| Commit message (Expand) | Author | Age | Files | Lines |
* | Clean up and improve openssl(1) errstr: | jsing | 2015-04-14 | 1 | -21/+28 |
* | Convert openssl(1) errstr to new option handling. | jsing | 2015-04-13 | 1 | -6/+34 |
* | Remove d2i_X509_PKEY and i2d_X509_PKEY from the SSLeay days. | doug | 2015-04-12 | 4 | -88/+4 |
* | Send OPENSSL_issetugid() straight to hell, no final cigarette. | deraadt | 2015-04-11 | 7 | -34/+6 |
* | Remove all getenv() calls, especially those wrapped by issetugid(). | deraadt | 2015-04-11 | 13 | -115/+30 |
* | Put back a goto end that was unintentionally removed. | jsing | 2015-04-11 | 1 | -1/+2 |
* | Convert openssl(1) pkeyparam to new option handling. | jsing | 2015-04-11 | 1 | -61/+74 |
* | Make pthread_atfork() track the DSO that called it like atexit() does, | guenther | 2015-04-07 | 3 | -2/+81 |
* | bludgeon DES support out of crypt. long live the bcrypt. | tedu | 2015-04-06 | 2 | -761/+9 |
* | improve realloc. when expanding a region, actually use the free page cache | tedu | 2015-04-06 | 1 | -7/+16 |
* | readdir() is thread-safe when DIR handles aren't shared, so delete the lock. | guenther | 2015-04-06 | 2 | -6/+2 |
* | comma fix; | jmc | 2015-04-03 | 1 | -3/+3 |
* | Handle the case where multiple calls to SSL_shutdown() are required to | jsing | 2015-04-02 | 2 | -8/+14 |
* | Correct man page title. | jsing | 2015-04-02 | 1 | -2/+2 |
* | Document the fact that the tls_accept_*() functions can return | jsing | 2015-04-02 | 1 | -7/+11 |
* | Bump libtls minor due to API addition. | jsing | 2015-03-31 | 1 | -1/+1 |
* | Provide a tls_accept_fds() function, which allows a TLS connection to be | jsing | 2015-03-31 | 4 | -9/+39 |
* | Nuke the OPENSSL_MAX_TLS1_2_CIPHER_LENGTH hack - this has to be enabled at | jsing | 2015-03-31 | 4 | -44/+4 |
* | Store errors that occur during a tls_accept_socket() call on the context | jsing | 2015-03-31 | 4 | -11/+12 |
* | add initial AIX getentropy/arc4random files. Thanks to Michael Felt. | bcook | 2015-03-30 | 4 | -0/+1002 |
* | Factor out the init_buf initialisation code, rather than duplicating it | jsing | 2015-03-27 | 16 | -206/+112 |
* | BUF_MEM_free() has its own explicit NULL check. | jsing | 2015-03-27 | 2 | -18/+12 |
* | The code in socks.c writes multiple times in a row to a socket. If the | tobias | 2015-03-26 | 1 | -3/+6 |
* | Fix error message in case of write failure. | tobias | 2015-03-26 | 1 | -3/+3 |
* | Check for short writes in fdpass(). Clean up while at it. | tobias | 2015-03-26 | 1 | -4/+3 |
* | Sync camel case of "ProxyUseFdpass" with ssh_config(5). | tobias | 2015-03-26 | 1 | -3/+3 |
* | Make rcmdsh(3) not fail if it is passed a non resolvable hostname. | halex | 2015-03-23 | 3 | -20/+16 |
* | differentiate between a failed read, returning -1, and encountering | halex | 2015-03-22 | 1 | -2/+4 |
* | sys/sysctl.h includes linux/sysctl.h, remove the extra unchecked include | bcook | 2015-03-22 | 2 | -4/+2 |
* | Since Windows needs BIO_sock_init() before you can call any networking | bcook | 2015-03-22 | 2 | -12/+7 |
* | unmute rcmd hostname lookup failure | halex | 2015-03-22 | 1 | -3/+2 |
* | free the server certificate in tls_connect_fds(); fixes a memory leak with | sthen | 2015-03-21 | 1 | -1/+2 |
* | Fix indentation that incorrectly implies a different control flow. | doug | 2015-03-21 | 6 | -16/+22 |
* | Fix a memory leak in an error path. | doug | 2015-03-20 | 2 | -2/+6 |
* | zap #if 0'd code that's been dead since '96 | halex | 2015-03-19 | 1 | -7/+0 |
* | Fix several crash causing defects from OpenSSL. | tedu | 2015-03-19 | 24 | -126/+324 |
* | In the neverending saga of enabling and disabling assembler code for sha | miod | 2015-03-18 | 2 | -10/+2 |
* | Avoid a NULL pointer deref when X509_get_pubkey() returns NULL. | doug | 2015-03-15 | 2 | -4/+8 |
* | fix for regression test for strtol(). it failed (the wrong kind of | phessler | 2015-03-15 | 1 | -2/+2 |
* | remove incorrect statement. the standard *does* require calloc to check | tedu | 2015-03-14 | 1 | -7/+2 |
* | delay EVP_MD_CTX_init so we don't forget to clean it up. | tedu | 2015-03-11 | 2 | -6/+8 |
* | Reject DH keys sent by a server if they are considered too small; inspired | miod | 2015-03-08 | 3 | -40/+28 |
* | Do not use sha512-parisc for now, as it is subtly bugged - passes the sha | miod | 2015-03-05 | 2 | -2/+6 |
* | subtraction is not comparison. the difference of two longs is not good | tedu | 2015-03-05 | 1 | -1/+1 |
* | Update comment to match code; Caspar Schutijserlibressl-v2.1.4 | millert | 2015-03-02 | 1 | -2/+2 |
* | Fix a minor information leak that was introduced in t1_lib.c r1.71, whereby | jsing | 2015-03-02 | 2 | -4/+4 |
* | use correct formatter (int, because of type promotion after operations) | bcook | 2015-03-02 | 1 | -2/+2 |
* | Reduce usage of predefined strings in manpages. | bentley | 2015-02-28 | 1 | -7/+7 |
* | Prefix function parameter names with underscores in tls.h, since this makes | jsing | 2015-02-26 | 1 | -42/+44 |
* | No need to use O_DIRECTORY when opening ".", O_RDONLY will suffice. | millert | 2015-02-25 | 1 | -1/+1 |