summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* various minor cleanup;jmc2016-12-1610-34/+34
|
* Make sure all manual pages discussing X509_NAME objectsschwarze2016-12-144-12/+16
| | | | | reference X509_NAME_new(3). Sparingly add a few other references to relevant X509_NAME*(3) pages while here.
* Complete the CBB conversion and cleanup of send_client_key_exchange().jsing2016-12-131-42/+12
| | | | ok doug@
* Convert ssl3_send_client_kex_gost() to CBB.jsing2016-12-131-17/+19
| | | | ok doug@
* Convert ssl3_send_client_kex_ecdhe() to CBB. Also check the return value ofjsing2016-12-131-34/+35
| | | | | | the EC_POINT_point2oct() calls. Feedback from and ok doug@
* Add Copyright and license.schwarze2016-12-101-1047/+149
| | | | | | | | | | | | | | Delete all the function prototypes. They are all available from their individual manual pages. Here, they were incomplete and nothing but a maintenance nightmare. Add several missing cross reference, such that this page now references all libssl manual pages. Delete a sentence that said nothing and correct a typo. Now all libssl manuals have proper Copyright notices and licenses, and i have merged all improvements from OpenSSL that i could find.
* Write an SSL_get_shared_ciphers(3) manual from scratch; another oneschwarze2016-12-102-1/+72
| | | | | | | | where BUGS is longer than DESCRIPTION. The function is listed in ssl(3) and <openssl/ssl.h>, so it's clearly public. The code looks slightly mysterious to me, so it would be welcome if somebody more familiar with TLS protocols could check factual accuracy.
* New manual pages SSL_get_certificate(3), SSL_get_state(3), andschwarze2016-12-105-4/+286
| | | | | SSL_num_renegotiations(3) written from scratch. These functions are listed in ssl(3) and <openssl/ssl.h>, so they are clearly public.
* Document SSL_version(3). It's listed in ssl(3) and <openssl/ssl.h>,schwarze2016-12-101-7/+20
| | | | so it's clearly a public interface.
* Write SSL_renegotiate(3) manual from scratch; this function is listedschwarze2016-12-072-1/+58
| | | | | | | in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. More could probably be said, the code looks somewhat mysterious to me, but i think this stub is already better than nothing.
* add missing .Nm SSL_peek in the NAME sectionschwarze2016-12-071-3/+4
|
* Write SSL_copy_session_id(3) manual from scratch. This function isschwarze2016-12-072-1/+78
| | | | | | | listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. We might wish to merge the improved code from OpenSSL 1.1.0, but that's major bump, so i'm documenting the BUGS for now.
* Write new SSL_dup(3) manual from scratch. This function is listedschwarze2016-12-072-1/+61
| | | | in ssl(3) and <openssl/ssl.h>, so it is clearly public.
* New SSL_dup_CA_list(3) manual written from scratch.schwarze2016-12-072-1/+53
| | | | Mentioned in ssl(3) and <openssl/ssl.h>, so it is public.
* Add documentation for SSL_add_file_cert_subjects_to_stack(3) andschwarze2016-12-071-25/+103
| | | | | | | | | | | | | | | SSL_add_dir_cert_subjects_to_stack(3), written from scratch. Both functions are listed in ssl(3) and <openssl/ssl.h> and recommended for the use by browsers in source code comments, so they are clearly public interfaces. Mention deduplication. Purge some duplicate text and improve some wording while here. Two additional cross references instead of the useless ssl(3). Add HISTORY, AUTHORS, and BUGS. It is depressing that BUGS (purely from code inspection) became longer than the DESCRIPTION.
* Convert ssl3_send_client_kex_dhe() to CBB.jsing2016-12-071-14/+23
| | | | ok doug@
* Ensure that we zero memory that contiansthe ASN.1 encoded session, sincejsing2016-12-071-26/+29
| | | | | | this contains the session master key. ok deraadt@ doug@
* Ensure that we zero memory used to hold the ASN.1 encoded session, sincejsing2016-12-071-1/+4
| | | | | | this contains the session master key. ok deraadt@ doug@
* An SSL_SESSION_print(3) manual written from scratch. It's clearlyschwarze2016-12-062-1/+68
| | | | | a public interface since it's listed both in ssl(3) and in <openssl/ssl.h>. Nothing to pilfer from OpenSSL in this case...
* s/SSL_CTX_need_tmp_rsa/SSL_CTX_need_tmp_RSA/schwarze2016-12-061-5/+5
| | | | | | | | | | | | | | because that's what <openssl/ssl.h> #defines. That's likely a typo in the header file because all the other functions are called *tmp_rsa*(). But it would be a bad idea to fix such a bug in interfaces that are only provided for backward compatibility in the first place, so i'm adjusting the manual to be bug-compatible with the code, for now. But, pretty please, for the next major bump, somebody go get Bob's flensing knife and excise this part of the interface. Like, export ciphers? Really?
