openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	MFC.libressl-v2.5.4	jsing	2017-04-29	1	-5/+5
\| \| \| \| \| \| \| \| \|	Fix a bug caused by the return value being set early to signal successful DTLS cookie validation. This can mask a later failure and result in a positive return value being returned from ssl3_get_client_hello(), when it should return a negative value to propagate the error. ok beck@
*	Remove the handshake digests and related code, replacing remaining uses	jsing	2017-03-10	1	-24/+8
\| \| \| \| \| \| \|	with the handshake hash. For now tls1_digest_cached_records() is retained to release the handshake buffer. ok beck@ inoguchi@
*	Provide a rolling handshake hash that commences as soon as the cipher	jsing	2017-03-05	1	-1/+4
\| \| \| \| \| \| \| \| \| \|	suite has been selected, and convert the final finish MAC to use this handshake hash. This is a first step towards cleaning up the current handshake buffer/digest code. ok beck@ inoguchi@
*	Convert various handshake message generation functions to CBB.	jsing	2017-03-05	1	-22/+48
\| \| \| \|	ok beck@ inoguchi@
*	Convert ssl3_{get,send}_server_key_exchange() to EVP_md5_sha1().	jsing	2017-03-01	1	-22/+14
\| \| \| \|	ok inoguchi@
*	Stop pretending that MD5 and SHA1 might not exist - rather than locating	jsing	2017-02-28	1	-3/+3
\| \| \| \| \| \| \|	"ssl3-md5" and "ssl-sha1", call the EVP_md5() and EVP_sha1() functions directly. ok beck@ inoguchi@
*	Change SSLerror() back to taking two args, with the first one being an SSL *.	beck	2017-02-07	1	-106/+106
\| \| \| \| \| \| \| \| \|	Make a table of "function codes" which maps the internal state of the SSL * to something like a useful name so in a typical error in the connection you know in what sort of place in the handshake things happened. (instead of by arcane function name). Add SSLerrorx() for when we don't have an SSL * ok jsing@ after us both being prodded by bluhm@ to make it not terrible
*	Convert ssl3_get_client_hello() to CBS.	jsing	2017-01-26	1	-76/+71
\| \| \| \|	ok beck@
*	Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the ugly	beck	2017-01-26	1	-169/+85
\| \| \| \|	line wraps that resulted
*	Send the error function codes to rot in the depths of hell where they belong	beck	2017-01-26	1	-114/+106
\| \| \| \| \| \| \|	We leave a single funciton code (0xFFF) to say "SSL_internal" so the public API will not break, and we replace all internal use of the two argument SSL_err() with the internal only SSL_error() that only takes a reason code. ok jsing@
*	Remove most of SSL3_ENC_METHOD - we can just inline the function calls	jsing	2017-01-26	1	-11/+11
\| \| \| \| \| \|	and defines since they are the same everywhere. ok beck@
*	Rename s3_{both,clnt,pkt_srvr}.c to have an ssl_ prefix since they are no	jsing	2017-01-26	1	-0/+2923
	longer SSLv3 code. ok beck@