summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Expand)AuthorFilesLines
2020-09-14Set error if we are given an NULL ctx in x509_verify, and set errorbeck1-5/+3
2020-09-14nuke a stray spacetb1-2/+2
2020-09-14Fix potential leak when tmpext fails to be added tobeck1-2/+6
2020-09-14Change the known output to be the expected output, so that webeck1-1421/+1421
2020-09-14Use a fixed validation time in these tests so we neverbeck1-2/+4
2020-09-14remove unneeded variable "type".beck1-6/+5
2020-09-14Don't leak names on successbeck1-1/+2
2020-09-14remove unneded variable "time1"beck1-6/+6
2020-09-14remove unneded variable "time"beck1-3/+2
2020-09-14fix bug introduced on review where refactor made it possible tobeck1-2/+2
2020-09-14re-enable new x509 chain verifier as the defaultbeck1-3/+1
2020-09-14Correctly fix double free introduced on review.beck2-3/+3
2020-09-14Fix double free - review moved the pop_free of roots to x509_verify_ctx_freebeck1-2/+1
2020-09-14revert previous, need to fix a problembeck1-1/+3
2020-09-14Enable the use of the new x509 chain validator by default.beck1-3/+1
2020-09-14Connect a client to a server. Both can be current libressl, orbluhm5-10/+193
2020-09-13Add regress for SSL_{CTX_,}set_ciphersuites().jsing2-7/+318
2020-09-13Implement SSL_{CTX_,}set_ciphersuites().jsing5-13/+211
2020-09-13Add new x509 certificate chain validator in x509_verify.cbeck11-68/+1281
2020-09-13Improve handling of BIO_read()/BIO_write() failures in the TLSv1.3 stack.jsing1-1/+9
2020-09-12Use the correct type for tls1_set_ec_id()tb1-3/+3
2020-09-12Simplify tls1_set_ec_id() a bittb1-24/+19
2020-09-12Unindent a bit of code that performs a few too many checks totb1-10/+8
2020-09-12If CPU does not support AES-NI, LibreSSL TLS 1.3 client prefersbluhm1-9/+18
2020-09-12Avoid an out-of-bounds access in BN_rand()tb1-3/+8
2020-09-12Change over to use the new x509 name constraints verification.beck1-28/+7
2020-09-12remove unused include that breaks regressbeck1-1/+0
2020-09-12Include machine/endian.h in gost2814789.cinoguchi1-1/+3
2020-09-11Enable cert and cipher interop tests. cert just works. cipher hasbluhm3-55/+35
2020-09-11Add x509_constraints.c - a new implementation of x509 name constraints, withbeck5-7/+1767
2020-09-11Remove cipher_list_by_id.jsing7-89/+32
2020-09-11Simplify SSL_get_ciphers().jsing1-13/+7
2020-09-11Rename ssl_cipher_is_permitted()jsing3-10/+10
2020-09-11Some SSL_AD_* defines snuck into the TLSv1.3 code - replace them withjsing2-10/+10
2020-09-11Add issuer cache, to be used by upcoming changes to validation code.beck3-1/+216
2020-09-11Various ciphers related clean up.jsing1-41/+36
2020-09-10Enable test-tls13-large-number-of-extensions.pytb1-2/+7
2020-09-09Wrap long lines, add space in front of goto label in openssl(1) ocsp.cinoguchi1-93/+118
2020-09-09Change SSLv23_client_method to TLS_client_method openssl(1) ocspinoguchi1-2/+2
2020-09-09Remove space between pointer '*' and variable name in ocsp.cinoguchi1-39/+39
2020-09-09Convert openssl(1) ocsp option handlinginoguchi1-443/+725
2020-09-09Add option type OPTION_UL_VALUE_ORinoguchi2-2/+9
2020-09-09Set alpn_selected_len = 0 when alpn_selected is NULLinoguchi1-1/+4
2020-09-09Import latest OPENSSL_NO_* flags from OpenSSL 1.1.1ginoguchi1-0/+8
2020-09-08Mention that EC_KEY_get0_public_key returns a public key.tb1-3/+5
2020-09-07Garbage collect renew_ticket in tls_decrypt_tickettb1-8/+5
2020-09-06For page-sized and larger allocations do not put the pages we'reotto1-21/+18
2020-09-04Ignore ftruncate failure with errno == EAGAINtb1-2/+5
2020-09-03Clean up asn1/x_info.ctb1-22/+9
2020-09-03Remove unnecessary zeroing after recallocarray(3)tb1-3/+1
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-14 04:29:31 +0000