| Commit message (Expand) | Author | Age | Files | Lines |
* | This commit was manufactured by cvs2git to create tag 'OPENBSD_5_8_BASE'.OPENBSD_5_8_BASE | cvs2svn | 2015-08-02 | 1 | -3125/+0 |
* | Allow *_free() functions in libssl to handle NULL input. | doug | 2015-07-19 | 1 | -1/+4 |
* | Convert ssl_bytes_to_cipher_list to CBS. | doug | 2015-06-28 | 1 | -8/+18 |
* | Clean up the ssl_bytes_to_cipher_list() API - rather than having the | jsing | 2015-04-15 | 1 | -15/+9 |
* | BUF_MEM_free() has its own explicit NULL check. | jsing | 2015-03-27 | 1 | -9/+6 |
* | Reluctantly add server-side support for TLS_FALLBACK_SCSV. | jsing | 2015-02-22 | 1 | -4/+58 |
* | There is not much point constructing an SSL_CIPHER, then calling | jsing | 2015-02-22 | 1 | -7/+3 |
* | Remove IMPLEMENT_STACK_OF noops. | jsing | 2015-02-22 | 1 | -2/+1 |
* | Enable building with -DOPENSSL_NO_DEPRECATED. | doug | 2015-02-11 | 1 | -1/+2 |
* | Return NULL when there are no shared ciphers. | doug | 2015-02-09 | 1 | -4/+6 |
* | Clean up the {get,put}_cipher_by_char() implementations. Also use | jsing | 2015-02-07 | 1 | -6/+3 |
* | Support CA verification in chroot'ed processes without direct file | reyk | 2015-01-22 | 1 | -1/+7 |
* | Add error handling for EVP_DigestInit_ex(). | doug | 2014-12-15 | 1 | -3/+7 |
* | unifdef OPENSSL_NO_NEXTPROTONEG, which is one of the last standing #ifndef | jsing | 2014-12-14 | 1 | -9/+1 |
* | Remove support for GOST R 34.10-94 signature authentication, along with | jsing | 2014-12-10 | 1 | -8/+1 |
* | Add support for ALPN. | jsing | 2014-12-10 | 1 | -1/+85 |
* | Sort and group includes. | jsing | 2014-11-16 | 1 | -4/+7 |
* | Add support for automatic DH ephemeral keys. | jsing | 2014-10-31 | 1 | -2/+51 |
* | Remove support for ephemeral/temporary RSA private keys. | jsing | 2014-10-31 | 1 | -4/+3 |
* | Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). | jsing | 2014-10-18 | 1 | -6/+5 |
* | Disable SSLv3 by default. | jsing | 2014-10-15 | 1 | -1/+4 |
* | Add support for automatic ephemeral EC keys. | jsing | 2014-10-03 | 1 | -2/+3 |
* | Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them, | jsing | 2014-09-07 | 1 | -16/+2 |
* | Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and a | jsing | 2014-08-24 | 1 | -3/+4 |
* | Replace the remaining ssl3_get_cipher_by_char() calls with n2s() and | jsing | 2014-08-23 | 1 | -8/+11 |
* | Check the return value of sk_SSL_CIPHER_new_null(), since it allocates | jsing | 2014-08-11 | 1 | -5/+7 |
* | Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed way | jsing | 2014-08-11 | 1 | -10/+8 |
* | Since we no longer need to support SSLv2-style cipher lists, start | jsing | 2014-08-10 | 1 | -11/+9 |
* | The correct name for EDH is DHE, likewise EECDH should be ECDHE. | jsing | 2014-07-12 | 1 | -5/+5 |
* | Provide ssl_version_string() function, which uses one of those modern C | jsing | 2014-07-12 | 1 | -11/+23 |
* | if (x) FOO_free(x) -> FOO_free(x). | miod | 2014-07-12 | 1 | -11/+6 |
* | Remove remnants from PSK, KRB5 and SRP. | jsing | 2014-07-12 | 1 | -4/+1 |
* | Remove the PSK code. We don't need to drag around this | beck | 2014-07-11 | 1 | -115/+1 |
* | Remove more compression tendrils. | jsing | 2014-07-10 | 1 | -6/+2 |
* | decompress libssl. ok beck jsing | tedu | 2014-07-10 | 1 | -29/+1 |
* | remove unused ecc_pkey_size. | bcook | 2014-07-10 | 1 | -4/+2 |
* | tedu the SSL export cipher handling - since we do not have enabled export | jsing | 2014-07-09 | 1 | -66/+5 |
* | convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoring | tedu | 2014-06-19 | 1 | -2/+2 |
* | ssl_session_cmp is not a sort function, can use CRYPTO_memcmp here too. | tedu | 2014-06-17 | 1 | -2/+4 |
* | Add an SSL_AEAD_CTX to enable the use of EVP_AEAD with an SSL cipher. | jsing | 2014-06-13 | 1 | -1/+12 |
* | Remove support for the `opaque PRF input' extension, which draft has expired | miod | 2014-06-13 | 1 | -2/+1 |
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -0/+1 |
* | More KNF. | jsing | 2014-06-07 | 1 | -6/+4 |
* | Some KNF and fix the vairable spelling. | jsing | 2014-05-31 | 1 | -23/+16 |
* | More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup. | jsing | 2014-05-31 | 1 | -1/+1 |
* | unifdef -UDOXYGEN and manually remove the few doxygen comments that are not | jsing | 2014-05-31 | 1 | -31/+0 |
* | ECDH and ECDSA will not work overly well if there is no EC, so unifdef | jsing | 2014-05-31 | 1 | -4/+0 |
* | TLS would not be entirely functional without extensions, so unifdef | jsing | 2014-05-31 | 1 | -10/+0 |
* | remove some #if 0 code. we don't need any more reminders that we're using | tedu | 2014-05-30 | 1 | -38/+1 |
* | Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS and | jsing | 2014-05-30 | 1 | -3/+1 |