| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | move default_passwd_cb and default_passwd_cb_userdata back into | beck | 2017-01-23 | 4 | -30/+35 |
| | | | | | | | | the ssl_ctx from internal - these are used directly by python and openvpn and a few other things - we have the set accessors but the get accessors were added in 1.1 and these roll their own caveat OPENSSL_VERSION chickenpluckery | ||||
| * | Move options and mode from SSL_CTX and SSL to internal, since these can be | jsing | 2017-01-23 | 12 | -66/+70 |
| | | | | | set and cleared via existing functions. | ||||
| * | Split most of SSL_METHOD out into an internal variant, which is opaque. | jsing | 2017-01-23 | 23 | -303/+378 |
| | | | | | Discussed with beck@ | ||||
| * | Remove ssl_ctrl, ssl_ctx_ctrl, ssl_callback_ctrl and ssl_ctx_callback_ctrl | jsing | 2017-01-23 | 8 | -76/+14 |
| | | | | | | | | from SSL_METHOD, replacing usage with direct calls to the appropriate functions. ok beck@ | ||||
| * | send state and rstate from ssl_st into internal. There are accessors | beck | 2017-01-23 | 16 | -295/+296 |
| | | | | | | so these should not be diddled with directly ok jsing@ | ||||
| * | move back read_hash and enc_read_ctx into ssl_st. wpa_supplicant and | beck | 2017-01-23 | 8 | -52/+57 |
| | | | | | other perversions touches them sickly and unnaturally. | ||||
| * | Move a large part of ssl_st into internal, so we can see what squeals. | beck | 2017-01-23 | 22 | -888/+892 |
| | | | | | ok jsing@ | ||||
| * | Move ex_data, next and prev from SSL_SESSION to internal. | jsing | 2017-01-23 | 3 | -31/+32 |
| | | | | | ok beck@ | ||||
| * | Move most of the fields in SSL_CTX to internal - the ones that remain are | jsing | 2017-01-23 | 11 | -202/+209 |
| | | | | | | | known to be in use. ok beck@ | ||||
| * | move the callbacks from ssl_st to internal | beck | 2017-01-23 | 19 | -230/+237 |
| | | | | | ok jsing@ | ||||
| * | Move callback function pointers and argument pointers from SSL_CTX to | jsing | 2017-01-23 | 16 | -200/+210 |
| | | | | | | | internal. ok beck@ | ||||
| * | Move not_resumable and sess_cert from SSL_SESSION to internal. | jsing | 2017-01-23 | 7 | -47/+50 |
| | | | | | ok beck@ | ||||
| * | Remove heartbeat related fields from the SSL_CTX, which are unused | jsing | 2017-01-23 | 1 | -9/+1 |
| | | | | | (thankfully). | ||||
| * | Move the stats struct from SSL_CTX to internal. | jsing | 2017-01-23 | 10 | -65/+64 |
| | | | | | ok beck@ | ||||
| * | Move most of the SSL3_STATE fields to internal - the ones that remain are | jsing | 2017-01-22 | 18 | -681/+690 |
| | | | | | | | known to be used by ports. ok beck@ | ||||
| * | Move most of DTLS1_STATE to internal. | beck | 2017-01-22 | 11 | -273/+272 |
| | | | | | ok jsing@ | ||||
| * | Move ALPN and NPN fields from SSL/SSL_CTX to internal. | jsing | 2017-01-22 | 7 | -125/+129 |
| | | | | | ok beck@ | ||||
| * | Move internal parts of ssl_session_st to internal | beck | 2017-01-22 | 4 | -40/+40 |
| | | | | | ok jsing@ | ||||
| * | Move recently added min_version/max_version from SSL and SSL_CTX to their | jsing | 2017-01-22 | 2 | -10/+6 |
| | | | | | opaque structs. | ||||
| * | Bump majors for libssl and libtls following the translucent struct change. | jsing | 2017-01-22 | 1 | -1/+1 |
| | | | | | Further changes to the publically visible structs will ride this bump. | ||||
| * | Convert publically visible structs to translucent structs. | jsing | 2017-01-22 | 8 | -29/+111 |
| | | | | | | | | | | | | | | This change adds an internal opaque struct for each of the significant publically visible structs. The opaque struct is then allocated and attached to the publically visible struct when the appropriate *_new() function is called, then cleared and freed as necessary. This will allow for changes to be made to the internals of libssl, without requiring a major bump each time the publically visible structs are modified. ok beck@ | ||||
| * | Clean up ssl3_new() - in particular, we do not need to zero fields that | jsing | 2017-01-22 | 1 | -11/+4 |
| | | | | | | | are within a struct that was just allocated via calloc. ok beck@ | ||||
| * | There is no point in setting struct fields to zero, when you've already | jsing | 2017-01-22 | 1 | -5/+2 |
| | | | | | | | zeroed the entire struct via memset. ok beck@ | ||||
| * | Specify minimum and maximum protocol version for each method. This is | jsing | 2017-01-21 | 6 | -6/+36 |
| | | | | | | | currently unused, but will be in the near future. ok beck@ | ||||
| * | Expand DECLARE_OBJ_BSEARCH_GLOBAL_CMP_FN macro. | jsing | 2017-01-21 | 1 | -2/+2 |
| | | | | | No change in preprocessor output (ignoring whitespace and line numbers). | ||||
| * | Expand IMPLEMENT_OBJ_BSEARCH_GLOBAL_CMP_FN macro. | jsing | 2017-01-21 | 1 | -2/+16 |
| | | | | | No change in generated assembly. | ||||
| * | Pull out, rework and dedup the code that determines the highest shared | jsing | 2017-01-03 | 4 | -79/+62 |
| | | | | | | | version. ok beck@ doug@ | ||||
