| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix a memory leak in x509_constraints_extract_names | tb | 2020-09-20 | 1 | -6/+6 |
* | remove superfluous NULL check | beck | 2020-09-19 | 1 | -2/+2 |
* | Prepare to provide SSL_get0_peername | tb | 2020-09-19 | 2 | -2/+9 |
* | Prepare to provide stubbed out versions for reading/writing 0-RTT data | tb | 2020-09-19 | 2 | -2/+41 |
* | Prepare to provide SSL{,_CTX}_{get,set}_max_early_data | tb | 2020-09-19 | 2 | -2/+34 |
* | Prepare to provide SSL_SESSION_{set,get}_max_early_data() | tb | 2020-09-19 | 2 | -2/+18 |
* | If ssl_cert_dup() fails in SSL_set_SSL_CTX(3), return failure | schwarze | 2020-09-18 | 1 | -5/+10 |
* | add forgotten link to newish page SSL_set1_host(3) | schwarze | 2020-09-18 | 1 | -3/+4 |
* | Fix potential overflow in CN subject line parsing, thanks to | beck | 2020-09-18 | 1 | -4/+5 |
* | Prepare to provide SSL_get_peer_tmp_key(). | jsing | 2020-09-17 | 2 | -9/+20 |
* | Simplify SSL method lookups. | jsing | 2020-09-17 | 5 | -66/+44 |
* | Add a comment saying that the public function NAME_CONSTRAINTS_check(3) | schwarze | 2020-09-17 | 1 | -2/+5 |
* | Install the new page SSL_set1_host(3), link to it from relevant places, | schwarze | 2020-09-17 | 6 | -22/+31 |
* | Import a manual page for SSL_set1_host(3), which we already have since 6.5, | schwarze | 2020-09-17 | 1 | -0/+155 |
* | revert my putting this on a diet. sadly the NAME_CONSTRAINTS_check | beck | 2020-09-16 | 1 | -7/+1 |
* | Group seal record functions together. | jsing | 2020-09-16 | 1 | -11/+11 |
* | noop NAME_CONSTRAINTS_check stub | inoguchi | 2020-09-16 | 1 | -4/+5 |
* | Let SSL_CTX_get_ciphers(NULL) return NULL rather than crash | schwarze | 2020-09-16 | 2 | -6/+7 |
* | Mark SSL_get_cipher_list(3) as deprecated; it is badly misnamed, and there | schwarze | 2020-09-16 | 1 | -4/+6 |
* | Avoid memset() before memcpy() for CBB_add_bytes(). | jsing | 2020-09-16 | 1 | -2/+2 |
* | Make check in x509_verify_ctx_set_max_signatures() consistent with others. | jsing | 2020-09-16 | 1 | -4/+2 |
* | Dedup code in x509_verify_ctx_new_from_xsc(). | jsing | 2020-09-16 | 1 | -14/+7 |
* | The undocumented public function SSL_set_SSL_CTX(3) changes the | schwarze | 2020-09-15 | 1 | -4/+4 |
* | Split the tls12_record_layer_write_mac() function. | jsing | 2020-09-15 | 1 | -10/+19 |
* | Do not destroy an existing cipher list when ssl_parse_ciphersuites() | schwarze | 2020-09-15 | 1 | -4/+2 |
* | Correct a failure case in tls12_record_layer_seal_record_protected() | jsing | 2020-09-15 | 1 | -2/+2 |
* | Create the missing RETURN VALUES section and move the appropriate | schwarze | 2020-09-15 | 1 | -57/+103 |
* | set error_depth and current_cert to make more legacy callbacks that don't check | beck | 2020-09-15 | 1 | -1/+3 |
* | Deduplicate the time validation code between the legacy and new | beck | 2020-09-15 | 3 | -27/+8 |
* | ifdef out code that is no longer used in here. once we are certain | beck | 2020-09-15 | 1 | -2/+5 |
* | Cleanup/simplify SSL_set_ssl_method(). | jsing | 2020-09-15 | 1 | -18/+18 |
* | Mop up the get_ssl_method function pointer. | jsing | 2020-09-15 | 2 | -50/+2 |
* | Move state initialisation from SSL_clear() to ssl3_clear(). | jsing | 2020-09-14 | 2 | -4/+4 |
* | Cleanup and simplify SSL_set_session(). | jsing | 2020-09-14 | 1 | -36/+22 |
* | Avoid NULL deref SSL_{,CTX_}set_ciphersuites | tb | 2020-09-14 | 1 | -2/+2 |
* | simplify RETURN VALUES for x509_verify(3) after beck@ made the rules | schwarze | 2020-09-14 | 1 | -7/+3 |
* | Add initial man page for new x509_verify chain validator | beck | 2020-09-14 | 1 | -0/+225 |
* | Set error if we are given an NULL ctx in x509_verify, and set error | beck | 2020-09-14 | 1 | -5/+3 |
* | nuke a stray space | tb | 2020-09-14 | 1 | -2/+2 |
* | Fix potential leak when tmpext fails to be added to | beck | 2020-09-14 | 1 | -2/+6 |
* | remove unneeded variable "type". | beck | 2020-09-14 | 1 | -6/+5 |
* | Don't leak names on success | beck | 2020-09-14 | 1 | -1/+2 |
* | remove unneded variable "time1" | beck | 2020-09-14 | 1 | -6/+6 |
* | remove unneded variable "time" | beck | 2020-09-14 | 1 | -3/+2 |
* | fix bug introduced on review where refactor made it possible to | beck | 2020-09-14 | 1 | -2/+2 |
* | re-enable new x509 chain verifier as the default | beck | 2020-09-14 | 1 | -3/+1 |
* | Correctly fix double free introduced on review. | beck | 2020-09-14 | 2 | -3/+3 |
* | Fix double free - review moved the pop_free of roots to x509_verify_ctx_free | beck | 2020-09-14 | 1 | -2/+1 |
* | revert previous, need to fix a problem | beck | 2020-09-14 | 1 | -1/+3 |
* | Enable the use of the new x509 chain validator by default. | beck | 2020-09-14 | 1 | -3/+1 |