summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
* Split the existing TLS cipher suite groups into four:jsing2016-07-133-11/+22
* zero the read buffer after copying data to user so it doesn't linger.tedu2016-07-102-2/+4
* Revert previous - it introduces problems with a common privsep use case.jsing2016-07-073-72/+35
* call BN_init on temporaries to avoid use-before-set warningsbcook2016-07-076-6/+28
* J/j is a three valued option, document and fix code to actuall support thatotto2016-07-061-3/+5
* Check that the given ciphers string is syntactically valid and results injsing2016-07-061-1/+17
* Always load CA, key and certificate files at the time the configurationjsing2016-07-063-35/+72
* Correctly handle an EOF that occurs prior to the TLS handshake completing.jsing2016-07-061-3/+6
* remove unneeded duplicate call - spotted by jsing@beck2016-07-052-6/+2
* On systems where we do not have BN_ULLONG defined (most 64-bit systems),bcook2016-07-057-22/+87
* Add several fixes from OpenSSL to make OCSP work with intermediatebeck2016-07-052-20/+48
* Tighten behavior of _rs_allocate failure for portable arc4random implementati...bcook2016-06-3014-14/+28
* Tighten behavior of _rs_allocate on Windows.bcook2016-06-302-8/+14
* bump to 2.4.2bcook2016-06-302-6/+6
* adapt S option: add C, rm F (not relevant with 0 cache and disablesotto2016-06-301-3/+3
* Remove flags for disabling constant-time operations.bcook2016-06-3016-354/+174
* Back out previous; otto saw a potential race that could lead to atb2016-06-281-32/+23
* defer munmap to after unlocking malloc. this can (unfortunately) be antedu2016-06-271-23/+32
* increase the minimum for auto rounds to 6. that was the previous low boundtedu2016-06-261-2/+2
* Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP usesbeck2016-06-252-4/+4
* Fix the ocsp code to actually check for errors when comparing time valuesbeck2016-06-252-14/+62
* Disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior.bcook2016-06-216-176/+92
* Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.libressl-v2.4.1tedu2016-06-062-4/+4
* Correct a problem that prevents the DSA signing algorithm from runningbeck2016-06-062-8/+12
* LibreSSL 2.4.1bcook2016-06-062-6/+6
* Fix typo; the period should be outside the parens. From Michael McConvillemillert2016-06-021-3/+3
* deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.beck2016-05-308-24/+40
* The icdb magic number doesn't need to be visible to static linksguenther2016-05-301-2/+2
* Remove dead support for changing BDB hash algorithm and cache of alternativesguenther2016-05-291-5/+4
* Prefer AF_* over PF_* and 'address family' over 'protocol family'guenther2016-05-291-9/+9
* rcmd(3) and rcmdsh(3) use getaddrinfo(3) not gethostbyname(3).millert2016-05-282-9/+9
* Use getaddrinfo() instead of the non-standard gethostbyname2().millert2016-05-281-5/+14
* Rename some of the internal error setting functions to more closely followjsing2016-05-273-14/+48
* Avoid leaking ca_mem when freeing a tls_config.jsing2016-05-271-1/+2
* Fix function parameters that do not have an underscore prefix.jsing2016-05-271-10/+10
* typo fixes; Anthony Coultersthen2016-05-271-3/+3
* The destination string is declared as "s" but referred to as "dst"millert2016-05-261-5/+5
* use -nameopt esc_msb so "NetLock Kft" cert has the non-asciijsg2016-05-251-2/+2
* Remove iruserok(_sa)? and __ivaliduser(sa)?guenther2016-05-232-90/+20
* Eliminate __check_rhosts_file and __rcmd_errstr: they were only used byguenther2016-05-231-5/+1
* Stop exposing <sys/localedef.h> and various symbols internal to the libcguenther2016-05-231-0/+106
* Fix a short-read bug in the previous version of asn1_d2i_read_biobcook2016-05-202-52/+56
* remove hppa64 port, which we never got going beyond broken single users.deraadt2016-05-112-314/+0
* Add RETURN VALUES section and .Xr to memmem(3).schwarze2016-05-111-3/+4
* Oops: the caching of TCB address in single-threaded processes on archs withguenther2016-05-101-2/+2
* Fix mangled function signatures.jsing2016-05-091-5/+5
* Use a Thread Information Block in both single and multi-threaded programs.guenther2016-05-073-135/+252
* fix for integer overflow in encode and encrypt update functions.tedu2016-05-044-12/+22
* fix a padding oracle in aesni cbc mac check. there must be enough datatedu2016-05-042-2/+8
* internal only negative types should not be handled here.tedu2016-05-046-18/+6