| Commit message (Expand) | Author | Age | Files | Lines |
| * | bump to LibreSSL 2.9.3OPENBSD_6_5 | bcook | 2019-06-10 | 1 | -3/+3 |
| * | MFC libssl fix - rev 1.49 (commitid: DLpHk0vyoFEK0Baa) | sthen | 2019-06-07 | 1 | -5/+2 |
| * | In DTLS, use_srtp is part of the extended server hello while in TLSv1.3,libressl-v2.9.2 | tb | 2019-05-15 | 1 | -2/+3 |
| * | LibreSSL 2.9.2 | bcook | 2019-05-13 | 1 | -3/+3 |
| * | Avoid an overread caused by d2i_PrivateKey(). | jsing | 2019-04-10 | 1 | -1/+3 |
| * | Recommend SSL_CTX_add1_chain_cert(3) rather than | schwarze | 2019-04-09 | 1 | -12/+11 |
| * | Document SSL_CTX_clear_mode(3) and SSL_clear_mode(3). | schwarze | 2019-04-09 | 1 | -22/+48 |
| * | Revert tasn_prn.c r1.18. | jsing | 2019-04-07 | 1 | -6/+2 |
| * | By design, our state machine is a DAG contrary to the state machine in | tb | 2019-04-05 | 4 | -7/+29 |
| * | Import SSL_CTX_add1_chain_cert(3) from OpenSSL branch 1.1.1, which is still | schwarze | 2019-04-05 | 5 | -17/+264 |
| * | Zap two dead #defines that were unused since jsing deleted the | tb | 2019-04-05 | 1 | -5/+1 |
| * | Implement legacy fallback for the TLS 1.3 client. | jsing | 2019-04-04 | 3 | -8/+87 |
| * | Clean up the cipher/digest table mess. | jsing | 2019-04-04 | 3 | -179/+45 |
| * | Only assign destlen when src is non-NULL. | jsing | 2019-04-04 | 1 | -3/+4 |
| * | Switch to pthread_mutex_init(). | jsing | 2019-04-04 | 1 | -3/+5 |
| * | Bump libssl/libtls minors due to symbol addition. | jsing | 2019-04-04 | 2 | -2/+2 |
| * | Provide SSL chain/cert chain APIs. | jsing | 2019-04-04 | 3 | -2/+161 |
| * | This case also needs to be fatal. | jsing | 2019-04-04 | 1 | -1/+2 |
| * | update root CAs in cert.pem in sync with Mozilla | sthen | 2019-04-04 | 1 | -287/+440 |
| * | Avoid some out of bound accesses in aesni_cbc_hmac_sha1_cipher(). | tb | 2019-04-03 | 1 | -7/+13 |
| * | fix broken comment | sthen | 2019-04-02 | 1 | -1/+1 |
| * | Add a mutex to guard reference counting for tls_config. | jsing | 2019-04-01 | 3 | -4/+16 |
| * | Implement a print function for BIGNUM_it. | jsing | 2019-04-01 | 1 | -2/+18 |
| * | Correct the return values from long_print. | jsing | 2019-04-01 | 1 | -2/+5 |
| * | Require all ASN1_PRIMITIVE_FUNCS functions to be provided. | jsing | 2019-04-01 | 5 | -26/+42 |
| * | mark ERR_R_INTERNAL_ERROR instead of assert or _exit, sigh | deraadt | 2019-04-01 | 1 | -3/+3 |
| * | Correct subtle bug in sigalgs, only care about curve_nid if we are | beck | 2019-04-01 | 1 | -4/+4 |
| * | Clean up and simplify the client verify code: | jsing | 2019-03-31 | 1 | -50/+49 |
| * | Wrap long lines and apply some style(9). | jsing | 2019-03-31 | 1 | -7/+10 |
| * | Use named field initialisers. | jsing | 2019-03-31 | 2 | -16/+18 |
| * | Use correct capitalization of EC_GROUP_get_curve_GF{2m,p}(3). | tb | 2019-03-29 | 1 | -4/+4 |
| * | Cast nonce bytes to avoid undefined behaviour when left shifting. | jsing | 2019-03-27 | 1 | -3/+3 |
| * | remove duplicate set key file call. from alf. | tedu | 2019-03-27 | 1 | -3/+1 |
| * | bump to 2.9.1 | bcook | 2019-03-27 | 1 | -3/+3 |
| * | Use limits.h instead of sys/limits.h for portability. | jsing | 2019-03-26 | 1 | -3/+2 |
| * | Strip out all of the pkey to sigalg and sigalg to pkey linkages. | jsing | 2019-03-25 | 5 | -59/+8 |
| * | tls1_process_sigalgs() is no longer needed. | jsing | 2019-03-25 | 2 | -57/+2 |
| * | Defer sigalgs selection until the certificate is known. | jsing | 2019-03-25 | 9 | -48/+124 |
| * | Rework ssl_ctx_use_certificate_chain_bio() to use the CERT_PKEY chain. | jsing | 2019-03-25 | 1 | -46/+26 |
| * | Remove ssl_get_server_send_cert() which is now unused. | jsing | 2019-03-25 | 2 | -14/+2 |
| * | Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains. | jsing | 2019-03-25 | 4 | -40/+36 |
| * | Add a chain member to CERT_PKEY and provide functions for manipulating it. | jsing | 2019-03-25 | 2 | -3/+74 |
| * | In the incredibly unbelievable circumstance where _rs_init() fails to | deraadt | 2019-03-24 | 1 | -2/+2 |
| * | If ssl_cipher_apply_rule() is given a specific cipher suite, match on it. | jsing | 2019-03-24 | 1 | -3/+4 |
| * | Don't allow asn1_parse2 to recurse arbitrarily deep. Constrain to a max | beck | 2019-03-24 | 1 | -1/+5 |
| * | Cast nonce bytes to avoid undefined behaviour when left shifting. | jsing | 2019-03-24 | 1 | -3/+3 |
| * | do not call assert(), which has a tendency to leave traces of stuff in | deraadt | 2019-03-24 | 1 | -2/+3 |
| * | Add range checks to varios ASN1_INTEGER functions to ensure the | beck | 2019-03-23 | 3 | -6/+62 |
| * | import EVP_camellia_128_cbc(3) from OpenSSL 1.1.1, | schwarze | 2019-03-21 | 4 | -3/+156 |
| * | space before punct; | jmc | 2019-03-21 | 1 | -3/+3 |