Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make the symbol for ASN1_time_tm_clamp_notafter visible so libtls | beck | 2017-08-27 | 1 | -1/+5 |
| | | | | | can get at it, so libtls can also deal with notafter's past the realm of 32 bit time in portable | ||||
* | Add tls_peer_cert_chain_pem - To retreive the peer certificate and chain | beck | 2017-04-05 | 1 | -1/+51 |
| | | | | | | | as PEM format. This allows for it to be used or examined with tools external to libtls bump minor ok jsing@ | ||||
* | Internal changes to allow for relayd engine privsep. sends the hash of the | beck | 2017-04-05 | 1 | -25/+7 |
| | | | | | | public key as an identifier to RSA, and adds an function for relayd to use to disable private key checking when doing engine privsep. ok jsing@ | ||||
* | Avoid leaking conninfo servername. | jsing | 2017-01-09 | 1 | -1/+3 |
| | | | | Issue found by and fix from Shuo Chen <chenshuo at chenshuo dot com>. | ||||
* | make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden | beck | 2016-11-04 | 1 | -3/+3 |
| | | | | | | functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@ | ||||
* | Various clean up and reorganisation of the connection info handling code. | jsing | 2016-08-22 | 1 | -58/+89 |
| | | | | | | | | | In particular, rename tls_free_conninfo() to tls_conninfo_free() and make it a real free function. Rename tls_get_conninfo() to tls_conninfo_populate() and have it allocate the struct tls_conninfo (after freeing any existing one). ok beck@ | ||||
* | Provide an API that enables server side SNI support - add the ability to | jsing | 2016-08-22 | 1 | -1/+14 |
| | | | | | | | | provide additional keypairs (via tls_config_add_keypair_{file,mem}()) and allow the server to determine what servername the client requested (via tls_conn_servername()). ok beck@ | ||||
* | Fix some style(9) issues. | jsing | 2016-08-15 | 1 | -3/+6 |
| | |||||
* | Add ALPN support to libtls. | jsing | 2016-08-12 | 1 | -1/+34 |
| | | | | ok beck@ doug@ | ||||
* | Revert previous since it adds new symbols. | jsing | 2016-08-02 | 1 | -34/+1 |
| | | | | Requested by deraadt@ | ||||
* | Add ALPN support to libtls. | jsing | 2016-08-01 | 1 | -1/+34 |
| | | | | ok beck@ doug@ | ||||
* | Add tls_peer_cert_notbefore and tls_peer_cert_notafter to expose peer ↵ | beck | 2015-10-07 | 1 | -1/+35 |
| | | | | | | | certificate validity times for tls connections. ok jsing@ | ||||
* | Allow us to get cipher and version even if there is not a peer certificate. | beck | 2015-10-07 | 1 | -10/+15 |
| | | | | ok doug@ | ||||
* | Explicit NULL checks and style(9) tweaks. | jsing | 2015-09-28 | 1 | -7/+7 |
| | |||||
* | add visibility of ciper and connection version strings | beck | 2015-09-13 | 1 | -1/+27 |
| | | | | ok jsing@ | ||||
* | Move connection info into it's own private structure allocated and filled in | beck | 2015-09-12 | 1 | -0/+149 |
at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@ |