| Commit message (Expand) | Author | Age | Files | Lines |
| * | Remove support for DSS/DSA, since we removed the cipher suites a while | jsing | 2017-08-12 | 9 | -85/+16 |
| * | Clear the child pointer in CBB_cleanup(), so that we have fewer pointers | jsing | 2017-08-12 | 1 | -1/+2 |
| * | remove bogus ".POD" from .Dt name; noticed by jsing@ | schwarze | 2017-08-11 | 1 | -3/+3 |
| * | I don't think eay will ever fix this... | jsing | 2017-08-11 | 1 | -2/+2 |
| * | style(9) in ssl_set_cert_masks(). | jsing | 2017-08-11 | 1 | -7/+7 |
| * | Rewrite EllipticCurves TLS extension handling using CBB/CBS and the new | doug | 2017-08-11 | 4 | -76/+135 |
| * | Convert ssl3_send_certificate_request() to CBB. | jsing | 2017-08-11 | 3 | -63/+73 |
| * | Add doug@'s copyright since he just added code to these two files. | jsing | 2017-08-11 | 2 | -2/+4 |
| * | Rewrite the ECPointFormats TLS extension handling using CBB/CBS and the | doug | 2017-08-11 | 4 | -147/+125 |
| * | Clean up the EC key/curve configuration handling. | jsing | 2017-08-10 | 7 | -120/+54 |
| * | Pull out the code that identifies if we have an ECC cipher in the cipher | jsing | 2017-08-09 | 3 | -34/+52 |
| * | Consistently return from each SSL/SSL_CTX control case, rather than | jsing | 2017-08-09 | 1 | -33/+27 |
| * | Split out the remaining SSL_CTX controls into individual functions. | jsing | 2017-08-09 | 1 | -40/+88 |
| * | Start splitting out SSL_CTX controls into individual functions, so that | jsing | 2017-08-09 | 1 | -71/+92 |
| * | Be consistent and return from each SSL control case, rather than breaking | jsing | 2017-08-09 | 1 | -18/+10 |
| * | Split out the remaining SSL controls into individual functions. | jsing | 2017-08-09 | 1 | -46/+93 |
| * | Split more controls into individual functions. | jsing | 2017-08-09 | 1 | -64/+91 |
| * | Start splitting out controls into individual functions, so that they can | jsing | 2017-08-09 | 1 | -29/+63 |
| * | Remove unnecessary curly braces and unindent. Also add a few blank lines | jsing | 2017-08-09 | 1 | -11/+13 |
| * | Fix conditionals for DH controls. | jsing | 2017-08-09 | 1 | -3/+3 |
| * | add missing and correct misspelled names, most in NAME sections; | schwarze | 2017-08-01 | 2 | -6/+8 |
| * | as noted by Hanno Boeck, using the *check_private_key functions is | benno | 2017-07-25 | 1 | -6/+22 |
| * | Rewrite and move the last remnants of the ServerHello SNI handling into | jsing | 2017-07-24 | 2 | -29/+25 |
| * | Rewrite the TLS Renegotiation Indication extension handling using CBB/CBS | jsing | 2017-07-24 | 6 | -346/+161 |
| * | Hook the TLS extension parsing framework into the serverhello parsing. | jsing | 2017-07-23 | 1 | -1/+6 |
| * | Check the return value of CBB_init_fixed(), since it can fail. | jsing | 2017-07-19 | 1 | -3/+5 |
| * | Start rewriting TLS extension handling. | jsing | 2017-07-16 | 4 | -141/+328 |
| * | Remove unused variable. | jsing | 2017-07-15 | 1 | -3/+3 |
| * | nits about trailing punctuation found with mandoc -Tlint | schwarze | 2017-07-05 | 1 | -4/+4 |
| * | fix cross references to self; found with mandoc -Tlint | schwarze | 2017-07-05 | 2 | -6/+6 |
| * | fix broken markup of callback arguments; found with mandoc -Tlint | schwarze | 2017-06-10 | 2 | -11/+8 |
| * | Drop cipher suites with DSS authentication - there is no good reason to | jsing | 2017-05-07 | 1 | -197/+1 |
| * | Instead of starting a 'zero-sized' CBB at the size of the first addition | jsing | 2017-05-07 | 1 | -5/+8 |
| * | Move state from ssl->internal to the handshake structure. | beck | 2017-05-07 | 15 | -256/+267 |
| * | Bring in an SSL_HANDSHAKE structure and commence the great shovelling | beck | 2017-05-06 | 11 | -113/+119 |
| * | Provide SSL{,_CTX}_set_{min,max}_proto_version() functions. | jsing | 2017-05-06 | 6 | -5/+115 |
| * | Bump minors for symbol addition in libcrypto | beck | 2017-05-06 | 1 | -1/+1 |
| * | Add missing $OpenBSD$ tags. | jsing | 2017-05-06 | 4 | -2/+4 |
| * | Only enable -Werror on libcrypto/libssl/libtls if we are building with | jsing | 2017-04-30 | 1 | -2/+3 |
| * | Switch back to freezero() and explicitly initialise data_len to zero. The | jsing | 2017-04-30 | 1 | -6/+3 |
| * | Fix a bug caused by the return value being set early to signal successful | jsing | 2017-04-29 | 1 | -5/+5 |
| * | Revert previous - we still want to do this, but I forgot about the installer | beck | 2017-04-29 | 2 | -14/+6 |
| * | We now require you to have a working libpthread | beck | 2017-04-29 | 1 | -1/+2 |
| * | Make it safe to call SSL_library_init more than once. | beck | 2017-04-29 | 1 | -5/+12 |
| * | backout previous, data_len is not always initialized | otto | 2017-04-16 | 1 | -2/+5 |
| * | Use freezero(3) when cleaning up session tickets - not only does it require | jsing | 2017-04-14 | 1 | -6/+3 |
| * | Use freezero(3) to clean up the X25519 keys - simpler, cleaner code. | jsing | 2017-04-14 | 1 | -6/+3 |
| * | Use freezero(3) in the CBB clean up path, since this could hold sensitive | jsing | 2017-04-14 | 1 | -3/+2 |
| * | Switch i2d_SSL_SESSION() back to freezero(3) now that the size constraints | jsing | 2017-04-14 | 1 | -5/+2 |
| * | Clean up server key exchange EC point handling. Encode the point directly | jsing | 2017-04-14 | 1 | -27/+15 |