summaryrefslogtreecommitdiff
path: root/src/lib/libssl (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Convert ssl3_send_client_kex_dhe() to CBB.jsing2016-12-071-14/+23
| | | | ok doug@
* Ensure that we zero memory that contiansthe ASN.1 encoded session, sincejsing2016-12-071-26/+29
| | | | | | this contains the session master key. ok deraadt@ doug@
* Ensure that we zero memory used to hold the ASN.1 encoded session, sincejsing2016-12-071-1/+4
| | | | | | this contains the session master key. ok deraadt@ doug@
* An SSL_SESSION_print(3) manual written from scratch. It's clearlyschwarze2016-12-062-1/+68
| | | | | a public interface since it's listed both in ssl(3) and in <openssl/ssl.h>. Nothing to pilfer from OpenSSL in this case...
* s/SSL_CTX_need_tmp_rsa/SSL_CTX_need_tmp_RSA/schwarze2016-12-061-5/+5
| | | | | | | | | | | | | | because that's what <openssl/ssl.h> #defines. That's likely a typo in the header file because all the other functions are called *tmp_rsa*(). But it would be a bad idea to fix such a bug in interfaces that are only provided for backward compatibility in the first place, so i'm adjusting the manual to be bug-compatible with the code, for now. But, pretty please, for the next major bump, somebody go get Bob's flensing knife and excise this part of the interface. Like, export ciphers? Really?
* Copyright and license for the remaining manuals in this directoryschwarze2016-12-066-13/+296
|
* Add Copyright and license.schwarze2016-12-061-8/+52
| | | | | | Garbage collect empty RETURN VALUES section. Delete useless cross reference to ssl(3). Add cross reference to SSL_SESSION_new(3).
* New manual page SSL_SESSION_new(3) written from scratch.schwarze2016-12-062-1/+64
| | | | | | The function prototype is listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface, but OpenSSL has no documentation about it whatsoever.
* Convert ssl3_send_client_kex_rsa() to CBB.jsing2016-12-061-14/+36
| | | | ok doug@
* Now that ssl3_send_{client,server}_certificate() are using the commonjsing2016-12-064-176/+6
| | | | handshake functions, we can remove more copied code from DTLS.
* Convert certificate handshake message generation to CBB, with some cleanjsing2016-12-065-64/+168
| | | | | | | | | | up and restructure. This also adds CBB based variants of the ssl3_handshake_msg_{start,finish} functions - for the time being these use a CBB to build the messages, then copy back into the init_buf. ok doug@
* replace all references to BIO(3) with references to BIO_new(3)schwarze2016-12-0611-33/+33
|
* Add Copyright and license.schwarze2016-12-051-2/+50
| | | | Add one cross reference, from OpenSSL.
* Convert ssl_cipher_list_to_bytes() to CBB, changing the function to returnjsing2016-12-044-32/+53
| | | | | | | the number of bytes written via an explicit *outlen argument and retaining the return value to indicate success or failure. ok doug@
* Cleanup some of ssl3_send_client_kex_rsa() - tmp_buf is really thejsing2016-12-041-10/+12
| | | | | | | | premaster secret, so name it accordingly. Also, remove bogus assignment of master_key_length - the correct value is assigned when the master_key is set. ok beck@ doug@
* Convert ssl3_send_server_hello() to CBB.jsing2016-12-041-18/+38
| | | | ok beck@ doug@
* Add Copyright and license.schwarze2016-12-041-14/+59
| | | | | Stop talking about SSLv2 and SSLv3. Some minor tweaks.
* Add Copyright and license.schwarze2016-12-041-21/+82
| | | | Wording improvements and a bit of additional information from OpenSSL.
* Add Copyright and license.schwarze2016-12-042-9/+101
| | | | Stop talking about SSLv2 and SSLv3.
* Copyright and licenseschwarze2016-12-0411-33/+550
|
* Add Copyright and license.schwarze2016-12-041-76/+107
| | | | | | Merge documentation of SSL_peek(3) from OpenSSL. Stop taking about SSLv2. Many wording improvements, most from OpenSSL.
* Add Copyright and license.schwarze2016-12-041-13/+57
| | | | | In the SYNOPSIS, show prototypes, not #defines. Delete a note about ancient OpenSSL versions.
