| Commit message (Expand) | Author | Files | Lines |
|---|
| 2020-06-04 | Collapse the x509v3 directory into x509. | jsing | 38 | -47/+44 |
| 2020-06-04 | new manual page PKCS7_add_attribute(3); | schwarze | 7 | -12/+201 |
| 2020-06-03 | Properly document PKCS7_final(3), which was already mentioned | schwarze | 10 | -32/+263 |
| 2020-06-03 | Enable the record layer limits test and mark two finished test cases as | tb | 1 | -5/+8 |
| 2020-06-02 | Remove const modifier in return type of tls13_handshake_active_state() | tb | 1 | -3/+3 |
| 2020-06-02 | distracting whitespace | tb | 1 | -5/+5 |
| 2020-06-01 | Split the handling of post handshake handshake messages into its | tb | 1 | -55/+44 |
| 2020-06-01 | Remove expired certificate, ok tb@ | sthen | 1 | -53/+1 |
| 2020-06-01 | Enable the test-tls13-zero-length-data.py test, skipping the | tb | 1 | -8/+10 |
| 2020-06-01 | Enable test-dhe-rsa-key-exchange-with-bad-messages.py | tb | 1 | -4/+2 |
| 2020-06-01 | Send an illegal_parameter alert if a client sends us invalid DH key | tb | 1 | -3/+15 |
| 2020-06-01 | Add a mechanism to set an alert in those parts of the read half of | tb | 1 | -3/+21 |
| 2020-06-01 | bump to LibreSSL 3.2.1 | bcook | 1 | -3/+3 |
| 2020-05-31 | Replace ssl_max_server_version() with ssl_downgrade_max_version() | jsing | 3 | -30/+6 |
| 2020-05-31 | When building a chain look for non-expired certificates first. | jsing | 1 | -8/+29 |
| 2020-05-31 | Correct downgrade sentinels when a version pinned method is in use. | jsing | 4 | -7/+40 |
| 2020-05-31 | Fix printing long doubles on architectures with hm and lm bits. | mortimer | 1 | -1/+9 |
| 2020-05-29 | Improve server certificate selection for TLSv1.3. | jsing | 2 | -23/+94 |
| 2020-05-29 | Handle the case where we receive a valid 0 byte application data record. | jsing | 1 | -1/+10 |
| 2020-05-29 | Wire up the servername callback in the TLSv1.3 server. | jsing | 3 | -3/+45 |
| 2020-05-29 | Mop up servername_done, which is unused. | jsing | 3 | -14/+3 |
| 2020-05-29 | Add checks for SH downgrade sentinel and HRR hash in appstest.sh | inoguchi | 1 | -1/+27 |
| 2020-05-27 | more tests after getopt_long.c rev. 1.32; | schwarze | 1 | -10/+43 |
| 2020-05-27 | This patch fixes one bug and one instance of undesirable behaviour. | schwarze | 1 | -9/+1 |
| 2020-05-27 | document PKCS7_dataFinal(3); | schwarze | 3 | -3/+162 |
| 2020-05-26 | minor cleanup ahead of the following work: | schwarze | 1 | -12/+14 |
| 2020-05-26 | Add additional length checks for TLSv1.3 plaintext and inner plaintext. | jsing | 1 | -1/+6 |
| 2020-05-24 | Previous commit caught a few errx() cases by accident. undo them. | tb | 1 | -25/+25 |
| 2020-05-24 | Fix some stylistic nits from jsing. | tb | 1 | -8/+11 |
| 2020-05-24 | Clear SSL_MODE_AUTO_RETRY in libtls, since we handle WANT_POLLIN correctly. | jsing | 1 | -1/+3 |
| 2020-05-24 | include newlines in FAIL messages | tb | 1 | -108/+108 |
| 2020-05-24 | address some nits from jsing | tb | 1 | -7/+11 |
| 2020-05-24 | Minimally document PKCS7_dataInit(3). | schwarze | 4 | -5/+215 |
| 2020-05-24 | Briefly mention the obsolete function OPENSSL_init(3). | schwarze | 1 | -7/+23 |
| 2020-05-24 | The version detection doesn't work on bluhm's test machine, causing | tb | 1 | -3/+3 |
| 2020-05-23 | Define REGRESS_TARGETS explicitly. | tb | 1 | -2/+4 |
| 2020-05-23 | Enforce that SNI hostnames be correct as per rfc 6066 and 5980. | beck | 3 | -18/+159 |
| 2020-05-23 | While the second SSL_CTX in this code is only used on servername | tb | 1 | -1/+2 |
| 2020-05-23 | In ssl_lib.c revision 1.217, jsing enabled SSL_MODE_AUTO_RETRY by | tb | 2 | -2/+7 |
| 2020-05-23 | Enable SSL_MODE_AUTO_RETRY by default. | jsing | 1 | -1/+2 |
| 2020-05-23 | Wire up SSL_MODE_AUTO_RETRY mode to retrying after PHH messages. | jsing | 2 | -2/+8 |
| 2020-05-23 | Provide the option to retry or return after post-handshake messages. | jsing | 2 | -4/+16 |
| 2020-05-23 | fix a confusingly wrapped line | tb | 1 | -3/+3 |
| 2020-05-23 | Avoid an out-of-bounds array access in the s_server. | tb | 1 | -1/+3 |
| 2020-05-23 | Do not assume that server_group != 0 or tlsext_supportedgroups != NULL | tb | 2 | -9/+15 |
| 2020-05-22 | sockaddr should be sockaddr_storage, otherwise "openssl s_client -6 -dtls1" | deraadt | 1 | -3/+4 |
| 2020-05-22 | Ensure we only attach an ocsp staple to a leaf certificate, because | beck | 2 | -5/+16 |
| 2020-05-21 | Simplify: transform a dangling else into an early return and | tb | 1 | -20/+20 |
| 2020-05-21 | Make ssl_set_cert_masks() more consistent and closer to readable. | jsing | 1 | -44/+27 |
| 2020-05-21 | Avoid a shadowing issue by renaming cbs and cbb to cbb_hs and cbb_hs, | tb | 1 | -8/+7 |
