openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
...
*	Be sure to check object allocation for success before using them.	miod	2014-10-05	2	-10/+20
*	Missing deallocation upon error.	miod	2014-10-05	2	-4/+6
*	Fix memory leak in the error path of v2i_AUTHORITY_KEYID().	miod	2014-10-05	2	-6/+12
*	compile with c89 (code / decl ordering); from Joakim.Tjernlund@transmode.se	deraadt	2014-10-05	2	-4/+6
*	Use more specific curves/formats naming for local variables in	jsing	2014-10-05	2	-60/+56
*	Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather than	jsing	2014-10-05	2	-22/+4
*	Make tls1_get_formatlist() behave the same as tls1_get_curvelist() and	jsing	2014-10-05	2	-42/+58
*	verify changes are major change	tedu	2014-10-03	1	-2/+2
*	Bump minor for ECHD auto and other recent changes.	jsing	2014-10-03	1	-1/+1
*	Bump minor version for ECDH auto.	jsing	2014-10-03	2	-2/+2
*	allow disabling hostname and cert verification separately.	tedu	2014-10-03	4	-11/+22
*	Allow "auto" to be specified as an ECDH curve name and make this the	jsing	2014-10-03	2	-7/+13
*	Add support for automatic ephemeral EC keys.	jsing	2014-10-03	14	-26/+152
*	Use string literals in printf style calls so gcc's -Wformat works.	doug	2014-10-03	8	-40/+38
*	openssl.cnf tweaks following recent changes to usr.bin/openssl:	sthen	2014-10-01	1	-44/+3
*	Switch "openssl req" to using SHA256 for hashes and AES256 to encrypt on-disk	sthen	2014-10-01	2	-12/+12
*	Clean up EC cipher handling in ssl3_choose_cipher().	jsing	2014-09-30	6	-290/+304
*	Previous fix (1.12) would cause a NULL pointer dereference in the error path	miod	2014-09-29	2	-8/+6
*	Move cipher configuration handling to the shared SSL configuration function	jsing	2014-09-29	2	-10/+13
*	Add an option that allows the enabled SSL protocols to be explicitly	jsing	2014-09-29	6	-9/+51
*	When freeing the config, explicitly call ressl_config_clear_keys() rather	jsing	2014-09-29	1	-5/+6
*	check_cert(): be sure to reset ctx->current_crl to NULL before freeing it.	miod	2014-09-29	2	-20/+10
*	X509_NAME_get_text_by_OBJ(): make sure we do not pass a negative size to	miod	2014-09-29	2	-6/+10
*	X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the second	miod	2014-09-29	2	-2/+4
*	Wrap long lines and add missing argument name.	jsing	2014-09-28	1	-4/+6
*	Bump minor after adding SSL_CTX_use_certificate_chain().	reyk	2014-09-28	2	-2/+2
*	Provide a ressl config function that explicitly clears keys.	jsing	2014-09-28	2	-2/+10
*	Add a new API function SSL_CTX_use_certificate_chain() that allows to	reyk	2014-09-28	6	-54/+111
*	X509v3_add_ext(): do not free stuff we did not allocate in the error path.	miod	2014-09-28	2	-4/+4
*	X509_TRUST_add(): check X509_TRUST_get0() return value before dereferencing it,	miod	2014-09-28	2	-30/+46
*	Someone (TM) thought it was smart to save memory by using malloc(1) and	miod	2014-09-28	2	-10/+8
*	revamp the config interface to own memory. easier to use correctly without	tedu	2014-09-28	3	-49/+99
*	Revert r1.5 and reenable assembler version of ghash now that it has been	miod	2014-09-27	2	-6/+6
*	Doh, rev 1.4 had left out one routine with both 32-bit and 64-bit code, where	miod	2014-09-27	2	-0/+4
*	Disable assembler code for ghash on hppa, causes wrong computations in some	miod	2014-09-27	4	-8/+8
*	There is not much point checking ecdhp is not NULL... twice.	jsing	2014-09-27	4	-28/+10
*	Check that the specified curve is one of the client preferences.	jsing	2014-09-27	10	-16/+140
*	Fix mmap() calls that check for a result other than MAP_FAILED.	doug	2014-09-27	1	-1/+1
*	X509_STORE_new(): do not leak memory upon error.	miod	2014-09-26	2	-28/+34
*	X509_issuer_and_serial_hash(): do not leak memory if an error occurs during	miod	2014-09-26	2	-2/+6
*	X509at_add1_attr(): do not free stuff we did not allocate in the error path.	miod	2014-09-26	2	-6/+6
*	Now that we have a static version of the default EC formats, also use it	jsing	2014-09-26	2	-94/+88
*	Fix regression introduced in revision 1.15 by using strndup() instead of	miod	2014-09-23	2	-12/+12
*	Refactor and simplify the ECC extension handling. The existing code	jsing	2014-09-22	4	-244/+196
*	Also check the result from final_finish_mac() against finish_mac_length in	jsing	2014-09-22	2	-38/+34
*	It is possible (although unlikely in practice) for peer_finish_md_len to	jsing	2014-09-22	2	-26/+22
*	Document SSL_OP_TLSEXT_PADDING.	jsing	2014-09-21	1	-0/+6
*	Move the TLS padding extension under an SSL_OP_TLSEXT_PADDING option, which	jsing	2014-09-21	4	-20/+36
*	a_enum.c used to be a copy of a_int.c with s/INTEGER/ENUMERATED/g , but	miod	2014-09-21	2	-8/+18
*	Fix a memory leak in the error path in ASN1_mbstring_ncopy().	miod	2014-09-21	2	-38/+58