| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Don't leave stale sequence numbers behind in ssl3_clear()libressl-v3.2.5 | tb | 2021-03-15 | 1 | -4/+3 |
| * | This is errata/6.8/013_libressl.patch.siglibressl-v3.2.4 | tb | 2021-02-03 | 1 | -3/+12 |
| * | Simplify the cleanup of init_buf via a ssl3_release_init_buffer() function. | jsing | 2020-09-24 | 1 | -4/+3 |
| * | Prepare to provide SSL_get0_peername | tb | 2020-09-19 | 1 | -1/+7 |
| * | Prepare to provide stubbed out versions for reading/writing 0-RTT data | tb | 2020-09-19 | 1 | -1/+29 |
| * | Prepare to provide SSL{,_CTX}_{get,set}_max_early_data | tb | 2020-09-19 | 1 | -1/+24 |
| * | If ssl_cert_dup() fails in SSL_set_SSL_CTX(3), return failure | schwarze | 2020-09-18 | 1 | -5/+10 |
| * | Let SSL_CTX_get_ciphers(NULL) return NULL rather than crash | schwarze | 2020-09-16 | 1 | -1/+3 |
| * | Cleanup/simplify SSL_set_ssl_method(). | jsing | 2020-09-15 | 1 | -18/+18 |
| * | Move state initialisation from SSL_clear() to ssl3_clear(). | jsing | 2020-09-14 | 1 | -3/+1 |
| * | Implement SSL_{CTX_,}set_ciphersuites(). | jsing | 2020-09-13 | 1 | -6/+51 |
| * | Remove cipher_list_by_id. | jsing | 2020-09-11 | 1 | -49/+6 |
| * | Simplify SSL_get_ciphers(). | jsing | 2020-09-11 | 1 | -13/+7 |
| * | Rename ssl_cipher_is_permitted() | jsing | 2020-09-11 | 1 | -2/+3 |
| * | Various ciphers related clean up. | jsing | 2020-09-11 | 1 | -41/+36 |
| * | Start replacing the existing TLSv1.2 record layer. | jsing | 2020-08-30 | 1 | -1/+14 |
| * | In SSL_new() just 'goto err' on allocation failure. | jsing | 2020-08-11 | 1 | -11/+6 |
| * | Revert the TLSv1.3 version switching fix/hack. | jsing | 2020-07-14 | 1 | -10/+1 |
| * | Remove some unnecessary function pointers from SSL_METHOD_INTERNAL. | jsing | 2020-07-07 | 1 | -3/+13 |
| * | Enable SSL_MODE_AUTO_RETRY by default. | jsing | 2020-05-23 | 1 | -1/+2 |
| * | fix a confusingly wrapped line | tb | 2020-05-23 | 1 | -3/+3 |
| * | Make ssl_set_cert_masks() more consistent and closer to readable. | jsing | 2020-05-21 | 1 | -44/+27 |
| * | Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA. | jsing | 2020-05-19 | 1 | -16/+8 |
| * | Use size_t for OCSP response length. | jsing | 2020-05-10 | 1 | -2/+2 |
| * | Consistently spell 'unsigned' as 'unsigned int', as style(9) seems | tb | 2020-03-16 | 1 | -3/+3 |
| * | When an SSL method is set, bump the max version back to that of the | jsing | 2020-01-26 | 1 | -1/+10 |
| * | Correctly handle TLSv1.3 ciphers suites in ssl3_choose_cipher(). | jsing | 2020-01-23 | 1 | -1/+4 |
| * | Switch back to a function pointer for ssl_pending. | jsing | 2020-01-23 | 1 | -10/+2 |
| * | Clear and free the tls13_ctx that hangs off an SSL *s from | tb | 2020-01-21 | 1 | -1/+6 |
| * | Bring back the ssl_shutdown internal method pointer. | jsing | 2019-11-17 | 1 | -2/+2 |
| * | Allow ip addresses as argument to SSL_set1_host() but be careful to not | otto | 2019-11-04 | 1 | -2/+14 |
| * | s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there is | bcook | 2019-05-15 | 1 | -19/+13 |
| * | Strip out all of the pkey to sigalg and sigalg to pkey linkages. | jsing | 2019-03-25 | 1 | -10/+4 |
| * | Defer sigalgs selection until the certificate is known. | jsing | 2019-03-25 | 1 | -13/+2 |
| * | Remove ssl_get_server_send_cert() which is now unused. | jsing | 2019-03-25 | 1 | -12/+1 |
| * | Add a re-implementation of SSL_get1_supported_ciphers(). | tb | 2019-01-22 | 1 | -1/+35 |
| * | Provide SSL_get_client_ciphers(). | tb | 2019-01-22 | 1 | -1/+9 |
| * | Move ssl_cipher_list_to_bytes() and ssl_bytes_to_cipher_list() to | tb | 2019-01-21 | 1 | -115/+1 |
| * | Use ssl_cipher_is_permitted() in ssl_cipher_list_to_bytes(). | tb | 2019-01-21 | 1 | -9/+6 |
| * | Teach ssl_version_string() about TLS1_3_VERSION. | jsing | 2019-01-21 | 1 | -1/+3 |
| * | Revert previous - DTLSv1 uses MD5+SHA1 for RSA signature verification. | jsing | 2018-11-19 | 1 | -5/+2 |
| * | Fix DTLS, because DTLS still remains a special flower, allows regress to pass | beck | 2018-11-17 | 1 | -2/+5 |
| * | Fix wrong sizeof argument by using 'uint16_t *', with minor nit from tb@, | mestre | 2018-11-14 | 1 | -2/+2 |
| * | Add SSL_set1_host(), a thin wrapper around X509_VERIFY_PARAM_set1_host(). | tb | 2018-11-11 | 1 | -1/+7 |
| * | Stop keeping track of sigalgs by guessing it from digest and pkey, | beck | 2018-11-10 | 1 | -7/+29 |
| * | Stop pretending that a cert member in a SSL and SSL_CTX can be NULL. | jsing | 2018-11-08 | 1 | -32/+9 |
| * | Add TLSv1.3 cipher suites (with appropriate guards). | jsing | 2018-11-07 | 1 | -1/+6 |
| * | Use the newer/more sensible names for EVP_MD_CTX_* functions. | jsing | 2018-09-05 | 1 | -3/+3 |
| * | Correctly clear the current cipher state, when changing cipher state. | jsing | 2018-09-05 | 1 | -27/+25 |
| * | Nuke ssl_pending/ssl_shutdown function pointers. | jsing | 2018-08-30 | 1 | -6/+6 |
