summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Expand)AuthorFilesLines
2015-04-29Call CBB_add_space() rather than reimplementing it.doug2-4/+4
2015-04-29Rename cbb_buffer_add_u to cbb_add_u and remove redundant code.doug2-30/+12
2015-04-29Added len_len error checking for internal cbb_buffer_add_u().doug2-2/+8
2015-04-29Call CBS_mem_equal() rather than reimplementing it.doug2-6/+4
2015-04-29Avoid NULL deref in CBS_get_any_asn1_element().doug2-4/+6
2015-04-29Added error checking for len argument in cbs_get_u().doug2-2/+8
2015-04-29free() can handle NULL.doug2-16/+8
2015-04-29Reject dNSName of " " for subjectAltName extension.doug1-1/+20
2015-04-29Add missing BN_CTX_end() calls.doug8-36/+36
2015-04-27Not all Linux libc's include linux/sysctl.h in sys/sysctl.h.bcook2-4/+6
2015-04-27Support AIX versions without WPAR support.bcook2-2/+10
2015-04-25Don't ignore the reference count in X509_STORE_free.doug2-2/+10
2015-04-25Check for invalid leading zeros in CBS_get_asn1_uint64.doug3-8/+20
2015-04-23Do not need to buf[0] = 0 before strlcpy(buf, ...deraadt2-4/+2
2015-04-15Only set the cipher list if one was specified and actually check the returnjsing1-7/+12
2015-04-15Clean up the ssl_bytes_to_cipher_list() API - rather than having thejsing6-42/+30
2015-04-15Now that tls_close() is more robust, consider a failure to be fatal.jsing1-1/+1
2015-04-15Treat SSL_ERROR_ZERO_RETURN as a success, rather than a failure. Alsojsing1-5/+6
2015-04-15Make tls_close() more robust - do not rely on a close notify being receivedjsing1-13/+17
2015-04-14Another couple of commas in the wrong place, ok jmcnicm1-3/+3
2015-04-14Move verify externs into the header file.jsing4-12/+8
2015-04-14Convert openssl(1) s_time to new option handling.jsing1-201/+178
2015-04-14Clean up and improve openssl(1) errstr:jsing1-21/+28
2015-04-13Convert openssl(1) errstr to new option handling.jsing1-6/+34
2015-04-12Remove d2i_X509_PKEY and i2d_X509_PKEY from the SSLeay days.doug4-88/+4
2015-04-11Send OPENSSL_issetugid() straight to hell, no final cigarette.deraadt7-34/+6
2015-04-11Remove all getenv() calls, especially those wrapped by issetugid().deraadt13-115/+30
2015-04-11Put back a goto end that was unintentionally removed.jsing1-1/+2
2015-04-11Convert openssl(1) pkeyparam to new option handling.jsing1-61/+74
2015-04-07Make pthread_atfork() track the DSO that called it like atexit() does,guenther3-2/+81
2015-04-06bludgeon DES support out of crypt. long live the bcrypt.tedu2-761/+9
2015-04-06improve realloc. when expanding a region, actually use the free page cachetedu1-7/+16
2015-04-06readdir() is thread-safe when DIR handles aren't shared, so delete the lock.guenther2-6/+2
2015-04-03comma fix;jmc1-3/+3
2015-04-02Handle the case where multiple calls to SSL_shutdown() are required tojsing2-8/+14
2015-04-02Correct man page title.jsing1-2/+2
2015-04-02Document the fact that the tls_accept_*() functions can returnjsing1-7/+11
2015-03-31Bump libtls minor due to API addition.jsing1-1/+1
2015-03-31Provide a tls_accept_fds() function, which allows a TLS connection to bejsing4-9/+39
2015-03-31Nuke the OPENSSL_MAX_TLS1_2_CIPHER_LENGTH hack - this has to be enabled atjsing4-44/+4
2015-03-31Store errors that occur during a tls_accept_socket() call on the contextjsing4-11/+12
2015-03-30add initial AIX getentropy/arc4random files. Thanks to Michael Felt.bcook4-0/+1002
2015-03-27Factor out the init_buf initialisation code, rather than duplicating itjsing16-206/+112
2015-03-27BUF_MEM_free() has its own explicit NULL check.jsing2-18/+12
2015-03-26The code in socks.c writes multiple times in a row to a socket. If thetobias1-3/+6
2015-03-26Fix error message in case of write failure.tobias1-3/+3
2015-03-26Check for short writes in fdpass(). Clean up while at it.tobias1-4/+3
2015-03-26Sync camel case of "ProxyUseFdpass" with ssh_config(5).tobias1-3/+3
2015-03-23Make rcmdsh(3) not fail if it is passed a non resolvable hostname.halex3-20/+16
2015-03-22differentiate between a failed read, returning -1, and encounteringhalex1-2/+4