summaryrefslogtreecommitdiff
path: root/src/lib/libtls (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* Don't use tls_cert_hash for the hashing used by the engine offloading magicclaudio2017-08-093-11/+24
* correct function name;jmc2017-08-011-3/+3
* Document tls_config_set_crl_file() and tls_config_set_crl_mem().jsing2017-07-061-3/+30
* Bump minor due to symbol addition.jsing2017-07-061-1/+1
* Add support for providing CRLs to libtls - once a CRL is provided wejsing2017-07-065-4/+67
* RFC 6066 states that IP literals are not permitted in "HostName" for ajsing2017-07-051-3/+9
* Use the tls_password_cb() callback with all PEM_read_bio_*() calls, so thatjsing2017-06-224-11/+14
* Fix incorrect indentation.jsing2017-06-221-2/+2
* Plug a memory leak in tls_keypair_cert_hash(), introduced in r1.60.jsing2017-06-221-1/+3
* Remove dead code that has remained hiding since ressl.c r1.14!jsing2017-06-221-4/+1
* Use the standard `rv' idiom in tls_keypair_load_cert(), rather thanjsing2017-06-221-5/+4
* Plug a memory leak. The main_cert needs to be X509_free()ed sinceclaudio2017-05-161-0/+2
* Ensure that a client context has been connected before attempting tojsing2017-05-072-4/+12
* Return an error if tls_handshake() is called on a TLS context that hasjsing2017-05-071-1/+6
* Use freezero() for the tls_load_file() failure case, since we'rejsing2017-05-061-4/+4
* BIO_free_all() and EVP_PKEY_free() can be called with NULL.jsing2017-05-061-5/+3
* Be explicit about when it is safe to call tls_config_free().jsing2017-05-061-3/+8
* Document tls_unload_file().jsing2017-05-061-3/+14
* Perform reference counting for tls_config. This allows tls_config_free() tojsing2017-05-064-6/+22
* Provide a tls_unload_file() function, that frees the memory returned fromjsing2017-05-063-2/+10
* Bump minors for symbol addition in libcryptobeck2017-05-061-1/+1
* Move tls_config_skip_private_key_check() out from under HIDDEN_DECLS.claudio2017-05-041-2/+4
* use freezero() instead of memset/explicit_bzero + free. Substantiallyderaadt2017-05-021-4/+2
* Only enable -Werror on libcrypto/libssl/libtls if we are building withjsing2017-04-301-2/+5
* Add a tls_keypair_clear_key() function that uses freezero() to make keyjsing2017-04-301-5/+11
* tls_free(3) and tls_config_free(3) accept NULL;schwarze2017-04-272-4/+14
* Rework name verification code so that a match is indicated via an argument,jsing2017-04-105-47/+76
* Use uint8_t instead of u_int8_t - for consistency and to make things easierjsing2017-04-071-2/+2
* Add tls_peer_cert_chain_pem - To retreive the peer certificate and chainbeck2017-04-057-6/+77
* Internal changes to allow for relayd engine privsep. sends the hash of thebeck2017-04-055-29/+87
* fix error in Dt; from robert kleinjmc2017-03-021-3/+3
* Bump minors due to symbol addition.jsing2017-02-281-1/+1
* spelling fix;jmc2017-02-201-2/+2
* document tls_config_error(3) RETURN VALUES, improve what is saidschwarze2017-02-202-6/+59
* tweak previous;jmc2017-01-312-12/+8
* Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may bebeck2017-01-316-58/+209
* Disable client-initiated renegotiation for libtls servers.jsing2017-01-311-1/+3
* Marko Kreen contributed significantly to the ocsp stuff for libtlsbeck2017-01-291-2/+3
* Move the ocsp staple to being part of the keypair structure internally,beck2017-01-293-14/+32
* add HISTORY and AUTHORSschwarze2017-01-2812-24/+256
* Fix Copyright notices; ok beck@ jsing@ tedu@schwarze2017-01-2711-28/+43
* More s/OSCP/OCSP/ typostom2017-01-271-1/+1
* fix Dt;jmc2017-01-261-3/+3
* Use a flag to track when we need to call SSL_shutdown(). This avoids anjsing2017-01-264-5/+11
* Bump TLS_API due to new features being added earlier this week.jsing2017-01-261-2/+2
* Bump libtls minor due to symbol additions earlier this week.jsing2017-01-261-1/+1
* split the tls_init(3) that had grown fat to allow healthy future growth;schwarze2017-01-2515-888/+1474
* Bump libssl and libtls minors due to symbol additions.jsing2017-01-241-1/+1
* accross -> across;jmc2017-01-241-2/+2
* Introduce ticket support. To enable them it is enough to set a positiveclaudio2017-01-246-14/+251