openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Fix handling of "legacy" mode for tls_config_set_dheparams().	jsing	2015-02-12	1	-2/+2
\| \| \| \|	Found by reyk@
*	Be consistent with naming - only use "host" and "hostname" when referring	jsing	2015-02-11	1	-3/+4
\| \| \| \| \| \| \| \| \| \|	to an actual host and use "servername" when referring to the name of the TLS server that we expect to be indentified in the server certificate. Likewise, rename verify_host to verify_name and use the term "name" throughout the verification code (rather than host or hostname). Requested by and ok tedu@
*	Add tls_config_set_dheparams() to allow specification of the parameters to	jsing	2015-02-07	1	-5/+25
\| \| \| \| \| \| \| \| \|	use for DHE. This enables the use of DHE cipher suites. Rename tls_config_set_ecdhcurve() to tls_config_set_ecdhecurve() since it is only used to specify the curve for ephemeral ECDH. Discussed with reyk@
*	Allow to to load the CA chain directly from memory instead of	reyk	2015-01-22	1	-1/+8
\| \| \| \| \| \| \| \|	specifying a file. This enables CA verification in privsep'ed processes that are running chroot'ed without direct access to the certificate files. With feedback, tests, and OK from bluhm@
*	Rename libressl to libtls to avoid confusion and to make it easier to	jsing	2014-10-31	1	-0/+201
	distinguish between LibreSSL (the project) and libressl (the library). Discussed with many.