| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Correctly document the behaviour of tls_close() - the caller is responsible | jsing | 2015-09-10 | 1 | -5/+6 | |
| | | | | | | | for closing the file descriptors unless libtls allocated them. ok beck@ | |||||
| * | Replace TLS_{READ,WRITE}_AGAIN with TLS_WANT_POLL{IN,OUT} and correctly | jsing | 2015-09-10 | 1 | -20/+13 | |
| | | | | | | | document the calling requirements. ok beck@ | |||||
| * | Update libtls man page to reflect tls_handshake() related changes. | jsing | 2015-09-10 | 1 | -35/+37 | |
| | | | | | ok beck@ | |||||
| * | revert accidental commit | beck | 2015-09-10 | 1 | -4/+4 | |
| | | ||||||
| * | comment for errno clobbering, to indicate why we do this. | beck | 2015-09-10 | 1 | -4/+4 | |
| | | | | | ok deraadt@ jsing@ | |||||
| * | Add support for preferring the server's cipher list or the client's cipher | jsing | 2015-09-10 | 1 | -2/+19 | |
| | | | | | | | | | list. Prefer the server's cipher list by default. Based on a diff from Kyle Thompson <jmp at giga dot moe>. ok beck@ bcook@ | |||||
| * | tweak previous; ok doug | jmc | 2015-07-19 | 1 | -4/+4 | |
| | | ||||||
| * | Add documentation on how to use TLS_{READ,WRITE}_AGAIN. | doug | 2015-07-19 | 1 | -2/+29 | |
| | | | | | ok beck@ | |||||
| * | comma fix; | jmc | 2015-04-03 | 1 | -3/+3 | |
| | | ||||||
| * | Handle the case where multiple calls to SSL_shutdown() are required to | jsing | 2015-04-02 | 1 | -2/+5 | |
| | | | | | | | close the connection. Also correctly handle the error on failure. Diff from cookieandscream via github. | |||||
| * | Correct man page title. | jsing | 2015-04-02 | 1 | -2/+2 | |
| | | | | | | | Diff from Tim van der Molen. ok jmc@ | |||||
| * | Document the fact that the tls_accept_*() functions can return | jsing | 2015-04-02 | 1 | -7/+11 | |
| | | | | | | | TLS_READ_AGAIN and TLS_WRITE_AGAIN. Based on a diff from Tim van der Molen. | |||||
| * | Provide a tls_accept_fds() function, which allows a TLS connection to be | jsing | 2015-03-31 | 1 | -2/+18 | |
| | | | | | | | accepted via an existing pair of file descriptors. Based on a diff from Jan Klemkow. | |||||
| * | Rename tls_config_insecure_noverifyhost() to | jsing | 2015-02-22 | 1 | -11/+11 | |
| | | | | | | | | tls_config_insecure_noverifyname(), so that it is more accurate and keeps inline with the distinction between DNS hostname and server name. Requested by tedu@ during s2k15. | |||||
| * | explain how tls_accept_socket works. | tedu | 2015-02-21 | 1 | -2/+9 | |
| | | ||||||
| * | tls_config_set_protocols is really void. Greg Martin. | tedu | 2015-02-21 | 1 | -3/+3 | |
| | | ||||||
| * | fill out docs a bit more, notably the read/write again behaviors. | tedu | 2015-02-21 | 1 | -3/+27 | |
| | | | | | ok jsing | |||||
| * | s/tls_load_keys/tls_load_file/ | jsing | 2015-02-15 | 1 | -2/+2 | |
| | | ||||||
| * | Document tls_config_parse_protocols() and update documentation for | jsing | 2015-02-15 | 1 | -4/+25 | |
| | | | | | tls_config_set_protocols(). | |||||
| * | Provide a tls_connect_servername() function that has the same behaviour | jsing | 2015-02-11 | 1 | -1/+9 | |
| | | | | | | | | | | as tls_connect(), however allows the name to use for verification to be explicitly provided, rather than being inferred from the host value. Requested by reyk@ ok reyk@ tedu@ | |||||
| * | Be consistent with naming - only use "host" and "hostname" when referring | jsing | 2015-02-11 | 1 | -4/+4 | |
| | | | | | | | | | | | to an actual host and use "servername" when referring to the name of the TLS server that we expect to be indentified in the server certificate. Likewise, rename verify_host to verify_name and use the term "name" throughout the verification code (rather than host or hostname). Requested by and ok tedu@ | |||||
| * | Add manpage bits for tls_load_file() and tls_accept_socket(). | reyk | 2015-02-07 | 1 | -1/+25 | |
| | | | | | | | | | The tls_accept_socket() has been previously removed because the API is not fixed yet; but it is also already used by httpd(8) and spamd(8) so it is time to add it again and eventually change it later. OK tedu@ | |||||
| * | Add tls_config_set_dheparams() to allow specification of the parameters to | jsing | 2015-02-07 | 1 | -4/+7 | |
| | | | | | | | | | | use for DHE. This enables the use of DHE cipher suites. Rename tls_config_set_ecdhcurve() to tls_config_set_ecdhecurve() since it is only used to specify the curve for ephemeral ECDH. Discussed with reyk@ | |||||
| * | last entry in NAME should not have a trailing comma; | jmc | 2015-01-22 | 1 | -2/+2 | |
| | | ||||||
| * | Allow to to load the CA chain directly from memory instead of | reyk | 2015-01-22 | 1 | -2/+9 | |
| | | | | | | | | | specifying a file. This enables CA verification in privsep'ed processes that are running chroot'ed without direct access to the certificate files. With feedback, tests, and OK from bluhm@ | |||||
| * | Revert previous; tls_accept_socket() was intentionally undocumented | schwarze | 2015-01-01 | 1 | -7/+1 | |
| | | | | | | because the API design isn't fully settled. Requested by jsing@ and tedu@. | |||||
| * | minimally document tls_accept_socket(); | schwarze | 2015-01-01 | 1 | -2/+8 | |
| | | | | | patch from Sunil at Nimmagadda dot net | |||||
| * | delete extra word in Nd | deraadt | 2014-11-11 | 1 | -3/+3 | |
| | | ||||||
| * | missing outlen in tls_write decl | tedu | 2014-11-07 | 1 | -3/+3 | |
| | | ||||||
| * | Add a tls_connect_fds() function that allows a secure connection to be | jsing | 2014-11-02 | 1 | -2/+15 | |
| | | | | | | | | | | | established using a pair of existing file descriptors. Based on a diff/request from Jan Klemkow. Rides previous libtls rename/library bump. Discussed with tedu@. | |||||
| * | Rename libressl to libtls to avoid confusion and to make it easier to | jsing | 2014-10-31 | 1 | -0/+316 | |
| distinguish between LibreSSL (the project) and libressl (the library). Discussed with many. | ||||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |