Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | remove duplicate includes | jsg | 2023-04-19 | 1 | -2/+1 |
| | |||||
* | The argument to ctype functions must be EOF or representable as an | florian | 2022-12-15 | 1 | -2/+2 |
| | | | | | | | | | | unsigned char. Casting to int is particularly useless because that's what the compiler already does. We need to prevent sign extension, not write down that we want sign extension. OK deraadt, kn, miod, op | ||||
* | Add missing void to definition of http_init(). | tb | 2021-09-14 | 1 | -2/+2 |
| | | | | ok deraadt florian | ||||
* | Remove unneeded calls to tls_init(3) | kn | 2021-07-14 | 1 | -6/+1 |
| | | | | | | | | | | | | As per the manual and lib/libtls/tls.c revision 1.79 from 2018 "Automatically handle library initialisation for libtls." initialisation is handled automatically by other tls_*(3) functions. Remove explicit tls_init() calls from base to not give the impression of it being needed. Feedback tb OK Tests mestre | ||||
* | Set "Content-Type: application/ocsp-request" in ocspcheck(1)'s POSTs, | sthen | 2020-01-11 | 1 | -1/+2 |
| | | | | | it is required by the RFC and some CAs require it (e.g. sectigo). From daharmasterkor at gmail com, ok jca@ | ||||
* | When system calls indicate an error they return -1, not some arbitrary | deraadt | 2019-06-28 | 1 | -5/+5 |
| | | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. | ||||
* | update for libtls default cert changes. | tedu | 2018-11-29 | 1 | -2/+2 |
| | | | | bonus: this exposed a few missing const qualifiers. | ||||
* | Use TLS_CA_CERT_FILE instead of a separate define. | jsing | 2018-11-06 | 1 | -4/+2 |
| | | | | ok beck@ bluhm@ tb@ | ||||
* | recallocarray() for data buffer from the net. | deraadt | 2017-03-26 | 1 | -3/+5 |
| | | | | ok beck | ||||
* | Don't use <sys/param.h> from userland without cause. Sort <sys/*> | guenther | 2017-02-03 | 1 | -3/+4 |
| | | | | | | before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@ | ||||
* | netinet/in.h should be included, and freebsd and some others | beck | 2017-02-01 | 1 | -2/+3 |
| | | | | | don't have EAI_NODATA, so make this easier for people from bernard spill | ||||
* | bring changes from acme-client over here. | benno | 2017-01-25 | 1 | -56/+54 |
| | | | | ok beck@ | ||||
* | string terminator is called a NUL | deraadt | 2017-01-24 | 1 | -3/+3 |
| | |||||
* | Yes the "if (const == val" idiom provides some safety, but it grates on | deraadt | 2017-01-24 | 1 | -58/+58 |
| | | | | | us too much. ok beck jsing | ||||
* | revert accidental commit of theo diff | beck | 2017-01-24 | 1 | -58/+58 |
| | |||||
* | Just don't bother with OpenSSL error strings, they are mostly | beck | 2017-01-24 | 1 | -58/+58 |
| | | | | irrelevant and look gross here anyway.. we don't need them | ||||
* | New ocspcheck utility to validate a certificate against its ocsp responder | beck | 2017-01-24 | 1 | -0/+782 |
and save the reply for stapling ok deraadt@ jsing@ |