| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Return an error if tls_handshake() is called on a TLS context that has | jsing | 2017-05-07 | 1 | -1/+6 |
| * | Bring in an SSL_HANDSHAKE structure and commence the great shovelling | beck | 2017-05-06 | 11 | -113/+119 |
| * | Use freezero() for the tls_load_file() failure case, since we're | jsing | 2017-05-06 | 1 | -4/+4 |
| * | BIO_free_all() and EVP_PKEY_free() can be called with NULL. | jsing | 2017-05-06 | 1 | -5/+3 |
| * | Be explicit about when it is safe to call tls_config_free(). | jsing | 2017-05-06 | 1 | -3/+8 |
| * | Document tls_unload_file(). | jsing | 2017-05-06 | 1 | -3/+14 |
| * | Perform reference counting for tls_config. This allows tls_config_free() to | jsing | 2017-05-06 | 4 | -6/+22 |
| * | Provide a tls_unload_file() function, that frees the memory returned from | jsing | 2017-05-06 | 3 | -2/+10 |
| * | Bring in HKDF, from BoringSSL, with regress tests modified to be | beck | 2017-05-06 | 3 | -1/+186 |
| * | Provide SSL{,_CTX}_set_{min,max}_proto_version() functions. | jsing | 2017-05-06 | 6 | -5/+115 |
| * | space needed between macro arg and punctuation; | jmc | 2017-05-06 | 1 | -2/+2 |
| * | Bump minors for symbol addition in libcrypto | beck | 2017-05-06 | 3 | -3/+3 |
| * | Add ASN1_TIME_set_to to exported symbols | beck | 2017-05-06 | 1 | -0/+4 |
| * | Add ASN1_TIME_set_tm to set an asn1 from a struct tm * | beck | 2017-05-06 | 3 | -5/+44 |
| * | Add missing $OpenBSD$ tags. | jsing | 2017-05-06 | 4 | -2/+4 |
| * | Move tls_config_skip_private_key_check() out from under HIDDEN_DECLS. | claudio | 2017-05-04 | 1 | -2/+4 |
| * | make the description strings match the code | deraadt | 2017-05-03 | 1 | -10/+10 |
| * | the XXXfree functions being called accept NULL, so don't check first. | deraadt | 2017-05-02 | 3 | -26/+14 |
| * | use freezero() instead of memset/explicit_bzero + free. Substantially | deraadt | 2017-05-02 | 38 | -238/+109 |
| * | No original OpenSSL code remains in this file. Relicense | beck | 2017-04-30 | 1 | -54/+13 |
| * | Make BIO_get_host_ip just yet another getaddrinfo wrapper | beck | 2017-04-30 | 1 | -27/+20 |
| * | Rework BIO_accept to be more like modern code. | beck | 2017-04-30 | 1 | -54/+19 |
| * | Only enable -Werror on libcrypto/libssl/libtls if we are building with | jsing | 2017-04-30 | 3 | -7/+14 |
| * | Switch back to freezero() and explicitly initialise data_len to zero. The | jsing | 2017-04-30 | 1 | -6/+3 |
| * | Microsoft Windows hates BIO_get_accept_socket in portable. Fix it to | beck | 2017-04-30 | 1 | -115/+35 |
| * | Add a tls_keypair_clear_key() function that uses freezero() to make key | jsing | 2017-04-30 | 1 | -5/+11 |
| * | Fix a bug caused by the return value being set early to signal successful | jsing | 2017-04-29 | 1 | -5/+5 |
| * | Revert previous - we still want to do this, but I forgot about the installer | beck | 2017-04-29 | 2 | -14/+6 |
| * | We now require you to have a working libpthread | beck | 2017-04-29 | 1 | -1/+2 |
| * | Make it safe to call SSL_library_init more than once. | beck | 2017-04-29 | 1 | -5/+12 |
| * | Stop calling OPENSSL_init() internally, since it is a no-op. Also place | jsing | 2017-04-29 | 3 | -9/+4 |
| * | Switch Linux getrandom() usage to non-blocking mode, continuing to | beck | 2017-04-29 | 1 | -6/+9 |
| * | Revert previous change that forced consistency between return value and | beck | 2017-04-28 | 1 | -10/+2 |
| * | revert previous accidental commit | beck | 2017-04-28 | 5 | -25/+46 |
| * | *** empty log message *** | beck | 2017-04-28 | 5 | -46/+25 |
| * | Remove "len < 0" check; len is socklen_t (uint32_t) so can't be | millert | 2017-04-27 | 1 | -2/+2 |
| * | tls_free(3) and tls_config_free(3) accept NULL; | schwarze | 2017-04-27 | 2 | -4/+14 |
| * | Rearrange text a bit to make it clear what "discarded" means; ok jmc@ deraadt@ | otto | 2017-04-23 | 1 | -8/+13 |
| * | For small allocations (chunk) freezero only validates the given | otto | 2017-04-22 | 1 | -5/+10 |
| * | Fix previous. | visa | 2017-04-20 | 1 | -2/+2 |
| * | Get TCB address using the RDHWR instruction instead of __get_tcb(). | visa | 2017-04-20 | 1 | -4/+5 |
| * | don't forget to fill in canary bytes for posix_memalign(3); reported by | otto | 2017-04-18 | 1 | -1/+4 |
| * | consictently use .Dv NULL and a few other tweaks; ok schwarze@ | otto | 2017-04-17 | 1 | -20/+17 |
| * | whitespace fixes | otto | 2017-04-17 | 1 | -14/+14 |
| * | backout previous, data_len is not always initialized | otto | 2017-04-16 | 1 | -2/+5 |
| * | Use freezero(3) when cleaning up session tickets - not only does it require | jsing | 2017-04-14 | 1 | -6/+3 |
| * | Use freezero(3) to clean up the X25519 keys - simpler, cleaner code. | jsing | 2017-04-14 | 1 | -6/+3 |
| * | Use freezero(3) in the CBB clean up path, since this could hold sensitive | jsing | 2017-04-14 | 1 | -3/+2 |
| * | Switch i2d_SSL_SESSION() back to freezero(3) now that the size constraints | jsing | 2017-04-14 | 1 | -5/+2 |
| * | Clean up server key exchange EC point handling. Encode the point directly | jsing | 2017-04-14 | 1 | -27/+15 |
