openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
...
*	Use EXFLAG_INVALID to handle out of memory and parse errors in	tobhe	2021-03-13	2	-11/+45
*	Zap a useless variable.	tb	2021-03-12	1	-4/+2
*	Missing void in function definition	tb	2021-03-12	1	-2/+2
*	Fix checks of memory caps of constraints names	tb	2021-03-12	3	-20/+32
*	spelling: refenece -> reference	jmc	2021-03-12	1	-3/+3
*	spelling	jsg	2021-03-12	12	-37/+37
*	Remove ssl_downgrade_max_version().	jsing	2021-03-11	5	-54/+15
*	Guard TLS1_get_{client_,}version() macros with #ifndef LIBRESSL_INTERNAL.	jsing	2021-03-10	1	-1/+3
*	Improve internal version handling.	jsing	2021-03-10	9	-108/+145
*	Change the implementation of the malloc cache to keep lists of	otto	2021-03-09	1	-152/+118
*	LibreSSL 3.3.2	bcook	2021-03-07	1	-3/+3
*	Separate variable declaration and assignment.	jsing	2021-03-02	1	-2/+4
*	Replace two handrolled tls12_record_protection_engaged().	jsing	2021-03-02	1	-3/+3
*	Move key/IV length checks closer to usage sites.	jsing	2021-03-02	1	-5/+11
*	Add tls12_record_protection_unused() and call from CCS functions.	jsing	2021-03-02	1	-8/+17
*	Fix misleading indentation in SSL_get_error()	tb	2021-03-02	1	-2/+2
*	Move handling of cipher/hash based cipher suites into the new record layer.	jsing	2021-02-27	5	-200/+141
*	Identify DTLS based on the version major value.	jsing	2021-02-27	1	-2/+2
*	Set is_trusted in x509_verify_ctx_add_chain()	tb	2021-02-26	1	-2/+2
*	Fix two bugs in the legacy verifier	tb	2021-02-25	1	-6/+10
*	Only use TLS versions internally (rather than both TLS and DTLS versions).	jsing	2021-02-25	9	-128/+132
*	Rename depth to num_untrusted so it identifies what it actually represents.	jsing	2021-02-25	1	-6/+6
*	Avoid passing last and depth to x509_verify_cert_error() on ENOMEM.	jsing	2021-02-25	1	-3/+2
*	- Make use of the fact that we know how the chunks are aligned, and	otto	2021-02-25	2	-49/+83
*	Fix comment explaining last_untrusted. This should really be called	tb	2021-02-24	1	-2/+2
*	Make the new validator check for EXFLAG_CRITICAL	tb	2021-02-24	1	-8/+15
*	Fix bizarre punctuation and capitalization in a comment.	tb	2021-02-22	1	-2/+2
*	Simplify version checks in the TLSv1.3 client	tb	2021-02-22	1	-22/+10
*	Factor out/change some of the legacy client version handling code.	jsing	2021-02-22	3	-12/+36
*	ugly whitespace	tb	2021-02-20	2	-14/+14
*	Rename f_err into fatal_err.	tb	2021-02-20	7	-183/+183
*	Rename the truncated label into decode_err. This describes its purpose	tb	2021-02-20	2	-73/+73
*	Return a min/max version of zero if set to zero.	jsing	2021-02-20	3	-17/+41
*	Add DTLSv1.2 methods.	jsing	2021-02-20	2	-3/+159
*	Handle DTLS1_2_VERSION in various places.	jsing	2021-02-20	3	-6/+9
*	Revise HelloVerifyRequest handling for DTLSv1.2.	jsing	2021-02-20	2	-4/+14
*	Group HelloVerifyRequest decoding and add missing check for trailing data.	jsing	2021-02-20	1	-4/+5
*	Add various public DTLS related defines.	jsing	2021-02-20	2	-2/+14
*	Clean up/simplify dtls1_get_cipher().	jsing	2021-02-20	1	-7/+8
*	Pull in fix for EVP_CipherUpdate() overflow from OpenSSL.	tb	2021-02-18	1	-1/+23
*	Some people still argue that rand(3) and random(3) have suitable deterministic	deraadt	2021-02-12	2	-4/+10
*	Sync cert.pem with Mozilla NSS root CAs, except "GeoTrust Global CA", ok tb@	sthen	2021-02-12	1	-659/+417
*	KNF	tb	2021-02-11	1	-4/+7
*	Remove bogus DTLS checks to disable ECC and OCSP.	jsing	2021-02-08	2	-10/+3
*	Enforce read ahead with DTLS.	jsing	2021-02-08	1	-5/+5
*	Use dtls1_retrieve_buffered_record() to load buffered application data.	jsing	2021-02-08	1	-11/+3
*	Absorb ssl3_get_algorithm2() into ssl_get_handshake_evp_md().	jsing	2021-02-07	4	-22/+19
*	Correct handshake MAC/PRF for various TLSv1.2 cipher suites.	jsing	2021-02-07	1	-8/+8
*	Factor out the legacy stack version checks.	jsing	2021-02-07	4	-28/+24
*	Fail early in legacy exporter if master secret is not available	tb	2021-02-03	1	-1/+6