| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Fix conditionals for DH controls. | jsing | 2017-08-09 | 1 | -3/+3 |
* | add missing and correct misspelled names, most in NAME sections; | schwarze | 2017-08-01 | 2 | -6/+8 |
* | as noted by Hanno Boeck, using the *check_private_key functions is | benno | 2017-07-25 | 1 | -6/+22 |
* | Rewrite and move the last remnants of the ServerHello SNI handling into | jsing | 2017-07-24 | 2 | -29/+25 |
* | Rewrite the TLS Renegotiation Indication extension handling using CBB/CBS | jsing | 2017-07-24 | 6 | -346/+161 |
* | Hook the TLS extension parsing framework into the serverhello parsing. | jsing | 2017-07-23 | 1 | -1/+6 |
* | Check the return value of CBB_init_fixed(), since it can fail. | jsing | 2017-07-19 | 1 | -3/+5 |
* | Start rewriting TLS extension handling. | jsing | 2017-07-16 | 4 | -141/+328 |
* | Remove unused variable. | jsing | 2017-07-15 | 1 | -3/+3 |
* | nits about trailing punctuation found with mandoc -Tlint | schwarze | 2017-07-05 | 1 | -4/+4 |
* | fix cross references to self; found with mandoc -Tlint | schwarze | 2017-07-05 | 2 | -6/+6 |
* | fix broken markup of callback arguments; found with mandoc -Tlint | schwarze | 2017-06-10 | 2 | -11/+8 |
* | Drop cipher suites with DSS authentication - there is no good reason to | jsing | 2017-05-07 | 1 | -197/+1 |
* | Instead of starting a 'zero-sized' CBB at the size of the first addition | jsing | 2017-05-07 | 1 | -5/+8 |
* | Move state from ssl->internal to the handshake structure. | beck | 2017-05-07 | 15 | -256/+267 |
* | Bring in an SSL_HANDSHAKE structure and commence the great shovelling | beck | 2017-05-06 | 11 | -113/+119 |
* | Provide SSL{,_CTX}_set_{min,max}_proto_version() functions. | jsing | 2017-05-06 | 6 | -5/+115 |
* | Bump minors for symbol addition in libcrypto | beck | 2017-05-06 | 1 | -1/+1 |
* | Add missing $OpenBSD$ tags. | jsing | 2017-05-06 | 4 | -2/+4 |
* | Only enable -Werror on libcrypto/libssl/libtls if we are building with | jsing | 2017-04-30 | 1 | -2/+3 |
* | Switch back to freezero() and explicitly initialise data_len to zero. The | jsing | 2017-04-30 | 1 | -6/+3 |
* | Fix a bug caused by the return value being set early to signal successful | jsing | 2017-04-29 | 1 | -5/+5 |
* | Revert previous - we still want to do this, but I forgot about the installer | beck | 2017-04-29 | 2 | -14/+6 |
* | We now require you to have a working libpthread | beck | 2017-04-29 | 1 | -1/+2 |
* | Make it safe to call SSL_library_init more than once. | beck | 2017-04-29 | 1 | -5/+12 |
* | backout previous, data_len is not always initialized | otto | 2017-04-16 | 1 | -2/+5 |
* | Use freezero(3) when cleaning up session tickets - not only does it require | jsing | 2017-04-14 | 1 | -6/+3 |
* | Use freezero(3) to clean up the X25519 keys - simpler, cleaner code. | jsing | 2017-04-14 | 1 | -6/+3 |
* | Use freezero(3) in the CBB clean up path, since this could hold sensitive | jsing | 2017-04-14 | 1 | -3/+2 |
* | Switch i2d_SSL_SESSION() back to freezero(3) now that the size constraints | jsing | 2017-04-14 | 1 | -5/+2 |
* | Clean up server key exchange EC point handling. Encode the point directly | jsing | 2017-04-14 | 1 | -27/+15 |
* | Revert ssl_asn1.c r1.50 - CBB and freezero(3) do not play nicely together. | jsing | 2017-04-11 | 1 | -2/+5 |
* | Use freezero() for the internal opaque structures, instead of the current | jsing | 2017-04-10 | 3 | -18/+9 |
* | Use freezero() for X25519 keys - same result with more readable code. | jsing | 2017-04-10 | 1 | -7/+3 |
* | freezero() the key block; simpler code and less of it. | jsing | 2017-04-10 | 1 | -7/+3 |
* | Use freezero() for i2d_SSL_SESSION() - one line of code instead of three. | jsing | 2017-04-10 | 1 | -5/+2 |
* | fix some .Xr errors that jmc@ found with mdoclint(1) | schwarze | 2017-04-10 | 3 | -12/+13 |
* | new manual page SSL_get_server_tmp_key(3) | schwarze | 2017-04-10 | 3 | -2/+88 |
* | Additional SSL_SESSION documentation | schwarze | 2017-04-10 | 11 | -16/+349 |
* | for pure *_ctrl() wrapper macros, move the reference from ssl(3) | schwarze | 2017-04-10 | 14 | -49/+54 |
* | new manual page SSL_CTX_set_tlsext_servername_callback(3) for SNI; | schwarze | 2017-04-10 | 2 | -1/+126 |
* | Convert various client key exchange functions to freezero(3). The memory | jsing | 2017-04-10 | 1 | -14/+5 |
* | pasto; from <Jon dot Spillett at oracle dot com> via OpenSSL commit 3aaa1bd0 | schwarze | 2017-04-10 | 1 | -3/+3 |
* | typo fix; from <Jon dot Spillett at oracle dot com> | schwarze | 2017-04-10 | 1 | -5/+5 |
* | tweak previous; | jmc | 2017-03-29 | 1 | -3/+5 |
* | Fix typo in function name; | schwarze | 2017-03-28 | 1 | -4/+5 |
* | After i wrote SSL_renegotiate(3) from scratch, OpenSSL also | schwarze | 2017-03-28 | 1 | -12/+109 |
* | Update RFC reference for TLSEXT_TYPE_padding. | jsing | 2017-03-25 | 1 | -5/+2 |
* | Check tls1_PRF() return value in tls1_generate_master_secret(). | jsing | 2017-03-25 | 1 | -4/+4 |
* | More cleanup for tls1_PRF()/tls1_P_hash() - change the argument order of | jsing | 2017-03-25 | 1 | -46/+50 |