summaryrefslogtreecommitdiff
path: root/src/usr.bin/openssl (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Convert option handling for openssl(1) genpkey.jsing2018-02-081-110/+177
| | | | ok beck@ inoguchi@
* Restore a check before BN_free() that needs to exist and write it such thatjsing2018-02-071-2/+3
| | | | the intent is more obvious.
* Nuke some more free NULL guards.jsing2018-02-071-9/+5
|
* Indent labels with a single space so that diff prototypes are more useful.jsing2018-02-0745-190/+190
|
* Remove guards around *_free() calls since these functions handle NULL.jsing2018-02-0718-114/+67
|
* Remove guards around *_free() calls since these functions handle NULL.jsing2018-02-071-27/+15
|
* Remove manual shutdown and close of the socket since in this casetb2018-02-061-7/+1
| | | | | | SSL_free will do this a second time. ok jsing
* Initialize variables to avoid compiler warningsinoguchi2018-01-282-4/+4
| | | | ok jsing@
* Add s_server and s_client -tlsextdebug messagesinoguchi2018-01-151-1/+9
| | | | ok sthen@ jsing@
* Remove unused extern variable in openssl(1) s_timeinoguchi2018-01-071-2/+1
| | | | | | | | | This extern variable appears not to be used. And it is overridden by local variable in doConnection(). This causes MSVC warning C4459 "declaration of 'verify_error' hides global declaration". OK millert@
* Seperate real and user timer interfacesjca2017-12-054-17/+15
| | | | | | | | | Use more descriptive names, and make it clearer that real and user timers work on different static storage. The end goal is to be able to reuse those timer functions, instead of inlining other timer implementations subject to clock jumps. Discussed with Scott Cheloha
* Mixing -url with any of -host, -port, or -path should be a usage errorguenther2017-11-291-7/+8
| | | | | | | instead of trying to work and then triggering a double-free(). problem noted by trondd (trondd (at) kagu-tsuchi.com) ok beck@
* Use clock_gettime and getrusage to compute real and user time.jca2017-11-241-16/+33
| | | | Better handling of clock jumps, from Scott Cheloa.
* openssl s_time -connect host:port needs dns promise for pledge(2) otherwise itmestre2017-11-021-2/+2
| | | | | | | | will SIGABRT Bug found by Scott Cheloha <scottcheloha at gmail.com> OK deraadt@
* Fix cast-pasto's in commentsguenther2017-10-071-3/+3
|
* Remove SSLv23 padding mode.jsing2017-08-282-7/+5
|
* Switch to -Werror with clang for libressl.doug2017-08-131-2/+2
| | | | | Discussed with beck@ and jsing@ ok beck@
* Remove NPN support - the -nextprotoneg options now become no-ops.jsing2017-08-124-113/+13
| | | | ok bcook@ beck@ doug@
* remove redundant variable declarations in Makefiles, since those arelibressl-v2.6.0espie2017-07-091-2/+1
| | | | | | the default. okay millert@
* typo: ket -> key.tb2017-05-161-3/+3
| | | | from "fenderq" on freenode via tj
* simplify startdate/enddate validationbeck2017-05-081-27/+5
| | | | ok jsing@
* Limit -Werror to gcc4 as was done in libcrypto/libssl/libtls to avoidjsg2017-05-071-3/+7
| | | | | | failed builds with different compilers. ok jsing@
* Fix the ca command so that certs it generates have RFC5280 conformant time.beck2017-05-041-16/+56
| | | | Problem noticed by Harald Dunkel <harald.dunkel@aixigo.de>
* use freezero() instead of 4-line conditional explicit_bzero + freederaadt2017-04-184-28/+10
|
* Add a -groups option to openssl s_client, which allows supported EC curvesjsing2017-01-241-7/+17
| | | | | | to be specified as a colon separated list. ok beck@
* whitespacederaadt2017-01-212-5/+5
|
* rearrange pledge promises into the canonical order; easier to eyeballderaadt2017-01-2039-77/+77
|
* fix pledge for openssl ocsp - we will need tty to ask for a cert pwbeck2017-01-201-2/+2
|
* fix openssl ocsp to not report sucess when the ocsp responder rejects usbeck2017-01-191-3/+3
| | | | ok deraadt@ krw@
* consistently spell ASN.1;jmc2017-01-031-12/+12
|
* Display details of the server ephemeral key, based on OpenSSL.jsing2016-12-303-3/+44
| | | | ok doug@
* Expand ASN1_ITEM_rptr macros here as well... used with NETSCAPE_X509 of alljsing2016-12-302-4/+4
| | | | things...
* Stop using M_PKCS12_* compatibility macros here as well.jsing2016-12-301-3/+3
|
* typonaddy2016-10-061-3/+3
|
* trim STANDARDS; ok jsinglibressl-v2.5.0jmc2016-09-221-13/+1
|
* some minor cleanup;jmc2016-09-221-47/+17
|
* shorten x509;jmc2016-09-221-755/+414
|
* shorten version;jmc2016-09-201-17/+4
|
* shorten the verify error list;jmc2016-09-201-42/+41
|
* put the spkac section in the right place;jmc2016-09-191-60/+60
|
* shorten verify;jmc2016-09-191-154/+96
|
* remove comment about CMS; ok jsingderaadt2016-09-171-3/+2
|
* add some Xr for acme-client(1);jmc2016-09-151-1/+2
|
* some spkac shortening; ok beckjmc2016-09-151-68/+13
|
* shorten ts;jmc2016-09-151-283/+63
|
* shorten speed;jmc2016-09-121-48/+14
| | | | help/ok guenther bcook
* shorten smime;jmc2016-09-081-344/+83
|
* remove a cms leftoverderaadt2016-09-051-2/+1
|
* shorten sess_id;jmc2016-09-041-84/+44
|
* Nuke one more cms tendrilbeck2016-09-041-4/+1
| | | | ok jsing@