Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Set "Content-Type: application/ocsp-request" in ocspcheck(1)'s POSTs, | sthen | 2020-01-11 | 1 | -1/+2 |
| | | | | | it is required by the RFC and some CAs require it (e.g. sectigo). From daharmasterkor at gmail com, ok jca@ | ||||
* | When system calls indicate an error they return -1, not some arbitrary | deraadt | 2019-06-28 | 1 | -5/+5 |
| | | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. | ||||
* | update for libtls default cert changes. | tedu | 2018-11-29 | 1 | -2/+2 |
| | | | | bonus: this exposed a few missing const qualifiers. | ||||
* | Use TLS_CA_CERT_FILE instead of a separate define. | jsing | 2018-11-06 | 1 | -4/+2 |
| | | | | ok beck@ bluhm@ tb@ | ||||
* | recallocarray() for data buffer from the net. | deraadt | 2017-03-26 | 1 | -3/+5 |
| | | | | ok beck | ||||
* | Don't use <sys/param.h> from userland without cause. Sort <sys/*> | guenther | 2017-02-03 | 1 | -3/+4 |
| | | | | | | before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@ | ||||
* | netinet/in.h should be included, and freebsd and some others | beck | 2017-02-01 | 1 | -2/+3 |
| | | | | | don't have EAI_NODATA, so make this easier for people from bernard spill | ||||
* | bring changes from acme-client over here. | benno | 2017-01-25 | 1 | -56/+54 |
| | | | | ok beck@ | ||||
* | string terminator is called a NUL | deraadt | 2017-01-24 | 1 | -3/+3 |
| | |||||
* | Yes the "if (const == val" idiom provides some safety, but it grates on | deraadt | 2017-01-24 | 1 | -58/+58 |
| | | | | | us too much. ok beck jsing | ||||
* | revert accidental commit of theo diff | beck | 2017-01-24 | 1 | -58/+58 |
| | |||||
* | Just don't bother with OpenSSL error strings, they are mostly | beck | 2017-01-24 | 1 | -58/+58 |
| | | | | irrelevant and look gross here anyway.. we don't need them | ||||
* | New ocspcheck utility to validate a certificate against its ocsp responder | beck | 2017-01-24 | 1 | -0/+782 |
and save the reply for stapling ok deraadt@ jsing@ |