summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* Clear the child pointer in CBB_cleanup(), so that we have fewer pointersjsing2017-08-121-1/+2
* remove bogus ".POD" from .Dt name; noticed by jsing@schwarze2017-08-111-3/+3
* I don't think eay will ever fix this...jsing2017-08-111-2/+2
* style(9) in ssl_set_cert_masks().jsing2017-08-111-7/+7
* Rewrite EllipticCurves TLS extension handling using CBB/CBS and the newdoug2017-08-114-76/+135
* Convert ssl3_send_certificate_request() to CBB.jsing2017-08-113-63/+73
* Add doug@'s copyright since he just added code to these two files.jsing2017-08-112-2/+4
* Rewrite the ECPointFormats TLS extension handling using CBB/CBS and thedoug2017-08-114-147/+125
* Clean up the EC key/curve configuration handling.jsing2017-08-107-120/+54
* Pull out the code that identifies if we have an ECC cipher in the cipherjsing2017-08-093-34/+52
* Consistently return from each SSL/SSL_CTX control case, rather thanjsing2017-08-091-33/+27
* Split out the remaining SSL_CTX controls into individual functions.jsing2017-08-091-40/+88
* Start splitting out SSL_CTX controls into individual functions, so thatjsing2017-08-091-71/+92
* Be consistent and return from each SSL control case, rather than breakingjsing2017-08-091-18/+10
* Split out the remaining SSL controls into individual functions.jsing2017-08-091-46/+93
* Split more controls into individual functions.jsing2017-08-091-64/+91
* Start splitting out controls into individual functions, so that they canjsing2017-08-091-29/+63
* Remove unnecessary curly braces and unindent. Also add a few blank linesjsing2017-08-091-11/+13
* Fix conditionals for DH controls.jsing2017-08-091-3/+3
* add missing and correct misspelled names, most in NAME sections;schwarze2017-08-012-6/+8
* as noted by Hanno Boeck, using the *check_private_key functions isbenno2017-07-251-6/+22
* Rewrite and move the last remnants of the ServerHello SNI handling intojsing2017-07-242-29/+25
* Rewrite the TLS Renegotiation Indication extension handling using CBB/CBSjsing2017-07-246-346/+161
* Hook the TLS extension parsing framework into the serverhello parsing.jsing2017-07-231-1/+6
* Check the return value of CBB_init_fixed(), since it can fail.jsing2017-07-191-3/+5
* Start rewriting TLS extension handling.jsing2017-07-164-141/+328
* Remove unused variable.jsing2017-07-151-3/+3
* nits about trailing punctuation found with mandoc -Tlintschwarze2017-07-051-4/+4
* fix cross references to self; found with mandoc -Tlintschwarze2017-07-052-6/+6
* fix broken markup of callback arguments; found with mandoc -Tlintschwarze2017-06-102-11/+8
* Drop cipher suites with DSS authentication - there is no good reason tojsing2017-05-071-197/+1
* Instead of starting a 'zero-sized' CBB at the size of the first additionjsing2017-05-071-5/+8
* Move state from ssl->internal to the handshake structure.beck2017-05-0715-256/+267
* Bring in an SSL_HANDSHAKE structure and commence the great shovellingbeck2017-05-0611-113/+119
* Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.jsing2017-05-066-5/+115
* Bump minors for symbol addition in libcryptobeck2017-05-061-1/+1
* Add missing $OpenBSD$ tags.jsing2017-05-064-2/+4
* Only enable -Werror on libcrypto/libssl/libtls if we are building withjsing2017-04-301-2/+3
* Switch back to freezero() and explicitly initialise data_len to zero. Thejsing2017-04-301-6/+3
* Fix a bug caused by the return value being set early to signal successfuljsing2017-04-291-5/+5
* Revert previous - we still want to do this, but I forgot about the installerbeck2017-04-292-14/+6
* We now require you to have a working libpthreadbeck2017-04-291-1/+2
* Make it safe to call SSL_library_init more than once.beck2017-04-291-5/+12
* backout previous, data_len is not always initializedotto2017-04-161-2/+5
* Use freezero(3) when cleaning up session tickets - not only does it requirejsing2017-04-141-6/+3
* Use freezero(3) to clean up the X25519 keys - simpler, cleaner code.jsing2017-04-141-6/+3
* Use freezero(3) in the CBB clean up path, since this could hold sensitivejsing2017-04-141-3/+2
* Switch i2d_SSL_SESSION() back to freezero(3) now that the size constraintsjsing2017-04-141-5/+2
* Clean up server key exchange EC point handling. Encode the point directlyjsing2017-04-141-27/+15
* Revert ssl_asn1.c r1.50 - CBB and freezero(3) do not play nicely together.jsing2017-04-111-2/+5