summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* Add the following root CAs, from SECOM Trust Systems / Security Communicationsthen2017-02-241-1/+126
* Remove STREEBOG 512 as a TLS MAC since there are currently no cipher suitesjsing2017-02-212-26/+6
* don;t end Nd with a full stop;jmc2017-02-211-3/+3
* Mark ERR_add_error_data and ERR_add_error_vdata as not for internal use,beck2017-02-205-14/+81
* spelling fix;jmc2017-02-201-2/+2
* document tls_config_error(3) RETURN VALUES, improve what is saidschwarze2017-02-202-6/+59
* Add EDNS0 support.jca2017-02-181-4/+3
* Avoid dereferencing a pointer when reporting an error about the samejsing2017-02-151-2/+2
* Add a NULL test to wrterror() to avoid a NULL deref when called from ajsg2017-02-151-2/+2
* bump to 2.5.2bcook2017-02-141-3/+3
* malloc does not *need* to return page-aligned objects for size >=otto2017-02-121-5/+2
* DES keys are not 7 days long. ok jsing@dtucker2017-02-092-5/+5
* Revert previous; the implementation is incorrect since it assumes that thejsing2017-02-072-20/+7
* Add file and line to the LibreSSL error strings sine we are no longer inbeck2017-02-072-7/+20
* Change SSLerror() back to taking two args, with the first one being an SSL *.beck2017-02-0725-573/+841
* Define values for SSL_CTRL_SET_GROUPS{,_LIST} and wire them up to thejsing2017-02-052-15/+19
* Kill leak introduced with refactorbeck2017-02-051-3/+6
* fix a comment and rm some dead code as a result of the previous diffotto2017-02-021-8/+5
* Let realloc handle and produce moved pointers for allocations betweenlibressl-v2.5.1otto2017-02-011-20/+37
* tweak previous;jmc2017-01-312-12/+8
* Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may bebeck2017-01-316-58/+209
* Disable client-initiated renegotiation for libtls servers.jsing2017-01-311-1/+3
* Provide an SSL_OP_NO_CLIENT_RENEGOTIATION option that disallowsjsing2017-01-312-2/+12
* LibreSSL : Truncated packet could crash via OOB readinoguchi2017-01-312-3/+10
* Document functions returning standard moduli for DH key exchange.schwarze2017-01-312-1/+136
* tweak previous;jmc2017-01-303-11/+11
* Document BN_set_flags(3) and BN_get_flags(3).schwarze2017-01-306-13/+159
* Seriously warn against calling BN_init(3), BN_MONT_CTX_init(3),schwarze2017-01-293-12/+75
* Marko Kreen contributed significantly to the ocsp stuff for libtlsbeck2017-01-291-2/+3
* Move the ocsp staple to being part of the keypair structure internally,beck2017-01-293-14/+32
* Send the function codes from the error functions to the bit bucket,beck2017-01-29275-3892/+2400
* Put comment back in the right place.jsing2017-01-291-9/+9
* Avoid clearing the mac_packet flag in the wrong place.jsing2017-01-291-2/+1
* add HISTORY and AUTHORSschwarze2017-01-2812-24/+256
* Fix Copyright notices; ok beck@ jsing@ tedu@schwarze2017-01-2711-28/+43
* More s/OSCP/OCSP/ typostom2017-01-271-1/+1
* fix Dt;jmc2017-01-261-3/+3
* Use a flag to track when we need to call SSL_shutdown(). This avoids anjsing2017-01-264-5/+11
* Bump TLS_API due to new features being added earlier this week.jsing2017-01-261-2/+2
* Bump libtls minor due to symbol additions earlier this week.jsing2017-01-261-1/+1
* knfbeck2017-01-261-6/+11
* Convert ssl3_get_client_hello() to CBS.jsing2017-01-261-76/+71
* Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglybeck2017-01-2618-653/+335
* Hide SSLerr() under #ifndef LIBRESSL_INTERNAL since we shouldn't bebeck2017-01-261-2/+4
* Send the error function codes to rot in the depths of hell where they belongbeck2017-01-2624-798/+572
* Merge the single two line function from ssl_err2.c into ssl_err.c.jsing2017-01-263-76/+12
* english is hard.beck2017-01-261-2/+2
* Limit the number of sequential empty records that we will processbeck2017-01-264-7/+30
* Refactor the code to generate a WANT_READ into a function, as we arebeck2017-01-261-18/+20
* Remove most of SSL3_ENC_METHOD - we can just inline the function callsjsing2017-01-2611-135/+63