openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
*	Set is_trusted in x509_verify_ctx_add_chain()	tb	2021-02-26	1	-2/+2
*	Fix two bugs in the legacy verifier	tb	2021-02-25	1	-6/+10
*	Only use TLS versions internally (rather than both TLS and DTLS versions).	jsing	2021-02-25	9	-128/+132
*	Rename depth to num_untrusted so it identifies what it actually represents.	jsing	2021-02-25	1	-6/+6
*	Avoid passing last and depth to x509_verify_cert_error() on ENOMEM.	jsing	2021-02-25	1	-3/+2
*	- Make use of the fact that we know how the chunks are aligned, and	otto	2021-02-25	2	-49/+83
*	Fix comment explaining last_untrusted. This should really be called	tb	2021-02-24	1	-2/+2
*	Make the new validator check for EXFLAG_CRITICAL	tb	2021-02-24	1	-8/+15
*	Fix bizarre punctuation and capitalization in a comment.	tb	2021-02-22	1	-2/+2
*	Simplify version checks in the TLSv1.3 client	tb	2021-02-22	1	-22/+10
*	Factor out/change some of the legacy client version handling code.	jsing	2021-02-22	3	-12/+36
*	ugly whitespace	tb	2021-02-20	2	-14/+14
*	Rename f_err into fatal_err.	tb	2021-02-20	7	-183/+183
*	Rename the truncated label into decode_err. This describes its purpose	tb	2021-02-20	2	-73/+73
*	Return a min/max version of zero if set to zero.	jsing	2021-02-20	3	-17/+41
*	Add DTLSv1.2 methods.	jsing	2021-02-20	2	-3/+159
*	Handle DTLS1_2_VERSION in various places.	jsing	2021-02-20	3	-6/+9
*	Revise HelloVerifyRequest handling for DTLSv1.2.	jsing	2021-02-20	2	-4/+14
*	Group HelloVerifyRequest decoding and add missing check for trailing data.	jsing	2021-02-20	1	-4/+5
*	Add various public DTLS related defines.	jsing	2021-02-20	2	-2/+14
*	Clean up/simplify dtls1_get_cipher().	jsing	2021-02-20	1	-7/+8
*	Pull in fix for EVP_CipherUpdate() overflow from OpenSSL.	tb	2021-02-18	1	-1/+23
*	Some people still argue that rand(3) and random(3) have suitable deterministic	deraadt	2021-02-12	2	-4/+10
*	Sync cert.pem with Mozilla NSS root CAs, except "GeoTrust Global CA", ok tb@	sthen	2021-02-12	1	-659/+417
*	KNF	tb	2021-02-11	1	-4/+7
*	Remove bogus DTLS checks to disable ECC and OCSP.	jsing	2021-02-08	2	-10/+3
*	Enforce read ahead with DTLS.	jsing	2021-02-08	1	-5/+5
*	Use dtls1_retrieve_buffered_record() to load buffered application data.	jsing	2021-02-08	1	-11/+3
*	Absorb ssl3_get_algorithm2() into ssl_get_handshake_evp_md().	jsing	2021-02-07	4	-22/+19
*	Correct handshake MAC/PRF for various TLSv1.2 cipher suites.	jsing	2021-02-07	1	-8/+8
*	Factor out the legacy stack version checks.	jsing	2021-02-07	4	-28/+24
*	Fail early in legacy exporter if master secret is not available	tb	2021-02-03	1	-1/+6
*	Add OID for draft-ietf-opsawg-finding-geofeeds	job	2021-02-03	2	-0/+2
*	Add a bunch of RPKI OIDs	job	2021-02-02	2	-1/+26
*	Use "EC/RSA key setup failure" to align error with others	tb	2021-02-01	1	-3/+3
*	missing word in comment	tb	2021-01-30	1	-3/+3
*	Remove direct assignment of aead_ctx.	jsing	2021-01-28	1	-13/+7
*	Move AEAD handling into the new TLSv1.2 record layer.	jsing	2021-01-28	4	-134/+102
*	Link SSL_get_finished.3 to build.	tb	2021-01-27	1	-1/+2
*	Write SSL_get_finished() documentation from scratch.	tb	2021-01-27	1	-0/+77
*	Merge SSL_set_hostflags documentation from OpenSSL 1.1.1i and	tb	2021-01-27	1	-3/+20
*	Rewrap a comment line to fit into 80 columns.	tb	2021-01-26	1	-3/+3
*	zap a tab	tb	2021-01-26	1	-2/+2
*	Prepare to provide SSL_set_hostflags()	tb	2021-01-26	2	-2/+9
*	Move sequence numbers into the new TLSv1.2 record layer.	jsing	2021-01-26	7	-84/+38
*	Move private key setup to a helper function with proper error	eric	2021-01-26	1	-10/+47
*	when using fake keys, skip the private key check	eric	2021-01-21	1	-1/+2
*	return -1 on error for consistency	eric	2021-01-21	1	-2/+2
*	minor bump after symbol addition	eric	2021-01-21	1	-1/+1
*	Allow setting a keypair on a tls context without specifying the private	eric	2021-01-21	4	-26/+77