| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Tweak previous: | schwarze | 2021-01-02 | 1 | -19/+34 |
| | | | | | | | | * Do not abuse .Bl -tag for lists without bodies, use .Bl -item instead. * In tagged lists, put bodies into bodies, not into heads. * Add a few missing macros. * Drop some useless quoting. | ||||
| * | Make list of DHE parameters more prominent | kn | 2021-01-02 | 1 | -6/+19 |
| | | | | | | | | Follow the previous commit and complete the manual page for consistency; better readable and tags for free. OK tb | ||||
| * | Make the list of supported protocols more prominent | kn | 2020-12-30 | 1 | -5/+15 |
| | | | | | | | | | | | Manuals like httpd.conf(5) refer to this for valid protocol strings, but elements inlined into sentences are hard find to spot. Use a list as already done elsewhere in this manual. OK jmc on earlier version Feeback OK tb | ||||
| * | Note in the man page that the default protocols list includes 1.3 | beck | 2020-01-22 | 1 | -4/+4 |
| | | | | | ok jsing@ | ||||
| * | Add support for TLSv1.3 as a protocol to libtls. | jsing | 2020-01-20 | 1 | -6/+7 |
| | | | | | | | | This makes tls_config_parse_protocols() recognise and handle "tlsv1.3". If TLSv1.3 is enabled libtls will also request libssl to enable it. ok beck@ tb@ | ||||
| * | Document tls_conn_cipher_strength(). | jsing | 2019-11-02 | 1 | -2/+14 |
| | | | | | ok schwarze@ | ||||
| * | Group tls_{handshake,read,write,close}() return values documentation. | jsing | 2019-07-09 | 1 | -21/+21 |
| | | | | | | | | | | | Move the documentation for tls_error() down so that both the special return values for tls_{handshake,read,write,close}() directly follow the standard return values for the same functions. Prompted by deraadt@. ok deraadt@ schwarze@ | ||||
| * | tls_read() & tls_write() return 4 possible values: TLS_WANT_POLLOUT, | deraadt | 2019-06-20 | 1 | -4/+4 |
| | | | | | | | TLS_WANT_POLLIN, -1, or 0. After handling the first two, check for -1 rather than vaguely "< 0". ok jsing | ||||
| * | fix examples (libtls uses its own error reporting mechanism) | espie | 2019-03-20 | 1 | -4/+4 |
| | | | | | okay tb@ | ||||
| * | Delete a note taken during the rev. 1.1 man page splite | schwarze | 2018-12-14 | 1 | -5/+2 |
| | | | | | | | that should have been deleted before commit. The cross reference is already present below SEE ALSO. Glitch noticed by jsing@. | ||||
| * | expose the default cert file as a function, not a define. it's really | tedu | 2018-11-29 | 1 | -3/+9 |
| | | | | | | | an internal detail of the library, so the string should live inside it, not in the application code. ok jsing | ||||
| * | typo in argument type, from Mario dot Andres dot Campos at gmail dot com | schwarze | 2018-08-21 | 1 | -3/+3 |
| | | |||||
| * | Use the same order in NAME, SYNOPSIS, DESCRIPTION, and RETURN VALUES to | tb | 2018-07-24 | 1 | -27/+28 |
| | | | | | | | | improve readability and ease of maintenance. Positive feedback jmc Detailed suggestion & ok schwarze | ||||
| * | Document tls_peer_ocsp_result() and use it in place of the non-existent | tb | 2018-07-23 | 1 | -6/+12 |
| | | | | | | | | tls_peer_ocsp_result_msg() in the documentation. input & ok jsing Reads fine to jmc and makes sense to schwarze | ||||
| * | Move a detail on tls_connect(3) to its documentation and be a bit more | tb | 2018-07-09 | 1 | -5/+7 |
| | | | | | | | explicit about the servername argument of tls_connect_servername(3). input & ok jsing, input & ok schwarze on earlier version | ||||
| * | wording tweak for tls_init() from jsing | tb | 2018-07-09 | 1 | -4/+4 |
| | | | | | ok jsing, schwarze | ||||
| * | Simplify and shorten the description of tls_init(3), | schwarze | 2018-07-08 | 1 | -4/+4 |
| | | | | | | fixing an awkward wording noticed by tb@. OK tb@ | ||||
| * | minor markup improvement: .Fa *cctx -> .Pf * Fa cctx | schwarze | 2018-05-26 | 1 | -3/+3 |
| | | |||||
| * | Quote .Fa arguments containing blanks. | schwarze | 2018-05-26 | 1 | -4/+4 |
| | | | | | Diff from Jack Burton <jack at saosce dot com dot au>. | ||||
