Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Fix backoff to legacy when in client auth mode. | beck | 2019-11-17 | 1 | -2/+2 | |
| | | | | ok jsing@ | |||||
* | Drop back to the legacy tls method if we are doing client authenticaiton | beck | 2019-11-17 | 1 | -1/+7 | |
| | | | | | | from a tls 1.3 connection, for now. ok jsing@ | |||||
* | Separate the callbacks for recieved and completed post handshake messages | beck | 2019-11-17 | 3 | -10/+22 | |
| | | | | | | from the record layer ok jsing@ | |||||
* | Allow 1.3 ciphers in libtls. | beck | 2019-11-16 | 1 | -2/+2 | |
| | | | | ok jsing@ | |||||
* | Revert previous deduplication diff, I broke portable in a strange way. | beck | 2019-11-16 | 1 | -47/+58 | |
| | | | | | I'll figure it out a bit later. Found and diagnosed by inoguchi@ | |||||
* | Allow portable to override the default CA bundle location | beck | 2019-11-16 | 2 | -3/+7 | |
| | | | | ok kinichiro@ jsing@ | |||||
* | Deduplicate some extension processing code. | beck | 2019-11-15 | 1 | -58/+47 | |
| | | | | ok tb@ inoguchi@ | |||||
* | Add missing cross-reference to NOTES section. | millert | 2019-11-14 | 1 | -3/+3 | |
| | | | | OK kn@ tb@ | |||||
* | Allow ip addresses as argument to SSL_set1_host() but be careful to not | otto | 2019-11-04 | 1 | -2/+14 | |
| | | | | poison the context. ok and help jsing@ tb@ | |||||
* | Reshuffle RSA_PSS_PARAMS and RSA_OAEP_PARAMS to avoid duplicate typedef. | jsing | 2019-11-04 | 1 | -21/+19 | |
| | | | | | | Issue spotted by bcook@ ok bcook@ inoguchi@ | |||||
* | Sort standard_methods by pkey_id. | inoguchi | 2019-11-02 | 1 | -4/+4 | |
| | | | | ok jsing@ | |||||
* | CMS didn't make the 6.6 release: adjust the text in the HISTORY sections | schwarze | 2019-11-02 | 23 | -69/+69 | |
| | ||||||
* | .Xr CMS_ContentInfo_new 3 | schwarze | 2019-11-02 | 1 | -2/+3 | |
| | ||||||
* | .Xr BIO_new_CMS 3 | schwarze | 2019-11-02 | 1 | -2/+3 | |
| | ||||||
* | document PEM_read_CMS(3), PEM_read_bio_CMS(3), PEM_write_CMS(3), and | schwarze | 2019-11-02 | 1 | -3/+46 | |
| | | | | PEM_write_bio_CMS(3) which jsing@ just enabled in Symbols.list rev. 1.91 | |||||
* | In Symbols.list rev. 1.91, jsing enabled many CMS functions. | schwarze | 2019-11-02 | 1 | -1/+24 | |
| | | | | Install the new manual pages documenting the majority of them. | |||||
* | Bring back some icky buffer allocation code so that pkey_rsa_print() | jsing | 2019-11-02 | 1 | -9/+41 | |
| | | | | | | works again with the horrific API that is ASN1_bn_print(). Issue spotted by inoguchi@ | |||||
* | Bump libcrypto, libssl and libtls minors due to symbol additions. | jsing | 2019-11-02 | 3 | -3/+3 | |
| | ||||||
* | Provide RSA_PKCS1_OpenSSL(). | jsing | 2019-11-02 | 3 | -3/+10 | |
| | | | | Prompted by inoguchi@ | |||||
* | Make RSA_padding_{add,check}_PKCS1_OAEP_mgf1() public. | jsing | 2019-11-02 | 3 | -9/+10 | |
| | ||||||
* | Make RSA_OAEP_PARAMs public. | jsing | 2019-11-02 | 3 | -17/+22 | |
| | ||||||
* | Document tls_conn_cipher_strength(). | jsing | 2019-11-02 | 1 | -2/+14 | |
| | | | | ok schwarze@ | |||||
* | Enable CMS in LibreSSL. | jsing | 2019-11-02 | 3 | -2/+135 | |
| | | | | ok bcook@ deraadt@ inoguchi@ job@ tb@ | |||||
* | Provide tls_conn_cipher_strength(). | jsing | 2019-11-02 | 4 | -3/+15 | |
| | | | | | | | | | This returns the strength in bits of the symmetric cipher used for the connection. Diff from gilles@ ok tb@ | |||||
* | In evp/pmeth_lib.c rev. 1.16, jsing@ enabled EVP_PKEY_RSA_PSS. | schwarze | 2019-11-01 | 1 | -3/+5 | |
| | | | | Document it. | |||||
* | In rsa.h rev. 1.45, jsing@ provided | schwarze | 2019-11-01 | 1 | -8/+16 | |
| | | | | | | the three macro constants RSA_PSS_SALTLEN_*; document them. The wording is a combination of our existing text and the wording in the OpenSSL 1.1.1 branch, which is still under a free license. | |||||
* | Add DSA CMS support. | jsing | 2019-11-01 | 1 | -1/+25 | |
| | | | | | | From OpenSSL 1.1.1d. ok tb@ | |||||
* | Add RSA CMS support. | jsing | 2019-11-01 | 3 | -5/+262 | |
