| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Update for OPENSSL_cpu_caps() now being machine independent. | jsing | 2024-08-31 | 1 | -6/+2 |
| | | |||||
| * | Update regress for removal of SSL_HANDSHAKE_MAC_DEFAULT. | jsing | 2024-07-16 | 1 | -25/+2 |
| | | |||||
| * | Adjust regress to match changes in SSL_select_next_proto() args | tb | 2024-07-11 | 1 | -123/+99 |
| | | |||||
| * | Add more regress coverage for SSL_select_next_proto() | tb | 2024-06-28 | 1 | -1/+291 |
| | | |||||
| * | make test struct const | tb | 2024-06-05 | 1 | -3/+3 |
| | | |||||
| * | Use the new certificates/chains in regress. | jsing | 2024-03-20 | 1 | -2/+2 |
| | | | | | | | | | | | The new certificates are more representative of the real world. The old certificates use weak algorithms and expire in the very near future. Most of our regress has already been switched over, this changes the remainder. Thanks to Bernhard M. Wiedemann for reminding us of the upcoming expiry. ok tb@ | ||||
| * | Remove GOST and STREEBOG support from libssl. | beck | 2024-02-03 | 1 | -47/+1 |
| | | | | | | | | | | | | | | | | | | | This version of GOST is old and not anywhere close to compliant with modern GOST standards. It is also very intrusive in libssl and makes a mess everywhere. Efforts to entice a suitably minded anyone to care about it have been unsuccessful. At this point it is probably best to remove this, and if someone ever showed up who truly needed a working version, it should be a clean implementation from scratch, and have it use something closer to the typical API in libcrypto so it would integrate less painfully here. This removes it from libssl in preparation for it's removal from libcrypto with a future major bump ok tb@ | ||||
| * | Disable TLS 1.0 and TLS 1.1 in libssl | beck | 2023-07-02 | 1 | -34/+34 |
| | | | | | | | | | | | | | Their time has long since past, and they should not be used. This change restricts ssl to versions 1.2 and 1.3, and changes the regression tests to understand we no longer speak the legacy protocols. For the moment the magical "golden" byte for byte comparison tests of raw handshake values are disabled util jsing fixes them. ok jsing@ tb@ | ||||
| * | Copy the verify param hostflags independently of the host list | tb | 2023-05-24 | 1 | -3/+1 |
| | | | | | | | | | | | | | | | | | Without this, hostflags set on the SSL_CTX would not propagate to newly created SSL. This is surprising behavior that was changed in OpenSSL 1.1 by Christian Heimes after the issue was flagged by Quentin Pradet: https://bugs.python.org/issue43522 This is a version of the fix that landed in OpenSSL. There used to be a workaround in place in urllib3, but that was removed at some point. We haven't fixed this earlier since it wasn't reported. It only showed up after recent fallout of extraordinarily strict library checking in urllib3 coming from their own interpretation of the implications of PEP 644. ok jsing | ||||
| * | Add a test to verify that an SSL inherits the hostflags from the SSL_CTX | tb | 2023-05-24 | 2 | -1/+105 |
| | | | | | This is currently an expected failure that will be fixed shortly. | ||||
| * | Revise cipher list regress coverage of SSL_set_security_level(). | jsing | 2022-12-17 | 1 | -21/+43 |
| | | | | | | | | A SSL_set_security_level() call was added to the cipher list regress, which expects a failure - however, it should succeed and fails for a completely unrelated reason. Rework this regress so that it actually passes and tests for the expected behaviour. | ||||
| * | regres/libssl/unit: simplify Makefile | tb | 2022-12-02 | 1 | -20/+10 |
| | | |||||
| * | Make internal header file names consistent | tb | 2022-11-26 | 4 | -8/+8 |
| | | | | | | | | | | | | | | | | | Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook | ||||
| * | Revise for SSL_CTX_INTERNAL and SSL_INTERNAL removal. | jsing | 2022-10-02 | 3 | -12/+12 |
| | | |||||
| * | Make test table based, extend it a little | tb | 2022-07-21 | 1 | -69/+117 |