| * | Automatically handle library initialisation for libtls. | jsing | 2018-03-19 | 1 | -3/+4 |
| | | | | | | | | | | Now that we have tls_init() under pthread_once(), automatically initialise libtls from the entry point functions (tls_config(), tls_client() and tls_server()) - this makes an explicit tls_init() call no longer a requirement. ok bcook@ beck@ inoguchi@ | ||||
| * | un-revert tls_init pthread_once change, now that stub is added so that ↵ | beck | 2018-03-08 | 1 | -3/+3 |
| | | | | | builds work | ||||
| * | backout. diff was not tested comprehensively, resulting in a broken tree. | deraadt | 2018-03-07 | 1 | -2/+2 |
| | | |||||
| * | Make tls_init() concurrently callable using pthread_once(). | beck | 2018-03-07 | 1 | -3/+3 |
| | | | | | | | | | | | | ok jsing@ This brings pthread_once usage into libressl, which will need to get dealt with correctly in portable. This sets us up to autoinit libtls, and we will also be using pthread_once to deal with autoinit stuff in libssl and libcrypto | ||||
| * | Be more specific about when the session file will be updated. | jsing | 2018-02-10 | 1 | -2/+2 |
| | | |||||
| * | Document functions for client-side TLS session support. | jsing | 2018-02-10 | 2 | -9/+56 |
| | | |||||
| * | hyphenate DER/PEM-encoded, for consistency; | jmc | 2017-10-08 | 2 | -9/+9 |
| | | |||||
| * | Document tls_peer_cert_chain_pem(). | jsing | 2017-10-07 | 1 | -2/+13 |
| | | | | | ok beck@ | ||||
| * | Document tls_config_set_dheparams(). | jsing | 2017-08-12 | 1 | -4/+13 |
| | | |||||
| * | Document tls_reset(). | jsing | 2017-08-12 | 1 | -2/+13 |
| | | |||||
| * | new sentence, new line; | jmc | 2017-08-11 | 1 | -3/+4 |
| | | |||||
| * | Add a tls_config_set_ecdhecurves() function to libtls, which allows the | jsing | 2017-08-10 | 1 | -6/+13 |
| | | | | | | | | | | | names of the elliptic curves that may be used during client and server key exchange to be specified. This deprecates tls_config_set_ecdhecurve(), which could only be used to specify a single supported curve. ok beck@ | ||||
| * | correct function name; | jmc | 2017-08-01 | 1 | -3/+3 |
| | | | | | from carlos cardenas | ||||
| * | Document tls_config_set_crl_file() and tls_config_set_crl_mem(). | jsing | 2017-07-06 | 1 | -3/+30 |
| | | | | | Based on a diff from Jack Burton <jack at saosce dot com dot au>, thanks! | ||||
| * | Be explicit about when it is safe to call tls_config_free(). | jsing | 2017-05-06 | 1 | -3/+8 |
| | | | | | Discussed with beck@ | ||||
| * | Document tls_unload_file(). | jsing | 2017-05-06 | 1 | -3/+14 |
| | | |||||
| * | tls_free(3) and tls_config_free(3) accept NULL; | schwarze | 2017-04-27 | 2 | -4/+14 |
| | | | | | | patch from Matthew Martin <phy1729 at gmail dot com>, slightly tweaked by me | ||||
| * | fix error in Dt; from robert klein | jmc | 2017-03-02 | 1 | -3/+3 |
| | | |||||
| * | spelling fix; | jmc | 2017-02-20 | 1 | -2/+2 |
| | | |||||
| * | document tls_config_error(3) RETURN VALUES, improve what is said | schwarze | 2017-02-20 | 2 | -6/+59 |
| | | | | | | about tls_error(3), and warn about some traps; OK jmc@ | ||||
| * | tweak previous; | jmc | 2017-01-31 | 2 | -12/+8 |
| | | |||||
| * | Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may be | beck | 2017-01-31 | 2 | -39/+91 |
| | | | | | | | | | added associated to a keypair used for SNI, and are usable for more than just the "main" certificate. Modify httpd to use this. Bump libtls minor. ok jsing@ | ||||
| * | Marko Kreen contributed significantly to the ocsp stuff for libtls | beck | 2017-01-29 | 1 | -2/+3 |
| | | |||||
| * | add HISTORY and AUTHORS | schwarze | 2017-01-28 | 12 | -24/+256 |
| | | |||||
| * | Fix Copyright notices; ok beck@ jsing@ tedu@ | schwarze | 2017-01-27 | 11 | -28/+43 |
| | | |||||
| * | fix Dt; | jmc | 2017-01-26 | 1 | -3/+3 |
| | | |||||
| * | split the tls_init(3) that had grown fat to allow healthy future growth; | schwarze | 2017-01-25 | 13 | -0/+1468 |
| suggested by jsing@; "i would just chuck it in" jmc@ | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |