Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Support IPv6 proxy addresses | jca | 2017-02-05 | 1 | -10/+24 | |
| | | | | ok beck@ | |||||
* | oscp -> ocsp; | jmc | 2017-01-26 | 1 | -3/+3 | |
| | | | | from holger mikolon, plus one more in nc; | |||||
* | Add a -groups option to openssl s_client, which allows supported EC curves | jsing | 2017-01-24 | 1 | -7/+17 | |
| | | | | | | to be specified as a colon separated list. ok beck@ | |||||
* | whitespace | deraadt | 2017-01-21 | 2 | -5/+5 | |
| | ||||||
* | rearrange pledge promises into the canonical order; easier to eyeball | deraadt | 2017-01-20 | 39 | -77/+77 | |
| | ||||||
* | fix pledge for openssl ocsp - we will need tty to ask for a cert pw | beck | 2017-01-20 | 1 | -2/+2 | |
| | ||||||
* | fix openssl ocsp to not report sucess when the ocsp responder rejects us | beck | 2017-01-19 | 1 | -3/+3 | |
| | | | | ok deraadt@ krw@ | |||||
* | consistently spell ASN.1; | jmc | 2017-01-03 | 1 | -12/+12 | |
| | ||||||
* | Display details of the server ephemeral key, based on OpenSSL. | jsing | 2016-12-30 | 3 | -3/+44 | |
| | | | | ok doug@ | |||||
* | Expand ASN1_ITEM_rptr macros here as well... used with NETSCAPE_X509 of all | jsing | 2016-12-30 | 2 | -4/+4 | |
| | | | | things... | |||||
* | Stop using M_PKCS12_* compatibility macros here as well. | jsing | 2016-12-30 | 1 | -3/+3 | |
| | ||||||
* | Check return value of tls_config_set_protocols(3) and tls_config_set_ciphers(3) | mestre | 2016-11-30 | 1 | -3/+6 | |
| | | | | | | and bail out in case of failure Feedback and OK jsing@ | |||||
* | tweak previous; | jmc | 2016-11-06 | 1 | -3/+3 | |
| | ||||||
* | rename tlslegacy to tlsall, and better describe what it does. | beck | 2016-11-06 | 2 | -8/+8 | |
| | | | | ok jsing@ | |||||
* | zap trailing whitespace, and add -o to usage() and help (-h); | jmc | 2016-11-05 | 2 | -6/+9 | |
| | ||||||
* | Add support for server side OCSP stapling to libtls. | beck | 2016-11-05 | 2 | -4/+19 | |
| | | | | Add support for server side OCSP stapling to netcat. | |||||
* | new sentence, new line, and zap trailing whitespace; | jmc | 2016-11-04 | 1 | -3/+4 | |
| | ||||||
* | Add ocsp_require_stapling config option for tls - allows a connection | beck | 2016-11-04 | 2 | -6/+12 | |
| | | | | | | to indicate that it requires the peer to provide a stapled OCSP response with the handshake. Provide a "-T muststaple" for nc that uses it. ok jsing@, guenther@ | |||||
* | make OCSP_URL only show up when an OCSP url is actually present in the cert | beck | 2016-11-03 | 1 | -2/+3 | |
| | ||||||
* | Make OCSP Stapling: only appear if there is stapling info present. | beck | 2016-11-03 | 1 | -5/+3 | |
| | ||||||
* | Add OCSP client side support to libtls. | beck | 2016-11-02 | 1 | -1/+37 | |
| | | | | | | | | | | | | | - Provide access to certificate OCSP URL - Provide ability to check a raw OCSP reply against an established TLS ctx - Check and validate OCSP stapling info in the TLS handshake if a stapled OCSP response is provided.` Add example code to show OCSP URL and stapled info into netcat. ok jsing@ | |||||
* | typo | naddy | 2016-10-06 | 1 | -3/+3 | |
| | ||||||
* | trim STANDARDS; ok jsinglibressl-v2.5.0 | jmc | 2016-09-22 | 1 | -13/+1 | |
| | ||||||
* | some minor cleanup; | jmc | 2016-09-22 | 1 | -47/+17 | |
| | ||||||
* | shorten x509; | jmc | 2016-09-22 | 1 | -755/+414 | |
| | ||||||
* | shorten version; | jmc | 2016-09-20 | 1 | -17/+4 | |
| | ||||||
* | shorten the verify error list; | jmc | 2016-09-20 | 1 | -42/+41 | |
| | ||||||
* | put the spkac section in the right place; | jmc | 2016-09-19 | 1 | -60/+60 | |
| | ||||||
* | shorten verify; | jmc | 2016-09-19 | 1 | -154/+96 | |
| | ||||||
* | remove comment about CMS; ok jsing | deraadt | 2016-09-17 | 1 | -3/+2 | |
| | ||||||
* | add some Xr for acme-client(1); | jmc | 2016-09-15 | 1 | -1/+2 | |
| | ||||||
* | some spkac shortening; ok beck | jmc | 2016-09-15 | 1 | -68/+13 | |
| | ||||||
* | shorten ts; | jmc | 2016-09-15 | 1 | -283/+63 | |
| | ||||||
* | shorten speed; | jmc | 2016-09-12 | 1 | -48/+14 | |
| | | | | help/ok guenther bcook | |||||
* | shorten smime; | jmc | 2016-09-08 | 1 | -344/+83 | |
| | ||||||
* | remove a cms leftover | deraadt | 2016-09-05 | 1 | -2/+1 | |
| | ||||||
* | shorten sess_id; | jmc | 2016-09-04 | 1 | -84/+44 | |
| | ||||||
* | Nuke one more cms tendril | beck | 2016-09-04 | 1 | -4/+1 | |
| | | | | ok jsing@ | |||||
* | bye bye cms. send it to the attic | beck | 2016-09-04 | 2 | -1144/+2 | |
| | | | | ok jsing@ | |||||
* | Options that take a time argument....take an argument | guenther | 2016-09-04 | 1 | -2/+3 | |
| | | | | diff from Kinichiro Inoguchi (kinichiro.inoguchi (at) gmail.com) | |||||
* | squash some possibly-used-uninitialized warnings | bcook | 2016-09-03 | 1 | -3/+3 | |
| | ||||||
* | shorten s_time; help/ok bcook | jmc | 2016-09-03 | 1 | -91/+22 | |
| | ||||||
* | shorten s_server; | jmc | 2016-09-02 | 1 | -134/+72 | |
| | ||||||
* | shorten s_client; | jmc | 2016-09-01 | 1 | -142/+50 | |
| | ||||||
* | We don't need any VMS access tricks. | deraadt | 2016-08-31 | 1 | -27/+4 | |
| | | | | ok beck tedu | |||||
* | Add OPTION_ARG_TIME for parsing a (64 bit if needed) time_t | deraadt | 2016-08-30 | 3 | -4/+15 | |
| | | | | prodding & ok jsing | |||||
* | buf[][] with strange use all over the place is ridiculous, especially | deraadt | 2016-08-30 | 1 | -15/+14 | |
| | | | | | if buf[1] is never used. ok guenther beck | |||||
* | Fix 32-bit time handling, using time_t and make it work on systems | deraadt | 2016-08-30 | 2 | -24/+25 | |
| | | | | | where that is long long. ok beck guenther | |||||
* | shorten rsautl; | jmc | 2016-08-30 | 1 | -152/+13 | |
| | ||||||
* | shorten the rsa text; of note, i've also reduced the description | jmc | 2016-08-28 | 1 | -278/+44 | |
| | | | | | for -inform/-outform/-text and removed the oft-repeated header/footer blurb; |