summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Expand)AuthorAgeFilesLines
* Change RFC references from 8446 to 9846 and adjust section numberstb2026-08-2119-99/+97
* SSL_get_finished: remove comment about TLSv1.0 and TLSv1.1tb2026-08-211-4/+2
* Simplify handling of remaining record content on switch to legacy stack.jsing2026-08-211-35/+13
* Allocate TLS 1.3 receive buffers lazilykenjiro2026-08-211-14/+7
* update cert.pem based on newer mozilla ca root store, ok tb@sthen2026-08-201-198/+192
* s2i_ASN1_INTEGER.3: mark up second use of usr_data for consistencytb2026-08-181-3/+5
* libssl: use correct alert for key_share without supported_groupstb2026-08-181-2/+2
* SSL_CTX_new(): fix spelling of NULLtb2026-08-141-3/+3
* hdestroy(3): stop freeing key valuesdaniel2026-08-102-46/+3
* switch aarch64 CPU feature detection to elf_aux_info()naddy2026-08-081-63/+19
* Restore the OCSP no-check extension methodkenjiro2026-08-072-2/+5
* revert switch to elf_aux_info(); it breaks the install medianaddy2026-08-071-19/+63
* OBJ_create: OBJ_add_objects -> OBJ_create_objectstb2026-08-051-2/+2
* Remove documentation of OBJ_add_object(3)tb2026-08-051-39/+14
* Add missing Dv macro for NI_NUMERICSERV and NI_DGRAMclaudio2026-08-051-4/+4
* switch aarch64 CPU feature detection to elf_aux_info()naddy2026-08-041-63/+19
* Make file-local functions statickenjiro2026-07-319-27/+27
* Remove unused BUF_reverse()kenjiro2026-07-311-22/+1
* Add missing internal header includeskenjiro2026-07-3125-25/+60
* Unlock CRYPTO_LOCK_UI on ui_open_session() failuretb2026-07-251-3/+5
* Improve SHA-3 performance.jsing2026-07-221-37/+281
* Remove redundant BIO_write() length assertions in b64_write()kenjiro2026-07-171-3/+1
* Remove stale SECURE RENEGOTIATION referencekenjiro2026-07-171-5/+3
* Make dtls1_do_write_ccs() self contained.jsing2026-07-161-4/+5
* Clean up sequence number and message header handling.jsing2026-07-162-26/+13
* Check that the server selected ciphersuite is valid for use with TLSv1.2.jsing2026-07-151-1/+10
* Remove check for use of TLSv1.2 ciphersuites with TLSv1.1 and earlier.jsing2026-07-151-9/+1
* Fix X.509 constraints URI host parsing.jsing2026-07-141-29/+72
* correspondigly -> correspondinglytb2026-07-131-1/+1
* LLVM now emits calls to strlen(3) and wcslen(3). Redirect those calls tokettenis2026-06-303-5/+9
* x509_vfy: sync get_crl_sk() with BoringSSL and OpenSSLtb2026-06-261-6/+18
* Add OIDs for CCR, ErikIndex, ErikPartition, CommunityDefinitionjob2026-06-252-0/+10
* Fix misleading comment in strstr(3)tim2026-06-231-2/+2
* Avoid shift overflow in memmem(3) and strstr(3)tim2026-06-232-10/+10
* crl_cb(): fix EXFLAG_CRITICAL mishandlingtb2026-06-231-2/+2
* x509_vfy: make a NULL check explicittb2026-06-221-2/+2
* x509_vfy: remove unnecessary NULL checks before freetb2026-06-221-7/+4
* SSL_alert_desc_string: update manpage after change to return "!!" alwaystb2026-06-221-39/+36
* x509_vfy: another function pointer argument causing shadowing issuestb2026-06-221-3/+3
* bio_meth: rename function pointer arguments to avoid stdio.h shadowingtb2026-06-221-9/+9
* conf_api: remove a bunch of redundant parenthesestb2026-06-221-13/+14
* Correct secondary key share handling for HelloRetryRequests.jsing2026-06-141-2/+12
* Improve TLSv1.3 server handling of no shared groups.jsing2026-06-141-6/+17
* Send illegal parameter alerts for various HelloRetryRequest violations.jsing2026-06-141-6/+10
* Mop up SSL_CTX_set_options(3).jsing2026-06-141-89/+5
* Remove SSL_OP_LEGACY_SERVER_CONNECT from default options.jsing2026-06-142-9/+4
* x509_verify: fix incorrect purpose check in the non-legacy pathtb2026-06-101-2/+3
* Avoid freeing a caller-owned buffer in PKCS7_verify()tb2026-06-091-7/+7
* Add some missing bounds checks to ASN1_mbstring_copy()tb2026-06-091-3/+20
* Avoid out-of-bounds read in CMS password-based decryptiontb2026-06-091-1/+5