* Copyright and license for the remaining manuals in this directoryschwarze2016-12-066-13/+296
|
* Add Copyright and license.schwarze2016-12-061-8/+52
| | | | | | Garbage collect empty RETURN VALUES section. Delete useless cross reference to ssl(3). Add cross reference to SSL_SESSION_new(3).
* New manual page SSL_SESSION_new(3) written from scratch.schwarze2016-12-062-1/+64
| | | | | | The function prototype is listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface, but OpenSSL has no documentation about it whatsoever.
* Convert ssl3_send_client_kex_rsa() to CBB.jsing2016-12-061-14/+36
| | | | ok doug@
* Now that ssl3_send_{client,server}_certificate() are using the commonjsing2016-12-064-176/+6
| | | | handshake functions, we can remove more copied code from DTLS.
* Convert certificate handshake message generation to CBB, with some cleanjsing2016-12-065-64/+168
| | | | | | | | | | up and restructure. This also adds CBB based variants of the ssl3_handshake_msg_{start,finish} functions - for the time being these use a CBB to build the messages, then copy back into the init_buf. ok doug@
* replace all references to BIO(3) with references to BIO_new(3)schwarze2016-12-0611-33/+33
|
* Add Copyright and license.schwarze2016-12-051-2/+50
| | | | Add one cross reference, from OpenSSL.
* Convert ssl_cipher_list_to_bytes() to CBB, changing the function to returnjsing2016-12-044-32/+53
| | | | | | | the number of bytes written via an explicit *outlen argument and retaining the return value to indicate success or failure. ok doug@
* Cleanup some of ssl3_send_client_kex_rsa() - tmp_buf is really thejsing2016-12-041-10/+12
| | | | | | | | premaster secret, so name it accordingly. Also, remove bogus assignment of master_key_length - the correct value is assigned when the master_key is set. ok beck@ doug@
* Convert ssl3_send_server_hello() to CBB.jsing2016-12-041-18/+38
| | | | ok beck@ doug@
* Add Copyright and license.schwarze2016-12-041-14/+59
| | | | | Stop talking about SSLv2 and SSLv3. Some minor tweaks.
* Add Copyright and license.schwarze2016-12-041-21/+82
| | | | Wording improvements and a bit of additional information from OpenSSL.
* Add Copyright and license.schwarze2016-12-042-9/+101
| | | | Stop talking about SSLv2 and SSLv3.
* Copyright and licenseschwarze2016-12-0411-33/+550
|
* Add Copyright and license.schwarze2016-12-041-76/+107
| | | | | | Merge documentation of SSL_peek(3) from OpenSSL. Stop taking about SSLv2. Many wording improvements, most from OpenSSL.
* Add Copyright and license.schwarze2016-12-041-13/+57
| | | | | In the SYNOPSIS, show prototypes, not #defines. Delete a note about ancient OpenSSL versions.
* Address a potential leak in ssl3_get_server_kex_ecdhe() - if we allocatejsing2016-12-031-3/+4
| | | | | | | ngroup and the following EC_KEY_set_group() fails, ngroup will not be freed. Avoid this by freeing on return. ok millert@
* Avoid signed vs unsigned warnings from clang by adding two casts,jsing2016-12-034-8/+10
| | | | | | slightly rewriting some code and changing the type of an array. ok bcook@ doug@
* Add Copyright and license.schwarze2016-12-031-6/+49
| | | | Delete SSLv2 and SSLv3 remnants.
* Add Copyright and license.schwarze2016-12-031-5/+53
| | | | Minor corrections while here.
* Add Copyright and license.schwarze2016-12-031-6/+61
| | | | Some additional explanations from OpenSSL.
* Add Copyright and license.schwarze2016-12-031-5/+50
| | | | Delete empty RETURN VALUES section.
* Add Copyright and license.schwarze2016-12-031-20/+77
| | | | | | Fix the prototype of SSL_get_current_cipher(3). In the SYNOPSIS, show prototypes rather than #defines. Some minor improvements from OpenSSL.
* Add Copyright and license.schwarze2016-12-031-22/+50
| | | | | | Delete the RETURN VALUES section. The content is completely unrelated to the topic of the page - that must have been a pasto in the original commit in OpenSSL.
* Add Copyright and license.schwarze2016-12-031-11/+62
| | | | | Some additional explanations from OpenSSL. Delete empty RETURN VALUES section.
* Copyright and licenseschwarze2016-12-036-14/+296
|
* Copyright and licenseschwarze2016-12-015-14/+251
|
* Add Copyright and license.schwarze2016-12-011-23/+71
| | | | | Talk about TLS_method() rather than SSLv23_method(). Rename WARNINGS section to CAVEATS.
* Copyright and licenseschwarze2016-12-011-2/+50
|
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-23 16:18:04 +0000