summaryrefslogtreecommitdiff
path: root/src/usr.bin (unfollow)
Commit message (Expand)AuthorFilesLines
2019-04-10Avoid an overread caused by d2i_PrivateKey().jsing1-1/+3
2019-04-09Recommend SSL_CTX_add1_chain_cert(3) rather thanschwarze1-12/+11
2019-04-09Document SSL_CTX_clear_mode(3) and SSL_clear_mode(3).schwarze1-22/+48
2019-04-07exitting -> exitingtb1-1/+1
2019-04-07Revert tasn_prn.c r1.18.jsing1-6/+2
2019-04-05whitespace consistencytb1-1/+2
2019-04-05Add SERVER_HELLO_RETRY statetb1-1/+7
2019-04-05By design, our state machine is a DAG contrary to the state machine intb4-7/+29
2019-04-05Import SSL_CTX_add1_chain_cert(3) from OpenSSL branch 1.1.1, which is stillschwarze5-17/+264
2019-04-05Zap two dead #defines that were unused since jsing deleted thetb1-5/+1
2019-04-04I forgot to mark some targets as .PHONYtb1-1/+5
2019-04-04Implement legacy fallback for the TLS 1.3 client.jsing3-8/+87
2019-04-04Clean up the cipher/digest table mess.jsing3-179/+45
2019-04-04Use correct define.jsing1-2/+2
2019-04-04Only assign destlen when src is non-NULL.jsing1-3/+4
2019-04-04Switch to pthread_mutex_init().jsing1-3/+5
2019-04-04Bump libssl/libtls minors due to symbol addition.jsing2-2/+2
2019-04-04Provide SSL chain/cert chain APIs.jsing3-2/+161
2019-04-04This case also needs to be fatal.jsing1-1/+2
2019-04-04update root CAs in cert.pem in sync with Mozillasthen1-287/+440
2019-04-03Avoid some out of bound accesses in aesni_cbc_hmac_sha1_cipher().tb1-7/+13
2019-04-02fix broken commentsthen1-1/+1
2019-04-01Sort.jsing1-3/+3
2019-04-01Make the openssl(1) enc -iter flag actually work.jsing1-2/+2
2019-04-01Add a mutex to guard reference counting for tls_config.jsing3-4/+16
2019-04-01Implement a print function for BIGNUM_it.jsing1-2/+18
2019-04-01Correct the return values from long_print.jsing1-2/+5
2019-04-01Require all ASN1_PRIMITIVE_FUNCS functions to be provided.jsing5-26/+42
2019-04-01mark ERR_R_INTERNAL_ERROR instead of assert or _exit, sighderaadt1-3/+3
2019-04-01Correct subtle bug in sigalgs, only care about curve_nid if we arebeck1-4/+4
2019-03-31Clean up and simplify the client verify code:jsing1-50/+49
2019-03-31Wrap long lines and apply some style(9).jsing1-7/+10
2019-03-31Use named field initialisers.jsing2-16/+18
2019-03-29Use correct capitalization of EC_GROUP_get_curve_GF{2m,p}(3).tb1-4/+4
2019-03-28Enable GOST cipher selection test after libssl has been fixed.bluhm1-6/+1
2019-03-27Cast nonce bytes to avoid undefined behaviour when left shifting.jsing1-3/+3
2019-03-27remove duplicate set key file call. from alf.tedu1-3/+1
2019-03-27bump to 2.9.1bcook1-3/+3
2019-03-26Use limits.h instead of sys/limits.h for portability.jsing1-3/+2
2019-03-25Update regress following sigalgs changes.jsing1-17/+1
2019-03-25Strip out all of the pkey to sigalg and sigalg to pkey linkages.jsing5-59/+8
2019-03-25tls1_process_sigalgs() is no longer needed.jsing2-57/+2
2019-03-25Defer sigalgs selection until the certificate is known.jsing9-48/+124
2019-03-25Rework ssl_ctx_use_certificate_chain_bio() to use the CERT_PKEY chain.jsing1-46/+26
2019-03-25Remove ssl_get_server_send_cert() which is now unused.jsing2-14/+2
2019-03-25Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains.jsing4-40/+36
2019-03-25Add a chain member to CERT_PKEY and provide functions for manipulating it.jsing2-3/+74
2019-03-24In the incredibly unbelievable circumstance where _rs_init() fails toderaadt1-2/+2
2019-03-24If ssl_cipher_apply_rule() is given a specific cipher suite, match on it.jsing1-3/+4
2019-03-24Don't allow asn1_parse2 to recurse arbitrarily deep. Constrain to a maxbeck1-1/+5