summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Expand)AuthorFilesLines
2017-02-28Add an EVP interface that provides concatenated MD5+SHA1 hashes, which arejsing4-2/+88
2017-02-28Fix typo in issuingDistributionPoint description.jsing1-1/+1
2017-02-28Stop pretending that MD5 and SHA1 might not exist - rather than locatingjsing4-20/+8
2017-02-27Add support for RES_USE_DNSSECjca1-5/+2
2017-02-25pledge stdio before parsing the http responsebeck1-9/+11
2017-02-25Add missing includes to avoid implicit function declarations.jsg4-3/+7
2017-02-24Add the following root CAs, from SECOM Trust Systems / Security Communicationsthen1-1/+126
2017-02-23Check return value of every BN_* functions in bntestinoguchi1-393/+426
2017-02-21Remove STREEBOG 512 as a TLS MAC since there are currently no cipher suitesjsing2-26/+6
2017-02-21don;t end Nd with a full stop;jmc1-3/+3
2017-02-20Add missing $OpenBSD$beck1-0/+1
2017-02-20Mark ERR_add_error_data and ERR_add_error_vdata as not for internal use,beck5-14/+81
2017-02-20spelling fix;jmc1-2/+2
2017-02-20document tls_config_error(3) RETURN VALUES, improve what is saidschwarze2-6/+59
2017-02-18Add EDNS0 support.jca1-4/+3
2017-02-15Avoid dereferencing a pointer when reporting an error about the samejsing1-2/+2
2017-02-15Add a NULL test to wrterror() to avoid a NULL deref when called from ajsg1-2/+2
2017-02-14bump to 2.5.2bcook1-3/+3
2017-02-12malloc does not *need* to return page-aligned objects for size >=otto1-5/+2
2017-02-09When netcat was started with -Uz, the exit status was always 1. Ifbluhm1-3/+4
2017-02-09Document that -x can take an ipv6 address enclosed in square brackets.jca1-2/+5
2017-02-09When getaddrinfo fails, print the requested host and port.jca1-2/+3
2017-02-09DES keys are not 7 days long. ok jsing@dtucker2-5/+5
2017-02-08Avoid a busy loop in netcat's tls_close(). Reuse the tls_handshake()bluhm1-18/+8
2017-02-08Avoid double close(2) in netcat. After every call to readwrite()bluhm1-13/+5
2017-02-08Due to non-blocking sockets, tls_handshake() could wait in a busybluhm1-21/+42
2017-02-07Revert previous; the implementation is incorrect since it assumes that thejsing2-20/+7
2017-02-07Remove unused variable in C source to make the test compile and pass.bluhm1-1/+0
2017-02-07Add file and line to the LibreSSL error strings sine we are no longer inbeck2-7/+20
2017-02-07Change SSLerror() back to taking two args, with the first one being an SSL *.beck25-573/+841
2017-02-05Define values for SSL_CTRL_SET_GROUPS{,_LIST} and wire them up to thejsing2-15/+19
2017-02-05Kill leak introduced with refactorbeck1-3/+6
2017-02-05Support IPv6 proxy addressesjca1-10/+24
2017-02-03Don't use <sys/param.h> from userland without cause. Sort <sys/*>guenther1-3/+4
2017-02-02fix a comment and rm some dead code as a result of the previous diffotto1-8/+5
2017-02-01netinet/in.h should be included, and freebsd and some othersbeck2-2/+6
2017-02-01Let realloc handle and produce moved pointers for allocations betweenlibressl-v2.5.1otto1-20/+37
2017-01-31tweak previous;jmc2-12/+8
2017-01-31Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may bebeck6-58/+209
2017-01-31Disable client-initiated renegotiation for libtls servers.jsing1-1/+3
2017-01-31Provide an SSL_OP_NO_CLIENT_RENEGOTIATION option that disallowsjsing2-2/+12
2017-01-31LibreSSL : regress for carry bug in mulx4x_mont and sqr8x_montinoguchi1-1/+78
2017-01-31LibreSSL : Truncated packet could crash via OOB readinoguchi2-3/+10
2017-01-31Document functions returning standard moduli for DH key exchange.schwarze2-1/+136
2017-01-30tweak previous;jmc3-11/+11
2017-01-30Document BN_set_flags(3) and BN_get_flags(3).schwarze6-13/+159
2017-01-29Seriously warn against calling BN_init(3), BN_MONT_CTX_init(3),schwarze3-12/+75
2017-01-29Marko Kreen contributed significantly to the ocsp stuff for libtlsbeck1-2/+3
2017-01-29Move the ocsp staple to being part of the keypair structure internally,beck3-14/+32
2017-01-29Send the function codes from the error functions to the bit bucket,beck275-3892/+2400