openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
*	Fix usage() output and getopt sorting	guenther	2016-07-13	1	-6/+6
*	zero the read buffer after copying data to user so it doesn't linger.	tedu	2016-07-10	2	-2/+4
*	Revert previous since the libtls change has been reverted.	jsing	2016-07-07	1	-16/+24
*	Revert previous - it introduces problems with a common privsep use case.	jsing	2016-07-07	3	-72/+35
*	add ca cert error check and make the path configurable	bcook	2016-07-07	1	-1/+9
*	call BN_init on temporaries to avoid use-before-set warnings	bcook	2016-07-07	6	-6/+28
*	J/j is a three valued option, document and fix code to actuall support that	otto	2016-07-06	1	-3/+5
*	Check that the given ciphers string is syntactically valid and results in	jsing	2016-07-06	1	-1/+17
*	Remove manual file loading (now that libtls does this for us) and adjust	jsing	2016-07-06	1	-24/+16
*	Always load CA, key and certificate files at the time the configuration	jsing	2016-07-06	3	-35/+72
*	Correctly handle an EOF that occurs prior to the TLS handshake completing.	jsing	2016-07-06	1	-3/+6
*	remove extra assignment of s from 1.11, fix regression test	bcook	2016-07-05	1	-2/+1
*	remove unneeded duplicate call - spotted by jsing@	beck	2016-07-05	2	-6/+2
*	On systems where we do not have BN_ULLONG defined (most 64-bit systems),	bcook	2016-07-05	8	-26/+111
*	Add several fixes from OpenSSL to make OCSP work with intermediate	beck	2016-07-05	2	-20/+48
*	make less awful.. test against cloudflare too	beck	2016-07-05	2	-9/+19
*	Add a nasty little ocsp regress test in the hope pedants will make it better.	beck	2016-07-04	3	-1/+140
*	do not uppercase "hop limit";	jmc	2016-07-02	1	-4/+4
*	Simplify IP proto-specific sockopt error handling.	bcook	2016-07-01	1	-34/+26
*	Tighten behavior of _rs_allocate failure for portable arc4random implementati...	bcook	2016-06-30	14	-14/+28
*	Tighten behavior of _rs_allocate on Windows.	bcook	2016-06-30	2	-8/+14
*	bump to 2.4.2	bcook	2016-06-30	2	-6/+6
*	adapt S option: add C, rm F (not relevant with 0 cache and disables	otto	2016-06-30	1	-3/+3
*	Remove flags for disabling constant-time operations.	bcook	2016-06-30	18	-424/+207
*	Add -M and -m options to specify the outgoing and incoming minimum TTL	jca	2016-06-28	2	-9/+52
*	Back out previous; otto saw a potential race that could lead to a	tb	2016-06-28	1	-32/+23
*	If an error path if close() is called, save errno so that original error	deraadt	2016-06-28	1	-5/+13
*	Be more careful initializing and tracking socket s through main, this is	deraadt	2016-06-27	1	-7/+6
*	defer munmap to after unlocking malloc. this can (unfortunately) be an	tedu	2016-06-27	1	-23/+32
*	whitespace	deraadt	2016-06-27	1	-2/+2
*	increase the minimum for auto rounds to 6. that was the previous low bound	tedu	2016-06-26	1	-2/+2
*	Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP uses	beck	2016-06-25	2	-4/+4
*	Fix the ocsp code to actually check for errors when comparing time values	beck	2016-06-25	2	-14/+62
*	Disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior.	bcook	2016-06-21	6	-176/+92
*	Fix a bug loading the default certificate path locations.	bcook	2016-06-21	1	-9/+7
*	Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.libressl-v2.4.1	tedu	2016-06-06	2	-4/+4
*	Correct a problem that prevents the DSA signing algorithm from running	beck	2016-06-06	2	-8/+12
*	LibreSSL 2.4.1	bcook	2016-06-06	2	-6/+6
*	Fix typo; the period should be outside the parens. From Michael McConville	millert	2016-06-02	1	-3/+3
*	Let netcat support the use of service names instead of port numbers.	beck	2016-06-02	2	-18/+34
*	Gix misleading indent pointed out by GCC 6.1.libressl-v2.4.0	bcook	2016-05-30	1	-4/+4
*	deprecate internal use of EVP_[Cipher\|Encrypt\|Decrypt]_Final.	beck	2016-05-30	8	-24/+40
*	The icdb magic number doesn't need to be visible to static links	guenther	2016-05-30	1	-2/+2
*	Remove dead support for changing BDB hash algorithm and cache of alternatives	guenther	2016-05-29	1	-5/+4
*	Nuke sigret.c	beck	2016-05-29	2	-198/+0
*	We don't have sigreturn anymore	beck	2016-05-29	1	-2/+2
*	Prefer AF_* over PF_* and 'address family' over 'protocol family'	guenther	2016-05-29	1	-9/+9
*	Fix pledge violation with -P s used and we need to supply a password	beck	2016-05-28	1	-3/+12
*	Fix nc -verbose mode when used on a unix domain socket.	beck	2016-05-28	1	-5/+11
*	rcmd(3) and rcmdsh(3) use getaddrinfo(3) not gethostbyname(3).	millert	2016-05-28	2	-9/+9