openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
*	Implement SSL_{CTX_,}set_ciphersuites().	jsing	2020-09-13	5	-13/+211
*	Add new x509 certificate chain validator in x509_verify.c	beck	2020-09-13	10	-59/+1191
*	Improve handling of BIO_read()/BIO_write() failures in the TLSv1.3 stack.	jsing	2020-09-13	1	-1/+9
*	Use the correct type for tls1_set_ec_id()	tb	2020-09-12	1	-3/+3
*	Simplify tls1_set_ec_id() a bit	tb	2020-09-12	1	-24/+19
*	Unindent a bit of code that performs a few too many checks to	tb	2020-09-12	1	-10/+8
*	Avoid an out-of-bounds access in BN_rand()	tb	2020-09-12	1	-3/+8
*	Change over to use the new x509 name constraints verification.	beck	2020-09-12	1	-28/+7
*	Include machine/endian.h in gost2814789.c	inoguchi	2020-09-12	1	-1/+3
*	Add x509_constraints.c - a new implementation of x509 name constraints, with	beck	2020-09-11	3	-2/+1272
*	Remove cipher_list_by_id.	jsing	2020-09-11	7	-89/+32
*	Simplify SSL_get_ciphers().	jsing	2020-09-11	1	-13/+7
*	Rename ssl_cipher_is_permitted()	jsing	2020-09-11	3	-10/+10
*	Some SSL_AD_* defines snuck into the TLSv1.3 code - replace them with	jsing	2020-09-11	2	-10/+10
*	Add issuer cache, to be used by upcoming changes to validation code.	beck	2020-09-11	3	-1/+216
*	Various ciphers related clean up.	jsing	2020-09-11	1	-41/+36
*	Set alpn_selected_len = 0 when alpn_selected is NULL	inoguchi	2020-09-09	1	-1/+4
*	Import latest OPENSSL_NO_* flags from OpenSSL 1.1.1g	inoguchi	2020-09-09	1	-0/+8
*	Mention that EC_KEY_get0_public_key returns a public key.	tb	2020-09-08	1	-3/+5
*	Garbage collect renew_ticket in tls_decrypt_ticket	tb	2020-09-07	1	-8/+5
*	For page-sized and larger allocations do not put the pages we're	otto	2020-09-06	1	-21/+18
*	Clean up asn1/x_info.c	tb	2020-09-03	1	-22/+9
*	Remove unnecessary zeroing after recallocarray(3)	tb	2020-09-03	1	-3/+1
*	KNF and comment tweaks	tb	2020-09-02	1	-8/+10
*	Zero out data to avoid leaving stack garbage in the tail of	tb	2020-09-01	1	-1/+3
*	The bumping of sess_cb_hit stats can wait until handling of	tb	2020-09-01	1	-4/+3
*	In the explanatory comment of ssl_get_prev_session fix the spelling of	tb	2020-09-01	1	-5/+6
*	Split session retrieval out of ssl_get_prev_session()	tb	2020-09-01	1	-78/+92
*	copy session id directly in ssl_get_prev_session	tb	2020-09-01	3	-27/+23
*	indent the only other label in this file	tb	2020-09-01	1	-2/+2
*	Indent label and remove dangling else	tb	2020-09-01	1	-4/+4
*	Zap NULL check before SSL_SESSION_free()	tb	2020-09-01	1	-3/+2
*	Rename the session pointer ret to sess	tb	2020-09-01	1	-25/+25
*	Hoist ERR_clear_error() call into the derr: label	tb	2020-09-01	1	-4/+2
*	simplify tls1_process_ticket() exit path	tb	2020-09-01	2	-19/+7
*	Return code tweaks for session ticket handlers	tb	2020-08-31	3	-47/+51
*	Send alert on ssl_get_prev_session failure	tb	2020-08-31	4	-20/+32
*	Start replacing the existing TLSv1.2 record layer.	jsing	2020-08-30	7	-195/+614
*	define OPENSSL_NO_SSL_TRACE in opensslfeatures.h	inoguchi	2020-08-29	1	-1/+1
*	Send an unexpected message alert if no valid content type is found.	jsing	2020-08-11	1	-2/+5
*	Increment the epoch in the same place for both read and write.	jsing	2020-08-11	1	-3/+3
*	Use 0 instead of 0x00 for memset() calls.	jsing	2020-08-11	2	-8/+8
*	Use SSL3_SEQUENCE_SIZE for last_write_sequence[] rather than hardcoding.	jsing	2020-08-11	1	-2/+2
*	In SSL_new() just 'goto err' on allocation failure.	jsing	2020-08-11	1	-11/+6
*	Avoid passing -1 to freezero.	tb	2020-08-10	1	-9/+10
*	Fix some wrapping/indent.	jsing	2020-08-09	1	-4/+3
*	Add P-521 to the list of curves supported by default in the client.	jsing	2020-08-09	1	-5/+18
*	Use CBB more correctly when writing SSL3/DTLS records.	jsing	2020-08-09	2	-66/+92
*	Make the explicit IV length handling in DTLS the same as SSL3/TLS.	jsing	2020-08-09	1	-8/+13
*	delete another word to improve the wording; suggested by jmc@	schwarze	2020-08-06	1	-2/+2