| | | | | | | From OpenSSL 1.1.1d. ok tb@ | |||||
* | Provide NID for pSpecified. | jsing | 2019-11-01 | 2 | -0/+2 | |
| | | | | ok tb@ | |||||
* | Wire up PKEY methods for RSA-PSS. | jsing | 2019-11-01 | 1 | -2/+6 | |
| | | | | ok tb@ | |||||
* | Wire up ASN.1 methods for RSA-PSS. | jsing | 2019-11-01 | 1 | -1/+5 | |
| | | | | ok tb@ | |||||
* | In rsa.h rev. 1.45, jsing@ provided the three | schwarze | 2019-11-01 | 2 | -6/+64 | |
| | | | | | | macros EVP_PKEY_CTX_set_rsa_pss_keygen_*(3); document them. Text mostly taken from the OpenSSL 1.1.1 branch, which is still under a free license, but rearranged to fit the structure of our manual pages. | |||||
* | move the PSS macros to the end in preparation for adding more macros, | schwarze | 2019-11-01 | 1 | -50/+45 | |
| | | | | | reduce text duplication by forming subsections, and some minor corrections | |||||
* | The EVP_PKEY_CTX_ctrl(3) manual page requires additions for RSA-PSS | schwarze | 2019-11-01 | 4 | -267/+358 | |
| | | | | but it is growing to excessive size, so split out RSA_pkey_ctx_ctrl(3). | |||||
* | Update RSA ASN.1 code to handle RSA-PSS. | jsing | 2019-11-01 | 4 | -302/+389 | |
| | | | | | | From OpenSSL 1.1.1d. ok tb@ | |||||
* | Clean up RSA_new_method(). | jsing | 2019-11-01 | 1 | -40/+24 | |
| | | | | | | | | | | Use calloc() instead of malloc() for initialisation and remove explicit zero initialisation of members. This ensures that new members always get initialised. Also use a single error return path, simplifying code. ok tb@ | |||||
* | In rsa_pmeth.c rev. 1.30, jsing@ set the minimum RSA key length | schwarze | 2019-10-31 | 1 | -2/+3 | |
| | | | | for RSA key generation to 512 bits. Document that minimum. | |||||
* | Add CMS controls for RSA. | jsing | 2019-10-31 | 1 | -1/+8 | |
| | ||||||
* | Add support for RSA-PSS. | jsing | 2019-10-31 | 5 | -65/+370 | |
| | | | | | | From OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Move RSA min modulus to a define and increase from 256 to 512 bits. | jsing | 2019-10-31 | 2 | -4/+6 | |
| | | | | | | From OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Fix indent and indent before labels. | jsing | 2019-10-31 | 1 | -5/+5 | |
| | ||||||
* | Use braces where a statement has both multi-line and single-line blocks. | jsing | 2019-10-31 | 1 | -8/+13 | |
| | | | | | | Makes code more robust and reduces differences with OpenSSL. ok inoguchi@ | |||||
* | Add additional validation of key size, message digest size and public | jsing | 2019-10-31 | 1 | -3/+17 | |
| | | | | | | | | exponent. From OpenSSL 1.1.1d. ok inoguchi@ | |||||
* | Clean up some code. | jsing | 2019-10-31 | 1 | -11/+13 | |
| | | | | | | | Assign and test, explicitly test against NULL and use calloc() rather than malloc. ok inoguchi@ | |||||
* | Avoid potentially leaking pub_exp in pkey_rsa_copy(). | jsing | 2019-10-31 | 1 | -4/+4 | |
| | | | | ok inoguchi@ | |||||
* | In rsa.h rev. 1.41, jsing@ provided RSA_pkey_ctx_ctrl(3). | schwarze | 2019-10-29 | 1 | -1/+26 | |
| | | | | Write the documentation from scratch. | |||||
* | merge documentation for several macros EVP_PKEY_CTX_*_rsa_oaep_*(3) | schwarze | 2019-10-29 | 1 | -4/+239 | |
| | | | | | | and EVP_PKEY_CTX_*_ecdh_*(3); from Antoine Salon <asalon at vmware dot com> via OpenSSL commit 87103969 Oct 1 14:11:57 2018 -0700 from the OpenSSL 1.1.1 branch, which is still under a free license | |||||
* | merge documentation for EVP_PKEY_CTX_set1_id(3), EVP_PKEY_CTX_get1_id(3), | schwarze | 2019-10-29 | 1 | -2/+57 | |
| | | | | | | and EVP_PKEY_CTX_get1_id_len(3), but make it sound more like English text; from Paul Yang via OpenSSL commit f922dac8 Sep 6 10:36:11 2018 +0800 from the OpenSSL 1.1.1 branch, which is still under a free license | |||||
* | merge documentation of EVP_PKEY_CTX_set_ec_param_enc(3) | schwarze | 2019-10-29 | 1 | -6/+23 | |
| | | | | from Stephen Henson via OpenSSL commit 146ca72c Feb 19 14:35:43 2015 +0000 | |||||
* | correct HISTORY of some RSA control macros | schwarze | 2019-10-29 | 1 | -5/+26 | |
| |