openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
...
*	Use a fixed validation time in these tests so we never	beck	2020-09-14	1	-2/+4
*	remove unneeded variable "type".	beck	2020-09-14	1	-6/+5
*	Don't leak names on success	beck	2020-09-14	1	-1/+2
*	remove unneded variable "time1"	beck	2020-09-14	1	-6/+6
*	remove unneded variable "time"	beck	2020-09-14	1	-3/+2
*	fix bug introduced on review where refactor made it possible to	beck	2020-09-14	1	-2/+2
*	re-enable new x509 chain verifier as the default	beck	2020-09-14	1	-3/+1
*	Correctly fix double free introduced on review.	beck	2020-09-14	2	-3/+3
*	Fix double free - review moved the pop_free of roots to x509_verify_ctx_free	beck	2020-09-14	1	-2/+1
*	revert previous, need to fix a problem	beck	2020-09-14	1	-1/+3
*	Enable the use of the new x509 chain validator by default.	beck	2020-09-14	1	-3/+1
*	Connect a client to a server. Both can be current libressl, or	bluhm	2020-09-14	5	-10/+193
*	Add regress for SSL_{CTX_,}set_ciphersuites().	jsing	2020-09-13	2	-7/+318
*	Implement SSL_{CTX_,}set_ciphersuites().	jsing	2020-09-13	5	-13/+211
*	Add new x509 certificate chain validator in x509_verify.c	beck	2020-09-13	11	-68/+1281
*	Improve handling of BIO_read()/BIO_write() failures in the TLSv1.3 stack.	jsing	2020-09-13	1	-1/+9
*	Use the correct type for tls1_set_ec_id()	tb	2020-09-12	1	-3/+3
*	Simplify tls1_set_ec_id() a bit	tb	2020-09-12	1	-24/+19
*	Unindent a bit of code that performs a few too many checks to	tb	2020-09-12	1	-10/+8
*	If CPU does not support AES-NI, LibreSSL TLS 1.3 client prefers	bluhm	2020-09-12	1	-9/+18
*	Avoid an out-of-bounds access in BN_rand()	tb	2020-09-12	1	-3/+8
*	Change over to use the new x509 name constraints verification.	beck	2020-09-12	1	-28/+7
*	remove unused include that breaks regress	beck	2020-09-12	1	-1/+0
*	Include machine/endian.h in gost2814789.c	inoguchi	2020-09-12	1	-1/+3
*	Enable cert and cipher interop tests. cert just works. cipher has	bluhm	2020-09-11	3	-55/+35
*	Add x509_constraints.c - a new implementation of x509 name constraints, with	beck	2020-09-11	5	-7/+1767
*	Remove cipher_list_by_id.	jsing	2020-09-11	7	-89/+32
*	Simplify SSL_get_ciphers().	jsing	2020-09-11	1	-13/+7
*	Rename ssl_cipher_is_permitted()	jsing	2020-09-11	3	-10/+10
*	Some SSL_AD_* defines snuck into the TLSv1.3 code - replace them with	jsing	2020-09-11	2	-10/+10
*	Add issuer cache, to be used by upcoming changes to validation code.	beck	2020-09-11	3	-1/+216
*	Various ciphers related clean up.	jsing	2020-09-11	1	-41/+36
*	Enable test-tls13-large-number-of-extensions.py	tb	2020-09-10	1	-2/+7
*	Wrap long lines, add space in front of goto label in openssl(1) ocsp.c	inoguchi	2020-09-09	1	-93/+118
*	Change SSLv23_client_method to TLS_client_method openssl(1) ocsp	inoguchi	2020-09-09	1	-2/+2
*	Remove space between pointer '*' and variable name in ocsp.c	inoguchi	2020-09-09	1	-39/+39
*	Convert openssl(1) ocsp option handling	inoguchi	2020-09-09	1	-443/+725
*	Add option type OPTION_UL_VALUE_OR	inoguchi	2020-09-09	2	-2/+9
*	Set alpn_selected_len = 0 when alpn_selected is NULL	inoguchi	2020-09-09	1	-1/+4
*	Import latest OPENSSL_NO_* flags from OpenSSL 1.1.1g	inoguchi	2020-09-09	1	-0/+8
*	Mention that EC_KEY_get0_public_key returns a public key.	tb	2020-09-08	1	-3/+5
*	Garbage collect renew_ticket in tls_decrypt_ticket	tb	2020-09-07	1	-8/+5
*	For page-sized and larger allocations do not put the pages we're	otto	2020-09-06	1	-21/+18
*	Ignore ftruncate failure with errno == EAGAIN	tb	2020-09-04	1	-2/+5
*	Clean up asn1/x_info.c	tb	2020-09-03	1	-22/+9
*	Remove unnecessary zeroing after recallocarray(3)	tb	2020-09-03	1	-3/+1
*	KNF and comment tweaks	tb	2020-09-02	1	-8/+10
*	Zero out data to avoid leaving stack garbage in the tail of	tb	2020-09-01	1	-1/+3
*	The bumping of sess_cb_hit stats can wait until handling of	tb	2020-09-01	1	-4/+3
*	In the explanatory comment of ssl_get_prev_session fix the spelling of	tb	2020-09-01	1	-5/+6