| Commit message (Expand) | Author | Age | Files | Lines |
* | tls_free(3) and tls_config_free(3) accept NULL; | schwarze | 2017-04-27 | 2 | -4/+14 |
* | Rearrange text a bit to make it clear what "discarded" means; ok jmc@ deraadt@ | otto | 2017-04-23 | 1 | -8/+13 |
* | For small allocations (chunk) freezero only validates the given | otto | 2017-04-22 | 1 | -5/+10 |
* | Fix previous. | visa | 2017-04-20 | 1 | -2/+2 |
* | Get TCB address using the RDHWR instruction instead of __get_tcb(). | visa | 2017-04-20 | 1 | -4/+5 |
* | don't forget to fill in canary bytes for posix_memalign(3); reported by | otto | 2017-04-18 | 1 | -1/+4 |
* | consictently use .Dv NULL and a few other tweaks; ok schwarze@ | otto | 2017-04-17 | 1 | -20/+17 |
* | whitespace fixes | otto | 2017-04-17 | 1 | -14/+14 |
* | backout previous, data_len is not always initialized | otto | 2017-04-16 | 1 | -2/+5 |
* | Use freezero(3) when cleaning up session tickets - not only does it require | jsing | 2017-04-14 | 1 | -6/+3 |
* | Use freezero(3) to clean up the X25519 keys - simpler, cleaner code. | jsing | 2017-04-14 | 1 | -6/+3 |
* | Use freezero(3) in the CBB clean up path, since this could hold sensitive | jsing | 2017-04-14 | 1 | -3/+2 |
* | Switch i2d_SSL_SESSION() back to freezero(3) now that the size constraints | jsing | 2017-04-14 | 1 | -5/+2 |
* | Clean up server key exchange EC point handling. Encode the point directly | jsing | 2017-04-14 | 1 | -27/+15 |
* | allow clearing less than allocated and document freezero(3) better | otto | 2017-04-13 | 2 | -13/+26 |
* | New strstr() implementation from musl libc by Rich Felker. This | millert | 2017-04-12 | 1 | -44/+180 |
* | Revert ssl_asn1.c r1.50 - CBB and freezero(3) do not play nicely together. | jsing | 2017-04-11 | 1 | -2/+5 |
* | new X25519(3) manual page; | schwarze | 2017-04-10 | 5 | -10/+113 |
* | Use freezero() for the internal opaque structures, instead of the current | jsing | 2017-04-10 | 3 | -18/+9 |
* | Use freezero() for X25519 keys - same result with more readable code. | jsing | 2017-04-10 | 1 | -7/+3 |
* | document three additional functions; | schwarze | 2017-04-10 | 1 | -7/+60 |
* | Rework name verification code so that a match is indicated via an argument, | jsing | 2017-04-10 | 5 | -47/+76 |
* | freezero() the key block; simpler code and less of it. | jsing | 2017-04-10 | 1 | -7/+3 |
* | Use freezero() for i2d_SSL_SESSION() - one line of code instead of three. | jsing | 2017-04-10 | 1 | -5/+2 |
* | fix some .Xr errors that jmc@ found with mdoclint(1) | schwarze | 2017-04-10 | 3 | -12/+13 |
* | new manual page SSL_get_server_tmp_key(3) | schwarze | 2017-04-10 | 3 | -2/+88 |
* | Additional SSL_SESSION documentation | schwarze | 2017-04-10 | 11 | -16/+349 |
* | for pure *_ctrl() wrapper macros, move the reference from ssl(3) | schwarze | 2017-04-10 | 14 | -49/+54 |
* | new manual page SSL_CTX_set_tlsext_servername_callback(3) for SNI; | schwarze | 2017-04-10 | 2 | -1/+126 |
* | tweak previous; | jmc | 2017-04-10 | 1 | -4/+4 |
* | Convert various client key exchange functions to freezero(3). The memory | jsing | 2017-04-10 | 1 | -14/+5 |
* | Introducing freezero(3) a version of free that guarantees the process | otto | 2017-04-10 | 2 | -36/+130 |
* | pasto; from <Jon dot Spillett at oracle dot com> via OpenSSL commit 3aaa1bd0 | schwarze | 2017-04-10 | 1 | -3/+3 |
* | typo fix; from <Jon dot Spillett at oracle dot com> | schwarze | 2017-04-10 | 1 | -5/+5 |
* | Simplify/clean up BUF_MEM_grow_clean(). | jsing | 2017-04-09 | 1 | -17/+16 |
* | With recallocarray() BUF_MEM_grow() is essentially the same as | jsing | 2017-04-09 | 1 | -28/+2 |
* | Explicitly test for NULL. | jsing | 2017-04-09 | 1 | -4/+4 |
* | Use uint8_t instead of u_int8_t - for consistency and to make things easier | jsing | 2017-04-07 | 1 | -2/+2 |
* | trailing ; on end of macro definition is wrong; ok guenther | deraadt | 2017-04-06 | 1 | -4/+4 |
* | Consistentcy between nmembers and size order. From Christopher Hettrick; | otto | 2017-04-06 | 1 | -8/+8 |
* | bump version for new development branch | bcook | 2017-04-06 | 1 | -3/+3 |
* | first print size in meta-data then supplied arg size when an inconsistency is | otto | 2017-04-06 | 1 | -3/+3 |
* | Add tls_peer_cert_chain_pem - To retreive the peer certificate and chain | beck | 2017-04-05 | 7 | -6/+77 |
* | Internal changes to allow for relayd engine privsep. sends the hash of the | beck | 2017-04-05 | 5 | -29/+87 |
* | Fix silly code that printfs NULL when there are no fractional seconds | beck | 2017-04-03 | 1 | -2/+2 |
* | rephrase more enumerations of functions | otto | 2017-03-29 | 1 | -13/+10 |
* | tweak previous; | jmc | 2017-03-29 | 1 | -3/+5 |
* | Fix typo in function name; | schwarze | 2017-03-28 | 1 | -4/+5 |
* | After i wrote SSL_renegotiate(3) from scratch, OpenSSL also | schwarze | 2017-03-28 | 1 | -12/+109 |
* | small cleanup & optimization; ok deraadt@ millert@ | otto | 2017-03-28 | 1 | -2/+5 |