| Commit message (Expand) | Author | Age | Files | Lines |
* | Treat "ERROR in STARTUP" as an actual error, rather than failing without | jsing | 2017-03-04 | 1 | -2/+2 |
* | Remove commented out code and fix indentation of surrounding statements. | jsing | 2017-03-04 | 1 | -12/+5 |
* | Remove handling for SSLv2. | jsing | 2017-03-04 | 1 | -14/+3 |
* | Ensure MD and key initialized before processing HMAC | inoguchi | 2017-03-03 | 2 | -35/+224 |
* | fix error in Dt; from robert klein | jmc | 2017-03-02 | 1 | -3/+3 |
* | Convert ssl3_{get,send}_server_key_exchange() to EVP_md5_sha1(). | jsing | 2017-03-01 | 3 | -44/+29 |
* | Add EVP test for MD5-SHA1. | jsing | 2017-03-01 | 1 | -0/+3 |
* | Include EVP_md5_sha1() via OpenSSL_add_all_digests(). | jsing | 2017-03-01 | 1 | -1/+2 |
* | Bump minors due to symbol addition. | jsing | 2017-02-28 | 3 | -3/+3 |
* | Document EVP_md5_sha1(). | jsing | 2017-02-28 | 1 | -2/+11 |
* | Add an EVP interface that provides concatenated MD5+SHA1 hashes, which are | jsing | 2017-02-28 | 4 | -2/+88 |
* | Fix typo in issuingDistributionPoint description. | jsing | 2017-02-28 | 1 | -1/+1 |
* | Stop pretending that MD5 and SHA1 might not exist - rather than locating | jsing | 2017-02-28 | 4 | -20/+8 |
* | Add support for RES_USE_DNSSEC | jca | 2017-02-27 | 1 | -5/+2 |
* | pledge stdio before parsing the http response | beck | 2017-02-25 | 1 | -9/+11 |
* | Add missing includes to avoid implicit function declarations. | jsg | 2017-02-25 | 4 | -3/+7 |
* | Add the following root CAs, from SECOM Trust Systems / Security Communication | sthen | 2017-02-24 | 1 | -1/+126 |
* | Check return value of every BN_* functions in bntest | inoguchi | 2017-02-23 | 1 | -393/+426 |
* | Remove STREEBOG 512 as a TLS MAC since there are currently no cipher suites | jsing | 2017-02-21 | 2 | -26/+6 |
* | don;t end Nd with a full stop; | jmc | 2017-02-21 | 1 | -3/+3 |
* | Add missing $OpenBSD$ | beck | 2017-02-20 | 1 | -0/+1 |
* | Mark ERR_add_error_data and ERR_add_error_vdata as not for internal use, | beck | 2017-02-20 | 5 | -14/+81 |
* | spelling fix; | jmc | 2017-02-20 | 1 | -2/+2 |
* | document tls_config_error(3) RETURN VALUES, improve what is said | schwarze | 2017-02-20 | 2 | -6/+59 |
* | Add EDNS0 support. | jca | 2017-02-18 | 1 | -4/+3 |
* | Avoid dereferencing a pointer when reporting an error about the same | jsing | 2017-02-15 | 1 | -2/+2 |
* | Add a NULL test to wrterror() to avoid a NULL deref when called from a | jsg | 2017-02-15 | 1 | -2/+2 |
* | bump to 2.5.2 | bcook | 2017-02-14 | 1 | -3/+3 |
* | malloc does not *need* to return page-aligned objects for size >= | otto | 2017-02-12 | 1 | -5/+2 |
* | When netcat was started with -Uz, the exit status was always 1. If | bluhm | 2017-02-09 | 1 | -3/+4 |
* | Document that -x can take an ipv6 address enclosed in square brackets. | jca | 2017-02-09 | 1 | -2/+5 |
* | When getaddrinfo fails, print the requested host and port. | jca | 2017-02-09 | 1 | -2/+3 |
* | DES keys are not 7 days long. ok jsing@ | dtucker | 2017-02-09 | 2 | -5/+5 |
* | Avoid a busy loop in netcat's tls_close(). Reuse the tls_handshake() | bluhm | 2017-02-08 | 1 | -18/+8 |
* | Avoid double close(2) in netcat. After every call to readwrite() | bluhm | 2017-02-08 | 1 | -13/+5 |
* | Due to non-blocking sockets, tls_handshake() could wait in a busy | bluhm | 2017-02-08 | 1 | -21/+42 |
* | Revert previous; the implementation is incorrect since it assumes that the | jsing | 2017-02-07 | 2 | -20/+7 |
* | Remove unused variable in C source to make the test compile and pass. | bluhm | 2017-02-07 | 1 | -1/+0 |
* | Add file and line to the LibreSSL error strings sine we are no longer in | beck | 2017-02-07 | 2 | -7/+20 |
* | Change SSLerror() back to taking two args, with the first one being an SSL *. | beck | 2017-02-07 | 25 | -573/+841 |
* | Define values for SSL_CTRL_SET_GROUPS{,_LIST} and wire them up to the | jsing | 2017-02-05 | 2 | -15/+19 |
* | Kill leak introduced with refactor | beck | 2017-02-05 | 1 | -3/+6 |
* | Support IPv6 proxy addresses | jca | 2017-02-05 | 1 | -10/+24 |
* | Don't use <sys/param.h> from userland without cause. Sort <sys/*> | guenther | 2017-02-03 | 1 | -3/+4 |
* | fix a comment and rm some dead code as a result of the previous diff | otto | 2017-02-02 | 1 | -8/+5 |
* | netinet/in.h should be included, and freebsd and some others | beck | 2017-02-01 | 2 | -2/+6 |
* | Let realloc handle and produce moved pointers for allocations betweenlibressl-v2.5.1 | otto | 2017-02-01 | 1 | -20/+37 |
* | tweak previous; | jmc | 2017-01-31 | 2 | -12/+8 |
* | Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may be | beck | 2017-01-31 | 6 | -58/+209 |
* | Disable client-initiated renegotiation for libtls servers. | jsing | 2017-01-31 | 1 | -1/+3 |