summaryrefslogtreecommitdiff
path: root/src/lib/libtls/tls.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Add support for providing CRLs to libtls - once a CRL is provided wejsing2017-07-061-1/+41
* Use the tls_password_cb() callback with all PEM_read_bio_*() calls, so thatjsing2017-06-221-6/+6
* Fix incorrect indentation.jsing2017-06-221-2/+2
* Plug a memory leak in tls_keypair_cert_hash(), introduced in r1.60.jsing2017-06-221-1/+3
* Remove dead code that has remained hiding since ressl.c r1.14!jsing2017-06-221-4/+1
* Return an error if tls_handshake() is called on a TLS context that hasjsing2017-05-071-1/+6
* Perform reference counting for tls_config. This allows tls_config_free() tojsing2017-05-061-3/+10
* Add tls_peer_cert_chain_pem - To retreive the peer certificate and chainbeck2017-04-051-1/+4
* Internal changes to allow for relayd engine privsep. sends the hash of thebeck2017-04-051-2/+65
* Use a flag to track when we need to call SSL_shutdown(). This avoids anjsing2017-01-261-2/+3
* Disable session cache and tickets by default.claudio2017-01-221-1/+5
* whitespacederaadt2017-01-131-3/+3
* If certificate verification has been disabled, do not attempt to load ajsing2017-01-031-5/+9
* Revert previous - the original code was correct since X509_verify_cert()jsing2017-01-031-5/+5
* fix cert verify. a cert with an alt chain may verify but leave an errortedu2017-01-021-5/+5
* Hook up a certificate verify callback so that we can set user friendlyjsing2016-12-261-4/+29
* rename ocsp_ctx to ocspbeck2016-11-051-6/+6
* Only set an error from libssl related code, if an error has not alreadyjsing2016-11-031-6/+41
* Add OCSP client side support to libtls.beck2016-11-021-1/+6
* Add callback-based interface to libtls.bcook2016-09-041-1/+5
* Various clean up and reorganisation of the connection info handling code.jsing2016-08-221-8/+5
* Create contexts for server side SNI - these include the additional SSL_CTXjsing2016-08-221-1/+27
* Explicitly pass in an SSL_CTX * to the functions that operate on one,jsing2016-08-151-23/+21
* Load CA, certificate and key files into memory when the appropriatejsing2016-08-131-27/+25
* Add ALPN support to libtls.jsing2016-08-121-1/+9
* Revert previous since it adds new symbols.jsing2016-08-021-9/+1
* Add ALPN support to libtls.jsing2016-08-011-1/+9
* Revert previous - it introduces problems with a common privsep use case.jsing2016-07-071-3/+20
* Always load CA, key and certificate files at the time the configurationjsing2016-07-061-20/+3
* Correctly handle an EOF that occurs prior to the TLS handshake completing.jsing2016-07-061-3/+6
* Rename some of the internal error setting functions to more closely followjsing2016-05-271-8/+36
* Factor our the keypair handling in libtls. This results in more readablejsing2016-04-281-22/+23
* Rework the error handling in libtls so that we can associate errors withjsing2016-04-281-15/+44
* Call BIO_sock_init() from tls_init() to ensure sockets are enabled on Windows.bcook2016-01-181-1/+4
* Allow us to get cipher and version even if there is not a peer certificate.beck2015-10-071-5/+6
* clean some ugly intendation wartsderaadt2015-09-291-2/+2
* Provide tls_config_insecure_noverifytime() in order to be able to disablejsing2015-09-141-1/+6
* Expose EOF without close-notify via tls_close().jsing2015-09-141-4/+11
* Return an error if tls_handshake() or tls_close() is called on a contextjsing2015-09-141-2/+13
* work around the stupid semantics of SSL_read and SSL_write to make surebeck2015-09-131-3/+3
* Don't leak conninfo - spotted by marko kreen.beck2015-09-131-2/+3
* Move connection info into it's own private structure allocated and filled inbeck2015-09-121-4/+13
* Ensure that we clear the libssl error stack before we make a function calljsing2015-09-121-3/+6
* Store a reference to the peer certificate (if any) upon completion of thejsing2015-09-111-1/+6
* Call tls_set_errorx() instead of tls_set_error() injsing2015-09-101-5/+5
* comment for errno clobbering, to indicate why we do this.beck2015-09-101-1/+5
* change TLS_READ_AGAIN to TLS_WANT_POLLIN and TLS_WRITE_AGAIN to TLS_WANT_POLLOUTbeck2015-09-101-4/+4
* Change tls_read and tls_write semantics to return an ssize_t to betterbeck2015-09-101-17/+11
* Split tls_handshake() out from tls_accept/tls_connect. By doing this thejsing2015-09-101-5/+30
* Indent labels with a space so that diff -p is more friendly.jsing2015-09-091-4/+4
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-05 04:22:45 +0000