the build.. we can cvs rm it and the files it includes once we know for sure ports are good. ok deraadt@ | ||||
* | make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miod | tedu | 2014-04-14 | 1 | -2/+2 |
| | |||||
* | Move undocumented internal OPENSSL_DIR interface from libcrypto to libssl, | miod | 2014-04-13 | 1 | -2/+3 |
| | | | | | | so that libssl no longer need to access the non-external headers of libcrypto to build. No library bump, riding upon the recent update. | ||||
* | Crank libcrypto minor (addition of BN_consttime_swap and CRYPTO_memcmp) | miod | 2014-04-13 | 1 | -1/+1 |
| | | | | and libssl major (ssl_check_clienthello_tlsext split into two functions) |