summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* Make SSL{,_CTX}_set_alpn_protos() do atomic updates and handle NULL.doug2017-08-131-10/+38
* Remove support for the TLS padding extension.jsing2017-08-132-39/+4
* Nuke SSL_OP_CRYPTOPRO_TLSEXT_BUG.jsing2017-08-132-27/+4
* Rewrite the TLS status request extension to use the new TLS extension framework.beck2017-08-123-177/+179
* Convert TLS signature algorithms extension handling to the new framework.jsing2017-08-126-63/+99
* Rewrite session ticket TLS extension handling using CBB/CBS and the newdoug2017-08-123-65/+145
* Remove NPN support.jsing2017-08-127-377/+28
* Import the SSL_CTX_set1_groups(3) manual page from OpenSSL, deletingschwarze2017-08-125-6/+173
* New manual page SSL_set_tmp_ecdh(3) written from scratch.schwarze2017-08-124-7/+112
* Remove lots of outdated information found by jsing@.schwarze2017-08-121-192/+14
* Remove support for DSS/DSA, since we removed the cipher suites a whilejsing2017-08-129-85/+16
* Clear the child pointer in CBB_cleanup(), so that we have fewer pointersjsing2017-08-121-1/+2
* remove bogus ".POD" from .Dt name; noticed by jsing@schwarze2017-08-111-3/+3
* I don't think eay will ever fix this...jsing2017-08-111-2/+2
* style(9) in ssl_set_cert_masks().jsing2017-08-111-7/+7
* Rewrite EllipticCurves TLS extension handling using CBB/CBS and the newdoug2017-08-114-76/+135
* Convert ssl3_send_certificate_request() to CBB.jsing2017-08-113-63/+73
* Add doug@'s copyright since he just added code to these two files.jsing2017-08-112-2/+4
* Rewrite the ECPointFormats TLS extension handling using CBB/CBS and thedoug2017-08-114-147/+125
* Clean up the EC key/curve configuration handling.jsing2017-08-107-120/+54
* Pull out the code that identifies if we have an ECC cipher in the cipherjsing2017-08-093-34/+52
* Consistently return from each SSL/SSL_CTX control case, rather thanjsing2017-08-091-33/+27
* Split out the remaining SSL_CTX controls into individual functions.jsing2017-08-091-40/+88
* Start splitting out SSL_CTX controls into individual functions, so thatjsing2017-08-091-71/+92
* Be consistent and return from each SSL control case, rather than breakingjsing2017-08-091-18/+10
* Split out the remaining SSL controls into individual functions.jsing2017-08-091-46/+93
* Split more controls into individual functions.jsing2017-08-091-64/+91
* Start splitting out controls into individual functions, so that they canjsing2017-08-091-29/+63
* Remove unnecessary curly braces and unindent. Also add a few blank linesjsing2017-08-091-11/+13
* Fix conditionals for DH controls.jsing2017-08-091-3/+3
* add missing and correct misspelled names, most in NAME sections;schwarze2017-08-012-6/+8
* as noted by Hanno Boeck, using the *check_private_key functions isbenno2017-07-251-6/+22
* Rewrite and move the last remnants of the ServerHello SNI handling intojsing2017-07-242-29/+25
* Rewrite the TLS Renegotiation Indication extension handling using CBB/CBSjsing2017-07-246-346/+161
* Hook the TLS extension parsing framework into the serverhello parsing.jsing2017-07-231-1/+6
* Check the return value of CBB_init_fixed(), since it can fail.jsing2017-07-191-3/+5
* Start rewriting TLS extension handling.jsing2017-07-164-141/+328
* Remove unused variable.jsing2017-07-151-3/+3
* nits about trailing punctuation found with mandoc -Tlintschwarze2017-07-051-4/+4
* fix cross references to self; found with mandoc -Tlintschwarze2017-07-052-6/+6
* fix broken markup of callback arguments; found with mandoc -Tlintschwarze2017-06-102-11/+8
* Drop cipher suites with DSS authentication - there is no good reason tojsing2017-05-071-197/+1
* Instead of starting a 'zero-sized' CBB at the size of the first additionjsing2017-05-071-5/+8
* Move state from ssl->internal to the handshake structure.beck2017-05-0715-256/+267
* Bring in an SSL_HANDSHAKE structure and commence the great shovellingbeck2017-05-0611-113/+119
* Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.jsing2017-05-066-5/+115
* Bump minors for symbol addition in libcryptobeck2017-05-061-1/+1
* Add missing $OpenBSD$ tags.jsing2017-05-064-2/+4
* Only enable -Werror on libcrypto/libssl/libtls if we are building withjsing2017-04-301-2/+3
* Switch back to freezero() and explicitly initialise data_len to zero. Thejsing2017-04-301-6/+3