| Commit message (Expand) | Author | Age | Files | Lines |
* | Bump minors for symbol addition in libcrypto | beck | 2017-05-06 | 1 | -1/+1 |
* | Add missing $OpenBSD$ tags. | jsing | 2017-05-06 | 4 | -2/+4 |
* | Only enable -Werror on libcrypto/libssl/libtls if we are building with | jsing | 2017-04-30 | 1 | -2/+3 |
* | Switch back to freezero() and explicitly initialise data_len to zero. The | jsing | 2017-04-30 | 1 | -6/+3 |
* | Fix a bug caused by the return value being set early to signal successful | jsing | 2017-04-29 | 1 | -5/+5 |
* | Revert previous - we still want to do this, but I forgot about the installer | beck | 2017-04-29 | 2 | -14/+6 |
* | We now require you to have a working libpthread | beck | 2017-04-29 | 1 | -1/+2 |
* | Make it safe to call SSL_library_init more than once. | beck | 2017-04-29 | 1 | -5/+12 |
* | backout previous, data_len is not always initialized | otto | 2017-04-16 | 1 | -2/+5 |
* | Use freezero(3) when cleaning up session tickets - not only does it require | jsing | 2017-04-14 | 1 | -6/+3 |
* | Use freezero(3) to clean up the X25519 keys - simpler, cleaner code. | jsing | 2017-04-14 | 1 | -6/+3 |
* | Use freezero(3) in the CBB clean up path, since this could hold sensitive | jsing | 2017-04-14 | 1 | -3/+2 |
* | Switch i2d_SSL_SESSION() back to freezero(3) now that the size constraints | jsing | 2017-04-14 | 1 | -5/+2 |
* | Clean up server key exchange EC point handling. Encode the point directly | jsing | 2017-04-14 | 1 | -27/+15 |
* | Revert ssl_asn1.c r1.50 - CBB and freezero(3) do not play nicely together. | jsing | 2017-04-11 | 1 | -2/+5 |
* | Use freezero() for the internal opaque structures, instead of the current | jsing | 2017-04-10 | 3 | -18/+9 |
* | Use freezero() for X25519 keys - same result with more readable code. | jsing | 2017-04-10 | 1 | -7/+3 |
* | freezero() the key block; simpler code and less of it. | jsing | 2017-04-10 | 1 | -7/+3 |
* | Use freezero() for i2d_SSL_SESSION() - one line of code instead of three. | jsing | 2017-04-10 | 1 | -5/+2 |
* | fix some .Xr errors that jmc@ found with mdoclint(1) | schwarze | 2017-04-10 | 3 | -12/+13 |
* | new manual page SSL_get_server_tmp_key(3) | schwarze | 2017-04-10 | 3 | -2/+88 |
* | Additional SSL_SESSION documentation | schwarze | 2017-04-10 | 11 | -16/+349 |
* | for pure *_ctrl() wrapper macros, move the reference from ssl(3) | schwarze | 2017-04-10 | 14 | -49/+54 |
* | new manual page SSL_CTX_set_tlsext_servername_callback(3) for SNI; | schwarze | 2017-04-10 | 2 | -1/+126 |
* | Convert various client key exchange functions to freezero(3). The memory | jsing | 2017-04-10 | 1 | -14/+5 |
* | pasto; from <Jon dot Spillett at oracle dot com> via OpenSSL commit 3aaa1bd0 | schwarze | 2017-04-10 | 1 | -3/+3 |
* | typo fix; from <Jon dot Spillett at oracle dot com> | schwarze | 2017-04-10 | 1 | -5/+5 |
* | tweak previous; | jmc | 2017-03-29 | 1 | -3/+5 |
* | Fix typo in function name; | schwarze | 2017-03-28 | 1 | -4/+5 |
* | After i wrote SSL_renegotiate(3) from scratch, OpenSSL also | schwarze | 2017-03-28 | 1 | -12/+109 |
* | Update RFC reference for TLSEXT_TYPE_padding. | jsing | 2017-03-25 | 1 | -5/+2 |
* | Check tls1_PRF() return value in tls1_generate_master_secret(). | jsing | 2017-03-25 | 1 | -4/+4 |
* | More cleanup for tls1_PRF()/tls1_P_hash() - change the argument order of | jsing | 2017-03-25 | 1 | -46/+50 |
* | Fewer magic numbers. | jsing | 2017-03-18 | 1 | -3/+3 |
* | t1_enc.c | jsing | 2017-03-18 | 1 | -3/+2 |
* | Currently tls1_PRF() requires that a temporary buffer be provided, that | jsing | 2017-03-18 | 1 | -50/+32 |
* | Remove the handshake digests and related code, replacing remaining uses | jsing | 2017-03-10 | 7 | -166/+45 |
* | Switch CBB to use recallocarray() - this ensures that we do not leak | jsing | 2017-03-10 | 1 | -2/+2 |
* | First pass at cleaning up the tls1_P_hash() function - remove a pointless | jsing | 2017-03-10 | 1 | -20/+19 |
* | Make tls1_PRF() non-static so it can be regress tested. | jsing | 2017-03-10 | 1 | -2/+7 |
* | Correctly handle TLS PRF with MD5+SHA1 - the secret has to be partitioned | jsing | 2017-03-07 | 1 | -5/+26 |
* | Clean up and simplify the tls1_PRF() implementation now that we have a | jsing | 2017-03-06 | 1 | -48/+19 |
* | Correctly convert an SSLv2 challenge into an SSLv3/TLS client random by | jsing | 2017-03-05 | 1 | -9/+27 |
* | Provide a rolling handshake hash that commences as soon as the cipher | jsing | 2017-03-05 | 8 | -54/+193 |
* | Convert various handshake message generation functions to CBB. | jsing | 2017-03-05 | 4 | -56/+113 |
* | Drop the second argument of dtls1_set_message_header() and make it a void | jsing | 2017-03-04 | 3 | -13/+10 |
* | Call ssl3_handshake_write() instead of ssl3_do_write() - this was missed | jsing | 2017-03-04 | 1 | -2/+2 |
* | Convert ssl3_{get,send}_server_key_exchange() to EVP_md5_sha1(). | jsing | 2017-03-01 | 3 | -44/+29 |
* | Bump minors due to symbol addition. | jsing | 2017-02-28 | 1 | -1/+1 |
* | Stop pretending that MD5 and SHA1 might not exist - rather than locating | jsing | 2017-02-28 | 4 | -20/+8 |