openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Add support for server side OCSP stapling to libtls.	beck	2016-11-05	1	-2/+32
\| \| \| \|	Add support for server side OCSP stapling to netcat.
*	rename ocsp_ctx to ocsp	beck	2016-11-05	1	-57/+57
\| \| \| \|	ok jsing@
*	make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden	beck	2016-11-04	1	-2/+1
\| \| \| \| \| \|	functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@
*	Add ocsp_require_stapling config option for tls - allows a connection	beck	2016-11-04	1	-1/+6
\| \| \| \| \| \|	to indicate that it requires the peer to provide a stapled OCSP response with the handshake. Provide a "-T muststaple" for nc that uses it. ok jsing@, guenther@
*	Don't do OCSP validation when we have disabled certificate verification	beck	2016-11-03	1	-1/+4
\| \| \| \| \|	or certificate validation. ok jsing@
*	Fix handshake failures:	beck	2016-11-03	1	-20/+26
\| \| \| \| \|	split out internals of OCSP verification to allow callback to verify before TLS handshake is complete
*	fix shadow declaration of time in parameter list.	beck	2016-11-02	1	-2/+2
\| \| \| \|	ok jsing@
*	Ensure handshake is complete before processing an ocsp response for a ctx	beck	2016-11-02	1	-0/+3
\| \| \| \|	ok jsing@
*	Add OCSP client side support to libtls.	beck	2016-11-02	1	-0/+399
	- Provide access to certificate OCSP URL - Provide ability to check a raw OCSP reply against an established TLS ctx - Check and validate OCSP stapling info in the TLS handshake if a stapled OCSP response is provided.` Add example code to show OCSP URL and stapled info into netcat. ok jsing@