| | | |||||
| * | link ssl_set_alpn_protos to regress | tb | 2022-07-20 | 1 | -1/+2 |
| | | |||||
| * | Add a quick and dirty regress for SSL{_CTX,}_set_alpn_protos() | tb | 2022-07-20 | 1 | -0/+156 |
| | | |||||
| * | Add some minimal regress coverage for the security level. | tb | 2022-07-07 | 1 | -1/+6 |
| | | | | | From beck | ||||
| * | More %i vs %d cleanup | tb | 2022-06-10 | 1 | -4/+4 |
| | | |||||
| * | Plug leaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -1/+5 |
| | | |||||
| * | cope with recent S3I removal; ok tb@ | anton | 2022-02-06 | 1 | -2/+2 |
| | | |||||
| * | Adjust the ssl_get_shared_ciphers to the new names. | tb | 2022-02-05 | 1 | -23/+23 |
| | | |||||
| * | Plug memleaks | tb | 2021-12-29 | 1 | -3/+11 |
| | | | | | CID 345150 | ||||
| * | Improve test coverage for SSL_OP_NO_DTLSv1. | jsing | 2021-06-27 | 1 | -1/+9 |
| | | |||||
| * | Rename shutdown_all() to shutdown_peers() for consistency. | tb | 2021-05-04 | 1 | -3/+3 |
| | | |||||
| * | Modify regress ssl_get_shared_ciphers for portable | inoguchi | 2021-05-03 | 2 | -6/+6 |
| | | | | | | | | - Split out the intermediate path (../certs/) to Makefile - Change 'shutdown' to 'shutdown_all' ok tb@ | ||||
| * | Fix two copy paste errors in error messages | tb | 2021-04-04 | 1 | -3/+3 |
| | | |||||
| * | Add tests for DTLSv1_2{,_client,_server}_method() | tb | 2021-04-04 | 1 | -1/+20 |
| | | |||||
| * | Update regress for new_cipher rename. | jsing | 2021-03-24 | 1 | -2/+2 |
| | | |||||
| * | Update for DTLSv1.2 being enabled. | jsing | 2021-03-17 | 1 | -4/+4 |
| | | |||||
| * | Update for DTLSv1.2 version handling. | jsing | 2021-03-17 | 1 | -6/+90 |
| | | |||||
| * | Update regress to match TLS versions change. | jsing | 2021-02-25 | 1 | -6/+6 |
| | | |||||
| * | Revise regress to match change in SSL{_CTX,}_get_{min,max}_proto_version(). | jsing | 2021-02-20 | 1 | -34/+45 |
| | | |||||
| * | don't set AUTO_RETRY. it's a remnant of an experiment. | tb | 2021-01-21 | 1 | -3/+1 |
| | | |||||
| * | A few minor tweaks to make my OCD happy. | tb | 2021-01-12 | 1 | -12/+9 |
| | | | | | | Sort headers, unwrap a line, fix grammar in spelling and simplify the check for test failure. | ||||
| * | Print error if SSL_{connect,accept,shutdown}(3) don't run to completion. | tb | 2021-01-11 | 1 | -3/+13 |
| | | |||||
| * | Shut down the TLS connections properly. | tb | 2021-01-11 | 1 | -3/+28 |
| | | |||||
| * | Include headers used instead of relying on ssl.h pulling in the world. | tb | 2021-01-11 | 1 | -1/+7 |
| | | |||||
| * | Merge handshake_loop() into handshake(). There's no benefit in having | tb | 2021-01-10 | 1 | -18/+7 |
| | | | | | this factored into a separate function. | ||||
| * | tweak a comment | tb | 2021-01-10 | 1 | -2/+2 |
| | | |||||
| * | Link shared ciphers test to build | tb | 2021-01-10 | 1 | -1/+3 |
| | | |||||
| * | Add a regress for SSL_get_shared_ciphers() for the change of returned | tb | 2021-01-10 | 1 | -0/+457 |
| | | | | | | | ciphers in ssl_lib.c r1.240 and TLSv1.3 support in tls13_server.c r1.69. requested by jsing | ||||
| * | whitespace | tb | 2021-01-09 | 2 | -7/+7 |
| | | |||||
| * | Extend the methods test to cover dtls methods as well | tb | 2020-12-01 | 1 | -1/+57 |
| | | |||||
| * | Enable ssl_methods unit test. | tb | 2020-12-01 | 1 | -1/+2 |
| | | |||||
| * | Add an ssl_methods() unit test that currently only covers the | tb | 2020-12-01 | 1 | -0/+192 |
| | | | | | | behavior of SSL_is_server(). This would have caught the regression introduced in the method unification. | ||||
| * | Update TLS versions to match TLSv1.3 being enabled for TLS_method(). | jsing | 2020-08-09 | 1 | -8/+8 |
| | | |||||
| * | Fix regress test so that it exits non-zero for failure cases. | jsing | 2020-08-09 | 1 | -1/+11 |
| | | |||||
| * | adjust alpn extension test to new argument order | tb | 2020-07-03 | 1 | -3/+3 |
| | | |||||
| * | Use correct define. | jsing | 2019-04-04 | 1 | -2/+2 |
| | | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |