openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Move the ocsp staple to being part of the keypair structure internally,	beck	2017-01-29	1	-6/+8
\| \| \| \| \| \| \|	so that it does not send back bogus staples when SNI is in use. (Further change is required to be able to use staples on all keypairs and not just the main one) ok jsing@
*	More s/OSCP/OCSP/ typos	tom	2017-01-27	1	-1/+1
\| \| \| \|	ok jmc@
*	Add support for server side OCSP stapling to libtls.	beck	2016-11-05	1	-2/+32
\| \| \| \|	Add support for server side OCSP stapling to netcat.
*	rename ocsp_ctx to ocsp	beck	2016-11-05	1	-57/+57
\| \| \| \|	ok jsing@
*	make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden	beck	2016-11-04	1	-2/+1
\| \| \| \| \| \|	functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@
*	Add ocsp_require_stapling config option for tls - allows a connection	beck	2016-11-04	1	-1/+6
\| \| \| \| \| \|	to indicate that it requires the peer to provide a stapled OCSP response with the handshake. Provide a "-T muststaple" for nc that uses it. ok jsing@, guenther@
*	Don't do OCSP validation when we have disabled certificate verification	beck	2016-11-03	1	-1/+4
\| \| \| \| \|	or certificate validation. ok jsing@
*	Fix handshake failures:	beck	2016-11-03	1	-20/+26
\| \| \| \| \|	split out internals of OCSP verification to allow callback to verify before TLS handshake is complete
*	fix shadow declaration of time in parameter list.	beck	2016-11-02	1	-2/+2
\| \| \| \|	ok jsing@
*	Ensure handshake is complete before processing an ocsp response for a ctx	beck	2016-11-02	1	-0/+3
\| \| \| \|	ok jsing@
*	Add OCSP client side support to libtls.	beck	2016-11-02	1	-0/+399
	- Provide access to certificate OCSP URL - Provide ability to check a raw OCSP reply against an established TLS ctx - Check and validate OCSP stapling info in the TLS handshake if a stapled OCSP response is provided.` Add example code to show OCSP URL and stapled info into netcat. ok jsing@