summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
* Obvious minor fixes:schwarze2016-08-052-36/+57
* Make RES_OPTIONS point directly to resolv.conf(5) instead of going throughmartijn2016-08-051-3/+3
* Revert previous since it adds new symbols.jsing2016-08-028-170/+16
* Bump TLS_API for addition of ALPN support.jsing2016-08-011-2/+2
* Add ALPN support to libtls.jsing2016-08-017-15/+168
* bump for LibreSSL 2.5.xbcook2016-07-312-6/+6
* don't mix code and decls, ok tedu@bcook2016-07-182-4/+6
* use memset to initialize the unionbcook2016-07-172-4/+8
* remove unused OPENSSL_NO_OBJECT casebcook2016-07-172-28/+2
* Initialize buffers before use, noted by Kinichiro Inoguchi.bcook2016-07-172-14/+14
* Clean up OCSP_check_validity() a bit more.beck2016-07-162-22/+20
* Limit the support of the "backward compatible" ssl2 handshake to only bebeck2016-07-162-2/+18
* Split the existing TLS cipher suite groups into four:jsing2016-07-133-11/+22
* zero the read buffer after copying data to user so it doesn't linger.tedu2016-07-102-2/+4
* Revert previous - it introduces problems with a common privsep use case.jsing2016-07-073-72/+35
* call BN_init on temporaries to avoid use-before-set warningsbcook2016-07-076-6/+28
* J/j is a three valued option, document and fix code to actuall support thatotto2016-07-061-3/+5
* Check that the given ciphers string is syntactically valid and results injsing2016-07-061-1/+17
* Always load CA, key and certificate files at the time the configurationjsing2016-07-063-35/+72
* Correctly handle an EOF that occurs prior to the TLS handshake completing.jsing2016-07-061-3/+6
* remove unneeded duplicate call - spotted by jsing@beck2016-07-052-6/+2
* On systems where we do not have BN_ULLONG defined (most 64-bit systems),bcook2016-07-057-22/+87
* Add several fixes from OpenSSL to make OCSP work with intermediatebeck2016-07-052-20/+48
* Tighten behavior of _rs_allocate failure for portable arc4random implementati...bcook2016-06-3014-14/+28
* Tighten behavior of _rs_allocate on Windows.bcook2016-06-302-8/+14
* bump to 2.4.2bcook2016-06-302-6/+6
* adapt S option: add C, rm F (not relevant with 0 cache and disablesotto2016-06-301-3/+3
* Remove flags for disabling constant-time operations.bcook2016-06-3016-354/+174
* Back out previous; otto saw a potential race that could lead to atb2016-06-281-32/+23
* defer munmap to after unlocking malloc. this can (unfortunately) be antedu2016-06-271-23/+32
* increase the minimum for auto rounds to 6. that was the previous low boundtedu2016-06-261-2/+2
* Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP usesbeck2016-06-252-4/+4
* Fix the ocsp code to actually check for errors when comparing time valuesbeck2016-06-252-14/+62
* Disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior.bcook2016-06-216-176/+92
* Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.libressl-v2.4.1tedu2016-06-062-4/+4
* Correct a problem that prevents the DSA signing algorithm from runningbeck2016-06-062-8/+12
* LibreSSL 2.4.1bcook2016-06-062-6/+6
* Fix typo; the period should be outside the parens. From Michael McConvillemillert2016-06-021-3/+3
* deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.beck2016-05-308-24/+40
* The icdb magic number doesn't need to be visible to static linksguenther2016-05-301-2/+2
* Remove dead support for changing BDB hash algorithm and cache of alternativesguenther2016-05-291-5/+4
* Prefer AF_* over PF_* and 'address family' over 'protocol family'guenther2016-05-291-9/+9
* rcmd(3) and rcmdsh(3) use getaddrinfo(3) not gethostbyname(3).millert2016-05-282-9/+9
* Use getaddrinfo() instead of the non-standard gethostbyname2().millert2016-05-281-5/+14
* Rename some of the internal error setting functions to more closely followjsing2016-05-273-14/+48
* Avoid leaking ca_mem when freeing a tls_config.jsing2016-05-271-1/+2
* Fix function parameters that do not have an underscore prefix.jsing2016-05-271-10/+10
* typo fixes; Anthony Coultersthen2016-05-271-3/+3
* The destination string is declared as "s" but referred to as "dst"millert2016-05-261-5/+5
* use -nameopt esc_msb so "NetLock Kft" cert has the non-asciijsg2016-05-251-2/+2