summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
* Add SwissSign CA root certificates. Requested by robert@, ok dcoppa@ aja@ miod@sthen2015-05-041-0/+381
* use strdup() to init stringderaadt2015-04-302-6/+4
* Add whitespace and replace OPENSSL_free with free in documentation.doug2015-04-296-22/+22
* Call CBB_add_space() rather than reimplementing it.doug2015-04-292-4/+4
* Rename cbb_buffer_add_u to cbb_add_u and remove redundant code.doug2015-04-292-30/+12
* Added len_len error checking for internal cbb_buffer_add_u().doug2015-04-292-2/+8
* Call CBS_mem_equal() rather than reimplementing it.doug2015-04-292-6/+4
* Avoid NULL deref in CBS_get_any_asn1_element().doug2015-04-292-4/+6
* Added error checking for len argument in cbs_get_u().doug2015-04-292-2/+8
* free() can handle NULL.doug2015-04-292-16/+8
* Reject dNSName of " " for subjectAltName extension.doug2015-04-291-1/+20
* Add missing BN_CTX_end() calls.doug2015-04-298-36/+36
* Not all Linux libc's include linux/sysctl.h in sys/sysctl.h.bcook2015-04-272-4/+6
* Support AIX versions without WPAR support.bcook2015-04-272-2/+10
* Don't ignore the reference count in X509_STORE_free.doug2015-04-252-2/+10
* Check for invalid leading zeros in CBS_get_asn1_uint64.doug2015-04-252-6/+16
* Do not need to buf[0] = 0 before strlcpy(buf, ...deraadt2015-04-232-4/+2
* Clean up the ssl_bytes_to_cipher_list() API - rather than having thejsing2015-04-156-42/+30
* Treat SSL_ERROR_ZERO_RETURN as a success, rather than a failure. Alsojsing2015-04-151-5/+6
* Make tls_close() more robust - do not rely on a close notify being receivedjsing2015-04-151-13/+17
* Another couple of commas in the wrong place, ok jmcnicm2015-04-141-3/+3
* Remove d2i_X509_PKEY and i2d_X509_PKEY from the SSLeay days.doug2015-04-124-88/+4
* Send OPENSSL_issetugid() straight to hell, no final cigarette.deraadt2015-04-117-34/+6
* Remove all getenv() calls, especially those wrapped by issetugid().deraadt2015-04-1113-115/+30
* Make pthread_atfork() track the DSO that called it like atexit() does,guenther2015-04-073-2/+81
* bludgeon DES support out of crypt. long live the bcrypt.tedu2015-04-062-761/+9
* improve realloc. when expanding a region, actually use the free page cachetedu2015-04-061-7/+16
* readdir() is thread-safe when DIR handles aren't shared, so delete the lock.guenther2015-04-062-6/+2
* comma fix;jmc2015-04-031-3/+3
* Handle the case where multiple calls to SSL_shutdown() are required tojsing2015-04-022-8/+14
* Correct man page title.jsing2015-04-021-2/+2
* Document the fact that the tls_accept_*() functions can returnjsing2015-04-021-7/+11
* Bump libtls minor due to API addition.jsing2015-03-311-1/+1
* Provide a tls_accept_fds() function, which allows a TLS connection to bejsing2015-03-314-9/+39
* Nuke the OPENSSL_MAX_TLS1_2_CIPHER_LENGTH hack - this has to be enabled atjsing2015-03-314-44/+4
* Store errors that occur during a tls_accept_socket() call on the contextjsing2015-03-314-11/+12
* add initial AIX getentropy/arc4random files. Thanks to Michael Felt.bcook2015-03-304-0/+1002
* Factor out the init_buf initialisation code, rather than duplicating itjsing2015-03-2716-206/+112
* BUF_MEM_free() has its own explicit NULL check.jsing2015-03-272-18/+12
* Make rcmdsh(3) not fail if it is passed a non resolvable hostname.halex2015-03-233-20/+16
* differentiate between a failed read, returning -1, and encounteringhalex2015-03-221-2/+4
* sys/sysctl.h includes linux/sysctl.h, remove the extra unchecked includebcook2015-03-222-4/+2
* unmute rcmd hostname lookup failurehalex2015-03-221-3/+2
* free the server certificate in tls_connect_fds(); fixes a memory leak withsthen2015-03-211-1/+2
* Fix indentation that incorrectly implies a different control flow.doug2015-03-216-16/+22
* Fix a memory leak in an error path.doug2015-03-202-2/+6
* zap #if 0'd code that's been dead since '96halex2015-03-191-7/+0
* Fix several crash causing defects from OpenSSL.tedu2015-03-1924-126/+324
* In the neverending saga of enabling and disabling assembler code for shamiod2015-03-182-10/+2
* Avoid a NULL pointer deref when X509_get_pubkey() returns NULL.doug2015-03-152-4/+8