| * | Add support for SSL_get_server_tmp_key(). | jsing | 2016-12-30 | 2 | -3/+74 |
| | | | | | ok doug@ | ||||
| * | Pull out (and largely rewrite) the code that determines the enabled | jsing | 2016-12-30 | 3 | -40/+54 |
| | | | | | | | | | | | protocol version range. This also fixes a bug whereby if all protocols were disabled, the client would still use TLSv1.2 in the client hello, only to have if fail with unsupported version when it received and processed the server hello. ok doug@ | ||||
| * | Remove now unused c2l, c2ln, l2c, n2l, l2cn and n2l3 macros. | jsing | 2016-12-30 | 2 | -53/+2 |
| | | |||||
| * | Explicitly include openssl/opensslconf.h in headers that use OPENSSL_NO_* | jsing | 2016-12-30 | 2 | -2/+4 |
| | | | | | defines - do not rely on another heading making those available for us. | ||||
| * | fix typo; from OpenSSL | schwarze | 2016-12-29 | 1 | -4/+4 |
| | | | | | | | commit 67adf0a7c273a82901ce8705ae8d71ee2f1c959c Author: Markus Triska <triska@metalevel.at> Date: Sun Dec 25 19:58:38 2016 +0100 | ||||
| * | Restore two frees that were unintentionally lost during recent refactoring. | jsing | 2016-12-26 | 1 | -1/+4 |
| | | |||||
| * | Restore previous ASN.1 encoding for the peer certificate - this was | jsing | 2016-12-26 | 1 | -7/+5 |
| | | | | | | | | | unintentionally changed during the CBS/CBB rewrite. Issue reported by jeremy@ due to failing ruby tests. Analysis and near identical diff from Kazuki Yamaguchi <k at rhe.jp>. | ||||
| * | Restore previous behaviour of incrementing the pointer so that it points | jsing | 2016-12-26 | 1 | -1/+2 |
| | | | | | | | at the end of the buffer. Issue identified by and diff from Kazuki Yamaguchi <k at rhe.jp>. | ||||
| * | Pacify compiler warning about an unitialized variable which is obviously | deraadt | 2016-12-21 | 1 | -3/+3 |
| | | | | | | not really being used. ok beck. | ||||
| * | Bump libcrypto/libssl/libtls majors due to libcrypto symbol removal and | jsing | 2016-12-21 | 1 | -1/+1 |
| | | | | | changes to libssl non-opaque structs. | ||||
| * | Add minimum and maximum version fields to SSL, SSL_CTX and SSL_METHOD | jsing | 2016-12-21 | 1 | -1/+10 |
| | | | | | | | for future work. Discussed with beck@ | ||||
| * | Add support for ECDHE with X25519. | jsing | 2016-12-21 | 7 | -91/+316 |
| | | | | | | | Testing of an earlier revision by naddy@. ok beck@ | ||||
| * | Convert ssl3_get_server_hello() to CBS. | jsing | 2016-12-18 | 3 | -60/+67 |
| | | | | | ok doug@ | ||||
| * | various minor cleanup; | jmc | 2016-12-16 | 10 | -34/+34 |
| | | |||||
| * | Make sure all manual pages discussing X509_NAME objects | schwarze | 2016-12-14 | 4 | -12/+16 |
| | | | | | | reference X509_NAME_new(3). Sparingly add a few other references to relevant X509_NAME*(3) pages while here. | ||||
| * | Complete the CBB conversion and cleanup of send_client_key_exchange(). | jsing | 2016-12-13 | 1 | -42/+12 |
| | | | | | ok doug@ | ||||
| * | Convert ssl3_send_client_kex_gost() to CBB. | jsing | 2016-12-13 | 1 | -17/+19 |
| | | | | | ok doug@ | ||||
| * | Convert ssl3_send_client_kex_ecdhe() to CBB. Also check the return value of | jsing | 2016-12-13 | 1 | -34/+35 |
| | | | | | | | the EC_POINT_point2oct() calls. Feedback from and ok doug@ | ||||
| * | Add Copyright and license. | schwarze | 2016-12-10 | 1 | -1047/+149 |
| | | | | | | | | | | | | | | | Delete all the function prototypes. They are all available from their individual manual pages. Here, they were incomplete and nothing but a maintenance nightmare. Add several missing cross reference, such that this page now references all libssl manual pages. Delete a sentence that said nothing and correct a typo. Now all libssl manuals have proper Copyright notices and licenses, and i have merged all improvements from OpenSSL that i could find. | ||||
| * | Write an SSL_get_shared_ciphers(3) manual from scratch; another one | schwarze | 2016-12-10 | 2 | -1/+72 |
| | | | | | | | | | where BUGS is longer than DESCRIPTION. The function is listed in ssl(3) and <openssl/ssl.h>, so it's clearly public. The code looks slightly mysterious to me, so it would be welcome if somebody more familiar with TLS protocols could check factual accuracy. | ||||
| * | New manual pages SSL_get_certificate(3), SSL_get_state(3), and | schwarze | 2016-12-10 | 5 | -4/+286 |
| | | | | | | SSL_num_renegotiations(3) written from scratch. These functions are listed in ssl(3) and <openssl/ssl.h>, so they are clearly public. | ||||
| * | Document SSL_version(3). It's listed in ssl(3) and <openssl/ssl.h>, | schwarze | 2016-12-10 | 1 | -7/+20 |
| | | | | | so it's clearly a public interface. | ||||
| * | Write SSL_renegotiate(3) manual from scratch; this function is listed | schwarze | 2016-12-07 | 2 | -1/+58 |
| | | | | | | | | in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. More could probably be said, the code looks somewhat mysterious to me, but i think this stub is already better than nothing. | ||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |