openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Change SSLerror() back to taking two args, with the first one being an SSL *.	beck	2017-02-07	1	-37/+37
\| \| \| \| \| \| \| \| \|	Make a table of "function codes" which maps the internal state of the SSL * to something like a useful name so in a typical error in the connection you know in what sort of place in the handshake things happened. (instead of by arcane function name). Add SSLerrorx() for when we don't have an SSL * ok jsing@ after us both being prodded by bluhm@ to make it not terrible
*	Provide an SSL_OP_NO_CLIENT_RENEGOTIATION option that disallows	jsing	2017-01-31	1	-1/+9
\| \| \| \| \| \| \|	client-initiated renegotiation. The current default behaviour remains unchanged. ok beck@ reyk@
*	Put comment back in the right place.	jsing	2017-01-29	1	-9/+9
\|
*	Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the ugly	beck	2017-01-26	1	-39/+20
\| \| \| \|	line wraps that resulted
*	Send the error function codes to rot in the depths of hell where they belong	beck	2017-01-26	1	-37/+37
\| \| \| \| \| \| \|	We leave a single funciton code (0xFFF) to say "SSL_internal" so the public API will not break, and we replace all internal use of the two argument SSL_err() with the internal only SSL_error() that only takes a reason code. ok jsing@
*	english is hard.	beck	2017-01-26	1	-2/+2
\|
*	Limit the number of sequential empty records that we will process	beck	2017-01-26	1	-4/+21
\| \| \| \| \| \|	before yielding, and fail if we exceed a maximum. loosely based on what boring and openssl are doing ok jsing@
*	Refactor the code to generate a WANT_READ into a function, as we are	beck	2017-01-26	1	-18/+20
\| \| \| \| \|	using it more and more to avoid spins. ok jsing@
*	Remove most of SSL3_ENC_METHOD - we can just inline the function calls	jsing	2017-01-26	1	-11/+11
\| \| \| \| \| \|	and defines since they are the same everywhere. ok beck@
*	Rename s3_{both,clnt,pkt_srvr}.c to have an ssl_ prefix since they are no	jsing	2017-01-26	1	-0/+1446
	longer SSLv3 code. ok beck@