* Address a potential leak in ssl3_get_server_kex_ecdhe() - if we allocatejsing2016-12-031-3/+4
| | | | | | | ngroup and the following EC_KEY_set_group() fails, ngroup will not be freed. Avoid this by freeing on return. ok millert@
* Avoid signed vs unsigned warnings from clang by adding two casts,jsing2016-12-034-8/+10
| | | | | | slightly rewriting some code and changing the type of an array. ok bcook@ doug@
* Add Copyright and license.schwarze2016-12-031-6/+49
| | | | Delete SSLv2 and SSLv3 remnants.
* Add Copyright and license.schwarze2016-12-031-5/+53
| | | | Minor corrections while here.
* Add Copyright and license.schwarze2016-12-031-6/+61
| | | | Some additional explanations from OpenSSL.
* Add Copyright and license.schwarze2016-12-031-5/+50
| | | | Delete empty RETURN VALUES section.
* Add Copyright and license.schwarze2016-12-031-20/+77
| | | | | | Fix the prototype of SSL_get_current_cipher(3). In the SYNOPSIS, show prototypes rather than #defines. Some minor improvements from OpenSSL.
* Add Copyright and license.schwarze2016-12-031-22/+50
| | | | | | Delete the RETURN VALUES section. The content is completely unrelated to the topic of the page - that must have been a pasto in the original commit in OpenSSL.
* Add Copyright and license.schwarze2016-12-031-11/+62
| | | | | Some additional explanations from OpenSSL. Delete empty RETURN VALUES section.
* Copyright and licenseschwarze2016-12-036-14/+296
|
* Copyright and licenseschwarze2016-12-015-14/+251
|
* Add Copyright and license.schwarze2016-12-011-23/+71
| | | | | Talk about TLS_method() rather than SSLv23_method(). Rename WARNINGS section to CAVEATS.
* Copyright and licenseschwarze2016-12-011-2/+50
|
* Add Copyright and license.schwarze2016-12-011-7/+51
| | | | Delete empty RETURN VALUES section.
* Add Copyright and license.schwarze2016-12-011-108/+95
| | | | | Merge various updates from OpenSSL, in particular stop talking about what happens without SSL_OP_SINGLE_DH_USE, which is now always on.
* import tlsext documentation from OpenSSLschwarze2016-12-013-1/+464
|
* Copyright and licenseschwarze2016-12-014-11/+200
|
* import the parts of OpenSSL SSL_CTX_set_split_send_fragment(3)schwarze2016-12-012-1/+91
| | | | relevant for us, calling the page SSL_set_max_send_fragment(3)
* import SSL_CTX_set_read_ahead(3) from OpsenSSL, with considerable tweaksschwarze2016-12-012-1/+133
|
* Copyright and licenseschwarze2016-12-011-2/+49
|
* garbage collect PSK remnantsschwarze2016-12-015-279/+3
|
* Add Copyright and license.schwarze2016-12-011-134/+81
| | | | | | | | | | | | Delete explanation of SSL_OP_SINGLE_DH_USE, it is always on now. Delete explanation of obsolete option SSL_OP_EPHEMERAL_RSA. Delete various SSLv2 and SSLv3 remnants. Delete excessive verbiage detailing each obsolete option individually; instead, provide one concise list of obsolete options. Delete HISTORY of individual options; it was incomplete anyway and is not important enough to warrant so much bloat. Garbage collect two useless cross references.
* Add Copyright and license.schwarze2016-12-011-7/+50
| | | | | Delete a sentence explaining exploit mitigation countermeasures that have long been removed.
* Copyright and licenseschwarze2016-12-012-5/+99
|
* Add Copyright and license.schwarze2016-11-301-11/+73
| | | | | Correct prototypes. Drop the useless statement that a void function does not return a value.
* Add Copyright and license.schwarze2016-11-301-35/+58
| | | | | Add markup for the declaration of GEN_SESSION_CB. Garbage collect some remnants of SSLv2 and SSLv3.
* Add Copyright and license.schwarze2016-11-301-21/+60
| | | | | | Fix the declaration of pem_password_cb. Simplify wording, mostly from OpenSSL. Garbage collect the empty RETURN VALUES section.
* Copyright and license.schwarze2016-11-302-12/+101
|
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-05-02 02:42:45 +0000