summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_lib.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there isbcook2019-05-151-19/+13
* Strip out all of the pkey to sigalg and sigalg to pkey linkages.jsing2019-03-251-10/+4
* Defer sigalgs selection until the certificate is known.jsing2019-03-251-13/+2
* Remove ssl_get_server_send_cert() which is now unused.jsing2019-03-251-12/+1
* Add a re-implementation of SSL_get1_supported_ciphers().tb2019-01-221-1/+35
* Provide SSL_get_client_ciphers().tb2019-01-221-1/+9
* Move ssl_cipher_list_to_bytes() and ssl_bytes_to_cipher_list() totb2019-01-211-115/+1
* Use ssl_cipher_is_permitted() in ssl_cipher_list_to_bytes().tb2019-01-211-9/+6
* Teach ssl_version_string() about TLS1_3_VERSION.jsing2019-01-211-1/+3
* Revert previous - DTLSv1 uses MD5+SHA1 for RSA signature verification.jsing2018-11-191-5/+2
* Fix DTLS, because DTLS still remains a special flower, allows regress to passbeck2018-11-171-2/+5
* Fix wrong sizeof argument by using 'uint16_t *', with minor nit from tb@,mestre2018-11-141-2/+2
* Add SSL_set1_host(), a thin wrapper around X509_VERIFY_PARAM_set1_host().tb2018-11-111-1/+7
* Stop keeping track of sigalgs by guessing it from digest and pkey,beck2018-11-101-7/+29
* Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.jsing2018-11-081-32/+9
* Add TLSv1.3 cipher suites (with appropriate guards).jsing2018-11-071-1/+6
* Use the newer/more sensible names for EVP_MD_CTX_* functions.jsing2018-09-051-3/+3
* Correctly clear the current cipher state, when changing cipher state.jsing2018-09-051-27/+25
* Nuke ssl_pending/ssl_shutdown function pointers.jsing2018-08-301-6/+6
* Let SSL_copy_session_id() return an int for error checking.tb2018-08-241-24/+25
* OpenSSL started adding const to functions all over the place. Make alltb2018-04-251-2/+2
* make ENGINE_finish() succeed on NULL and simplify callers as intb2018-04-141-3/+2
* Remove function pointers for ssl_{read,write,peek}.jsing2018-04-071-4/+4
* Bring in compatibility for OpenSSL 1.1 style init functions.beck2018-03-171-1/+6
* Provide SSL_CTX_get_default_passwd_cb{,_userdata}()tb2018-03-171-1/+13
* Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_versionjca2018-03-151-1/+24
* Provide SSL_is_server().jsing2018-02-221-1/+7
* Provide SSL_up_ref().jsing2018-02-221-1/+8
* Provide SSL_CTX_get_ciphers().jsing2018-02-221-1/+7
* Provide SSL_get_client_random() and SSL_get_server_random()jsing2018-02-171-2/+35
* Provide SSL_CTX_get0_certificate()jsing2018-02-171-1/+10
* Provide SSL_CTX_up_ref().jsing2018-02-141-1/+8
* Provide SSL_CTX_get0_param() and SSL_get0_param().jsing2018-02-141-1/+13
* Convert ssl3_client_hello() to CBB.jsing2017-10-111-27/+16
* Make ssl_bytes_to_cipher_list() take a CBS, rather than a pointer andjsing2017-10-101-24/+14
* Bring back the NPN related symbols.jsing2017-08-301-1/+25
* Completely remove NPN remnants.jsing2017-08-281-25/+1
* Make SSL{,_CTX}_set_alpn_protos() do atomic updates and handle NULL.doug2017-08-131-10/+38
* Remove NPN support.jsing2017-08-121-69/+9
* Remove support for DSS/DSA, since we removed the cipher suites a whilejsing2017-08-121-13/+3
* I don't think eay will ever fix this...jsing2017-08-111-2/+2
* style(9) in ssl_set_cert_masks().jsing2017-08-111-7/+7
* Clean up the EC key/curve configuration handling.jsing2017-08-101-7/+3
* Pull out the code that identifies if we have an ECC cipher in the cipherjsing2017-08-091-1/+42
* Move state from ssl->internal to the handshake structure.beck2017-05-071-8/+8
* Bring in an SSL_HANDSHAKE structure and commence the great shovellingbeck2017-05-061-6/+6
* Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.jsing2017-05-061-1/+28
* Stop pretending that MD5 and SHA1 might not exist - rather than locatingjsing2017-02-281-10/+1
* Avoid dereferencing a pointer when reporting an error about the samejsing2017-02-151-2/+2
* Change SSLerror() back to taking two args, with the first one being an SSL *.beck2017-02-071-49/+49