| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| ... | |
| * | Simplify SSL method lookups. | jsing | 2020-09-17 | 5 | -66/+44 |
| * | Add a comment saying that the public function NAME_CONSTRAINTS_check(3) | schwarze | 2020-09-17 | 1 | -2/+5 |
| * | Install the new page SSL_set1_host(3), link to it from relevant places, | schwarze | 2020-09-17 | 6 | -22/+31 |
| * | Import a manual page for SSL_set1_host(3), which we already have since 6.5, | schwarze | 2020-09-17 | 1 | -0/+155 |
| * | revert my putting this on a diet. sadly the NAME_CONSTRAINTS_check | beck | 2020-09-16 | 1 | -7/+1 |
| * | Group seal record functions together. | jsing | 2020-09-16 | 1 | -11/+11 |
| * | noop NAME_CONSTRAINTS_check stub | inoguchi | 2020-09-16 | 1 | -4/+5 |
| * | Let SSL_CTX_get_ciphers(NULL) return NULL rather than crash | schwarze | 2020-09-16 | 2 | -6/+7 |
| * | Mark SSL_get_cipher_list(3) as deprecated; it is badly misnamed, and there | schwarze | 2020-09-16 | 1 | -4/+6 |
| * | Avoid memset() before memcpy() for CBB_add_bytes(). | jsing | 2020-09-16 | 1 | -2/+2 |
| * | Make check in x509_verify_ctx_set_max_signatures() consistent with others. | jsing | 2020-09-16 | 1 | -4/+2 |
| * | Dedup code in x509_verify_ctx_new_from_xsc(). | jsing | 2020-09-16 | 1 | -14/+7 |
| * | The undocumented public function SSL_set_SSL_CTX(3) changes the | schwarze | 2020-09-15 | 1 | -4/+4 |
| * | Split the tls12_record_layer_write_mac() function. | jsing | 2020-09-15 | 1 | -10/+19 |
| * | Do not destroy an existing cipher list when ssl_parse_ciphersuites() | schwarze | 2020-09-15 | 1 | -4/+2 |
| * | Correct a failure case in tls12_record_layer_seal_record_protected() | jsing | 2020-09-15 | 1 | -2/+2 |
| * | Create the missing RETURN VALUES section and move the appropriate | schwarze | 2020-09-15 | 1 | -57/+103 |
| * | set error_depth and current_cert to make more legacy callbacks that don't check | beck | 2020-09-15 | 1 | -1/+3 |
| * | Deduplicate the time validation code between the legacy and new | beck | 2020-09-15 | 3 | -27/+8 |
| * | ifdef out code that is no longer used in here. once we are certain | beck | 2020-09-15 | 1 | -2/+5 |
| * | Cleanup/simplify SSL_set_ssl_method(). | jsing | 2020-09-15 | 1 | -18/+18 |
| * | Mop up the get_ssl_method function pointer. | jsing | 2020-09-15 | 2 | -50/+2 |
| * | Move state initialisation from SSL_clear() to ssl3_clear(). | jsing | 2020-09-14 | 2 | -4/+4 |
| * | Cleanup and simplify SSL_set_session(). | jsing | 2020-09-14 | 1 | -36/+22 |
| * | Avoid NULL deref SSL_{,CTX_}set_ciphersuites | tb | 2020-09-14 | 1 | -2/+2 |
| * | simplify RETURN VALUES for x509_verify(3) after beck@ made the rules | schwarze | 2020-09-14 | 1 | -7/+3 |
| * | Add initial man page for new x509_verify chain validator | beck | 2020-09-14 | 1 | -0/+225 |
| * | Set error if we are given an NULL ctx in x509_verify, and set error | beck | 2020-09-14 | 1 | -5/+3 |
| * | nuke a stray space | tb | 2020-09-14 | 1 | -2/+2 |
| * | Fix potential leak when tmpext fails to be added to | beck | 2020-09-14 | 1 | -2/+6 |
| * | remove unneeded variable "type". | beck | 2020-09-14 | 1 | -6/+5 |
| * | Don't leak names on success | beck | 2020-09-14 | 1 | -1/+2 |
| * | remove unneded variable "time1" | beck | 2020-09-14 | 1 | -6/+6 |
| * | remove unneded variable "time" | beck | 2020-09-14 | 1 | -3/+2 |
| * | fix bug introduced on review where refactor made it possible to | beck | 2020-09-14 | 1 | -2/+2 |
| * | re-enable new x509 chain verifier as the default | beck | 2020-09-14 | 1 | -3/+1 |
| * | Correctly fix double free introduced on review. | beck | 2020-09-14 | 2 | -3/+3 |
| * | Fix double free - review moved the pop_free of roots to x509_verify_ctx_free | beck | 2020-09-14 | 1 | -2/+1 |
| * | revert previous, need to fix a problem | beck | 2020-09-14 | 1 | -1/+3 |
| * | Enable the use of the new x509 chain validator by default. | beck | 2020-09-14 | 1 | -3/+1 |
| * | Implement SSL_{CTX_,}set_ciphersuites(). | jsing | 2020-09-13 | 5 | -13/+211 |
| * | Add new x509 certificate chain validator in x509_verify.c | beck | 2020-09-13 | 10 | -59/+1191 |
| * | Improve handling of BIO_read()/BIO_write() failures in the TLSv1.3 stack. | jsing | 2020-09-13 | 1 | -1/+9 |
| * | Use the correct type for tls1_set_ec_id() | tb | 2020-09-12 | 1 | -3/+3 |
| * | Simplify tls1_set_ec_id() a bit | tb | 2020-09-12 | 1 | -24/+19 |
| * | Unindent a bit of code that performs a few too many checks to | tb | 2020-09-12 | 1 | -10/+8 |
| * | Avoid an out-of-bounds access in BN_rand() | tb | 2020-09-12 | 1 | -3/+8 |
| * | Change over to use the new x509 name constraints verification. | beck | 2020-09-12 | 1 | -28/+7 |
| * | Include machine/endian.h in gost2814789.c | inoguchi | 2020-09-12 | 1 | -1/+3 |
| * | Add x509_constraints.c - a new implementation of x509 name constraints, with | beck | 2020-09-11 | 3 | -2/+1272 |
