| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Provide tls_conn_cipher_strength(). | jsing | 2019-11-02 | 1 | -1/+10 |
| | | | | | | | | | | This returns the strength in bits of the symmetric cipher used for the connection. Diff from gilles@ ok tb@ | ||||
| * | Tidy/standardise some code. | jsing | 2018-02-10 | 1 | -6/+3 |
| | | |||||
| * | Remove NULL check from tls_conninfo_cert_pem() - all of the other conninfo | jsing | 2018-02-10 | 1 | -3/+1 |
| | | | | | functions require the conninfo passed in to be non-NULL. | ||||
| * | Add support to libtls for client-side TLS session resumption. | jsing | 2018-02-10 | 1 | -1/+20 |
| | | | | | | | | | | | | | A libtls client can specify a session file descriptor (a regular file with appropriate ownership and permissions) and libtls will manage reading and writing of session data across TLS handshakes. Discussed at length with deraadt@ and tedu@. Rides previous minor bump. ok beck@ | ||||
| * | Do not bother NULLing pointers in a struct that is about to be freed. | jsing | 2018-02-08 | 1 | -10/+1 |
| | | |||||
| * | Make the symbol for ASN1_time_tm_clamp_notafter visible so libtls | beck | 2017-08-27 | 1 | -1/+5 |
| | | | | | | can get at it, so libtls can also deal with notafter's past the realm of 32 bit time in portable | ||||
| * | Add tls_peer_cert_chain_pem - To retreive the peer certificate and chain | beck | 2017-04-05 | 1 | -1/+51 |
| | | | | | | | | as PEM format. This allows for it to be used or examined with tools external to libtls bump minor ok jsing@ | ||||
| * | Internal changes to allow for relayd engine privsep. sends the hash of the | beck | 2017-04-05 | 1 | -25/+7 |
| | | | | | | | public key as an identifier to RSA, and adds an function for relayd to use to disable private key checking when doing engine privsep. ok jsing@ | ||||
| * | Avoid leaking conninfo servername. | jsing | 2017-01-09 | 1 | -1/+3 |
| | | | | | Issue found by and fix from Shuo Chen <chenshuo at chenshuo dot com>. | ||||
| * | make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden | beck | 2016-11-04 | 1 | -3/+3 |
| | | | | | | | functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@ | ||||
| * | Various clean up and reorganisation of the connection info handling code. | jsing | 2016-08-22 | 1 | -58/+89 |
| | | | | | | | | | | In particular, rename tls_free_conninfo() to tls_conninfo_free() and make it a real free function. Rename tls_get_conninfo() to tls_conninfo_populate() and have it allocate the struct tls_conninfo (after freeing any existing one). ok beck@ | ||||
| * | Provide an API that enables server side SNI support - add the ability to | jsing | 2016-08-22 | 1 | -1/+14 |
| | | | | | | | | | provide additional keypairs (via tls_config_add_keypair_{file,mem}()) and allow the server to determine what servername the client requested (via tls_conn_servername()). ok beck@ | ||||
| * | Fix some style(9) issues. | jsing | 2016-08-15 | 1 | -3/+6 |
| | | |||||
| * | Add ALPN support to libtls. | jsing | 2016-08-12 | 1 | -1/+34 |
| | | | | | ok beck@ doug@ | ||||
| * | Revert previous since it adds new symbols. | jsing | 2016-08-02 | 1 | -34/+1 |
| | | | | | Requested by deraadt@ | ||||
| * | Add ALPN support to libtls. | jsing | 2016-08-01 | 1 | -1/+34 |
| | | | | | ok beck@ doug@ | ||||
| * | Add tls_peer_cert_notbefore and tls_peer_cert_notafter to expose peer ↵ | beck | 2015-10-07 | 1 | -1/+35 |
| | | | | | | | | certificate validity times for tls connections. ok jsing@ | ||||
| * | Allow us to get cipher and version even if there is not a peer certificate. | beck | 2015-10-07 | 1 | -10/+15 |
| | | | | | ok doug@ | ||||
| * | Explicit NULL checks and style(9) tweaks. | jsing | 2015-09-28 | 1 | -7/+7 |
| | | |||||
| * | add visibility of ciper and connection version strings | beck | 2015-09-13 | 1 | -1/+27 |
| | | | | | ok jsing@ | ||||
| * | Move connection info into it's own private structure allocated and filled in | beck | 2015-09-12 | 1 | -0/+149 |
| at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@ | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |