openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Provide a tls_accept_fds() function, which allows a TLS connection to be	jsing	2015-03-31	1	-5/+16
\| \| \| \| \| \|	accepted via an existing pair of file descriptors. Based on a diff from Jan Klemkow.
*	Store errors that occur during a tls_accept_socket() call on the context	jsing	2015-03-31	1	-2/+2
\| \| \| \| \| \| \|	for the server, rather than on the context for the connection. This makes more sense than the current behaviour does. Issue reported by Tim van der Molen.
*	Convert tls_connect_fds() and tls_accept_socket() to the new OpenSSL error	jsing	2015-02-07	1	-11/+6
\| \| \| \| \| \| \|	dance handling code. This means that we get slightly useful messages when a TLS connection or accept fails. Requested by reyk@
*	Add tls_config_set_dheparams() to allow specification of the parameters to	jsing	2015-02-07	1	-5/+10
\| \| \| \| \| \| \| \| \|	use for DHE. This enables the use of DHE cipher suites. Rename tls_config_set_ecdhcurve() to tls_config_set_ecdhecurve() since it is only used to specify the curve for ephemeral ECDH. Discussed with reyk@
*	Make the TLS connect and accept error messages consistent.	bluhm	2015-01-30	1	-3/+2
\| \| \| \|	OK jsing@
*	The SSL/TLS session Id context is limited to 32 bytes. Instead of	reyk	2015-01-16	1	-1/+13
\| \| \| \| \| \| \| \|	using the name of relayd relay or smtpd pki, use a 32 byte arc4random buffer that should be unique for the context. This fixes an issue in OpenSMTPD when a long pki name could break the configuration. OK gilles@ benno@
*	Rename libressl to libtls to avoid confusion and to make it easier to	jsing	2014-10-31	1	-0/+134
	distinguish between LibreSSL (the project) and libressl (the library). Discussed with many.