summaryrefslogtreecommitdiff
path: root/src/usr.bin (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Support IPv6 proxy addressesjca2017-02-051-10/+24
| | | | ok beck@
* oscp -> ocsp;jmc2017-01-261-3/+3
| | | | from holger mikolon, plus one more in nc;
* Add a -groups option to openssl s_client, which allows supported EC curvesjsing2017-01-241-7/+17
| | | | | | to be specified as a colon separated list. ok beck@
* whitespacederaadt2017-01-212-5/+5
|
* rearrange pledge promises into the canonical order; easier to eyeballderaadt2017-01-2039-77/+77
|
* fix pledge for openssl ocsp - we will need tty to ask for a cert pwbeck2017-01-201-2/+2
|
* fix openssl ocsp to not report sucess when the ocsp responder rejects usbeck2017-01-191-3/+3
| | | | ok deraadt@ krw@
* consistently spell ASN.1;jmc2017-01-031-12/+12
|
* Display details of the server ephemeral key, based on OpenSSL.jsing2016-12-303-3/+44
| | | | ok doug@
* Expand ASN1_ITEM_rptr macros here as well... used with NETSCAPE_X509 of alljsing2016-12-302-4/+4
| | | | things...
* Stop using M_PKCS12_* compatibility macros here as well.jsing2016-12-301-3/+3
|
* Check return value of tls_config_set_protocols(3) and tls_config_set_ciphers(3)mestre2016-11-301-3/+6
| | | | | | and bail out in case of failure Feedback and OK jsing@
* tweak previous;jmc2016-11-061-3/+3
|
* rename tlslegacy to tlsall, and better describe what it does.beck2016-11-062-8/+8
| | | | ok jsing@
* zap trailing whitespace, and add -o to usage() and help (-h);jmc2016-11-052-6/+9
|
* Add support for server side OCSP stapling to libtls.beck2016-11-052-4/+19
| | | | Add support for server side OCSP stapling to netcat.
* new sentence, new line, and zap trailing whitespace;jmc2016-11-041-3/+4
|
* Add ocsp_require_stapling config option for tls - allows a connectionbeck2016-11-042-6/+12
| | | | | | to indicate that it requires the peer to provide a stapled OCSP response with the handshake. Provide a "-T muststaple" for nc that uses it. ok jsing@, guenther@
* make OCSP_URL only show up when an OCSP url is actually present in the certbeck2016-11-031-2/+3
|
* Make OCSP Stapling: only appear if there is stapling info present.beck2016-11-031-5/+3
|
* Add OCSP client side support to libtls.beck2016-11-021-1/+37
| | | | | | | | | | | | | - Provide access to certificate OCSP URL - Provide ability to check a raw OCSP reply against an established TLS ctx - Check and validate OCSP stapling info in the TLS handshake if a stapled OCSP response is provided.` Add example code to show OCSP URL and stapled info into netcat. ok jsing@
* typonaddy2016-10-061-3/+3
|
* trim STANDARDS; ok jsinglibressl-v2.5.0jmc2016-09-221-13/+1
|
* some minor cleanup;jmc2016-09-221-47/+17
|
* shorten x509;jmc2016-09-221-755/+414
|
* shorten version;jmc2016-09-201-17/+4
|
* shorten the verify error list;jmc2016-09-201-42/+41
|
* put the spkac section in the right place;jmc2016-09-191-60/+60
|
* shorten verify;jmc2016-09-191-154/+96
|
* remove comment about CMS; ok jsingderaadt2016-09-171-3/+2
|
* add some Xr for acme-client(1);jmc2016-09-151-1/+2
|
* some spkac shortening; ok beckjmc2016-09-151-68/+13
|
* shorten ts;jmc2016-09-151-283/+63
|
* shorten speed;jmc2016-09-121-48/+14
| | | | help/ok guenther bcook
* shorten smime;jmc2016-09-081-344/+83
|
* remove a cms leftoverderaadt2016-09-051-2/+1
|
* shorten sess_id;jmc2016-09-041-84/+44
|
* Nuke one more cms tendrilbeck2016-09-041-4/+1
| | | | ok jsing@
* bye bye cms. send it to the atticbeck2016-09-042-1144/+2
| | | | ok jsing@
* Options that take a time argument....take an argumentguenther2016-09-041-2/+3
| | | | diff from Kinichiro Inoguchi (kinichiro.inoguchi (at) gmail.com)
* squash some possibly-used-uninitialized warningsbcook2016-09-031-3/+3
|
* shorten s_time; help/ok bcookjmc2016-09-031-91/+22
|
* shorten s_server;jmc2016-09-021-134/+72
|
* shorten s_client;jmc2016-09-011-142/+50
|
* We don't need any VMS access tricks.deraadt2016-08-311-27/+4
| | | | ok beck tedu
* Add OPTION_ARG_TIME for parsing a (64 bit if needed) time_tderaadt2016-08-303-4/+15
| | | | prodding & ok jsing
* buf[][] with strange use all over the place is ridiculous, especiallyderaadt2016-08-301-15/+14
| | | | | if buf[1] is never used. ok guenther beck
* Fix 32-bit time handling, using time_t and make it work on systemsderaadt2016-08-302-24/+25
| | | | | where that is long long. ok beck guenther
* shorten rsautl;jmc2016-08-301-152/+13
|
* shorten the rsa text; of note, i've also reduced the descriptionjmc2016-08-281-278/+44
| | | | | for -inform/-outform/-text and removed the oft-repeated header/footer blurb;