openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
*	Convert legacy TLS client to tls_key_share.	jsing	2022-01-06	1	-175/+35
*	Return 0 on failure from send/get kex functions in the legacy stack.	jsing	2022-01-04	1	-25/+25
*	Use normal result testing for tls1_check_curve().	jsing	2022-01-04	1	-2/+2
*	Refactor ssl3_get_server_kex_ecdhe() to separate parsing and validation.	jsing	2022-01-04	1	-20/+18
*	Convert ssl_clnt.c to opaque EVP_MD_CTX	tb	2021-12-09	1	-26/+29
*	Move the minimum DHE key size check into ssl_kex_peer_params_dhe()	jsing	2021-12-04	1	-8/+5
*	Check DH public key in ssl_kex_peer_public_dhe().	jsing	2021-12-04	1	-2/+8
*	Factor out/rewrite DHE key exchange.	jsing	2021-11-29	1	-64/+20
*	Stop reaching into EVP_PKEY in the rest of libssl.	tb	2021-11-26	1	-12/+18
*	libssl: don't reach for pkey->save_type.	tb	2021-11-19	1	-3/+3
*	Fold SSL_SESSION_INTERNAL back into SSL_SESSION.	jsing	2021-10-25	1	-18/+18
*	Unhandroll X509_up_ref()	tb	2021-10-23	1	-3/+3
*	Provide a way to determine our maximum legacy version.	jsing	2021-10-23	1	-36/+16
*	Fold DTLS1_STATE_INTERNAL into DTLS1_STATE.	jsing	2021-10-23	1	-18/+18
*	Untangle ssl3_get_message() return values.	jsing	2021-10-23	1	-94/+81
*	Change tlsext_tick_lifetime_hint to uint32_t.	jsing	2021-10-23	1	-5/+2
*	Ensure that a server hello does not have trailing data.	jsing	2021-09-03	1	-1/+4
*	We need to allow for either a CERTIFICATE or CERTIFICATE_STATUS message	beck	2021-09-02	1	-2/+3
*	RFC 6066 section 8 allows the server MAY choose not send the CertificateStatus	beck	2021-09-02	1	-3/+37
*	Clean up and simplify info and msg callbacks.	jsing	2021-08-30	1	-16/+8
*	Correct sigalg hash usage when signing content for client verify.	jsing	2021-06-30	1	-3/+2
*	Pull sigalg selection up into ssl3_send_client_verify().	jsing	2021-06-29	1	-14/+11
*	Track sigalg used by ourselves and our peer in the legacy stack.	jsing	2021-06-29	1	-1/+3
*	Convert legacy stack client to ssl_sigalg_for_peer().	jsing	2021-06-29	1	-34/+12
*	Move the RSA-PSS check for TLSv1.3 to ssl_sigalg_pkey_ok().	jsing	2021-06-29	1	-2/+2
*	Have ssl3_send_client_verify() pass *pkey to called functions.	jsing	2021-06-27	1	-22/+11
*	Change ssl_sigalgs_from_value() to perform sigalg list selection.	jsing	2021-06-27	1	-3/+4
*	Rename ssl_sigalg() to ssl_sigalg_from_value().	jsing	2021-06-27	1	-3/+3
*	Make local header inclusion consistent.	jsing	2021-05-16	1	-3/+2
*	Move DTLS structs/definitions/prototypes to dtls_locl.h.	jsing	2021-05-16	1	-1/+2
*	Explicitly include <openssl/opensslconf.h> in files using OPENSSL_NO_*	jsing	2021-05-16	1	-1/+2
*	Clean up tls1_change_cipher_state().	jsing	2021-05-02	1	-5/+3
*	Clean up dtls1_reset_seq_numbers().	jsing	2021-05-02	1	-5/+1
*	Clean up and harden TLSv1.2 master key derivation.	jsing	2021-04-30	1	-17/+12
*	Clean up derivation of finished/peer finished.	jsing	2021-04-25	1	-3/+2
*	Clean up TLSv1.2 certificate request handshake data.	jsing	2021-04-21	1	-24/+12
*	Move reuse_message, message_type, message_size and cert_verify into the	jsing	2021-04-19	1	-21/+21
*	Update a stale comment and fix a typo.	tb	2021-04-11	1	-3/+3
*	Garbage collect s->internal->type	tb	2021-03-27	1	-3/+1
*	Rename new_cipher to cipher.	jsing	2021-03-24	1	-14/+14
*	Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data.	jsing	2021-03-24	1	-7/+7
*	Remove ssl_downgrade_max_version().	jsing	2021-03-11	1	-7/+4
*	Improve internal version handling.	jsing	2021-03-10	1	-3/+17
*	Factor out/change some of the legacy client version handling code.	jsing	2021-02-22	1	-9/+4
*	ugly whitespace	tb	2021-02-20	1	-8/+8
*	Rename f_err into fatal_err.	tb	2021-02-20	1	-60/+60
*	Rename the truncated label into decode_err. This describes its purpose	tb	2021-02-20	1	-46/+46
*	Revise HelloVerifyRequest handling for DTLSv1.2.	jsing	2021-02-20	1	-2/+7
*	Group HelloVerifyRequest decoding and add missing check for trailing data.	jsing	2021-02-20	1	-4/+5
*	Absorb ssl3_get_algorithm2() into ssl_get_handshake_evp_md().	jsing	2021-02-07	1	-2/+3