summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Expand)AuthorAgeFilesLines
* Prior to this we substring matched and allowed a leading .beck2026-04-133-7/+75
* Bump LibreSSL version for the releasetb2026-04-081-3/+3
* Rename labellen to label_lentb2026-04-072-24/+24
* Fix NULL deref for malformed OAEP parameters in CMS decryptiontb2026-04-072-11/+22
* Refactor and fix ocsp_find_signer_sk()tb2026-04-071-12/+17
* Add a few to-do items to the crl_cb()tb2026-04-071-1/+6
* Stop Delta CRL processing if a CRL number is misssingtb2026-04-071-4/+8
* x509v3.h: remove pointless #ifdef HEADER_CONF_Htb2026-04-061-3/+1
* cms_local.h: remove #ifdef X509V3_HEADER_Htb2026-04-061-4/+3
* Remove lib/libssl/test.jsing2026-04-0353-4409/+0
* Remove workaround for SSL 3.0/TLS 1.0 CBC vulnerability.jsing2026-04-035-80/+8
* Ensure that we cannot negotiate TLSv1.1 or lower.jsing2026-04-033-13/+21
* Fix min vs max in failure output.jsing2026-04-031-3/+3
* Use DTLS_client_method() instead of DTLSv1_client_method().jsing2026-04-031-3/+3
* Remove ssl_server_legacy_first_packet()jsing2026-04-033-97/+2
* Mop up mac_packet.jsing2026-04-034-15/+8
* Adjust depth check to match change in verifier.jsing2026-04-011-2/+2
* Restore the previous behaviour with maximum verification depth.jsing2026-04-011-7/+7
* Fix an off-by-one error in the X.509 verifier depth checking.jsing2026-03-311-6/+11
* Add additional X.509 verifier test cases.jsing2026-03-312-2/+28
* Run new test certificate bundles through Go's verifier.jsing2026-03-311-0/+2
* Add additional certificate test bundles.jsing2026-03-314-0/+1450
* Generate two additional certificate test scenarios which have deep chains.jsing2026-03-311-0/+16
* libssl regress: adjust golden numbers for RSASSA-PSStb2026-03-302-39/+44
* libssl: announce support for RSASSA-PSS signature schemestb2026-03-301-1/+7
* ssl_sigalg_pkey_ok: allow RSASSA-PSS with pubkey OID RSASSA-PSStb2026-03-301-5/+6
* ssl_sigalgs: whitespace tweaktb2026-03-301-1/+2
* ML-KEM: ensure that key_768 is only dereferenced with 768-bit keystb2026-03-291-3/+7
* Add missing include path required to reach newly added crypto_assembly.hanton2026-03-291-2/+3
* Include crypto_assembly.h instead of manually ensuring _CET_ENDBR exists.jsing2026-03-286-36/+12
* Provide a crypto_assembly.h internal header.jsing2026-03-281-0/+30
* libtls: const workarounds for X509_NAME in OCSP for OpenSSL 4tb2026-03-281-4/+5
* libtls: simple cases of const for X509_NAME *tb2026-03-282-6/+6
* openssl speed: whitespace tweaktb2026-03-191-3/+3
* openssl speed: add benchmarking support for ML-KEMkenjiro2026-03-181-2/+179
* sync with Mozilla root CA store, ok tb@sthen2026-03-181-174/+42
* libcrypto: prefix EC_KEY methods with ec_key_tb2026-03-185-100/+31
* Move ECDSA_SIG_st definition to its only consumer, ecdsa.ctb2026-03-162-7/+7
* openssl.1: remove mention of OPENSSL_EC_BIN_PT_COMPtb2026-03-141-16/+2
* rfc3779 regress: explain where the range comes fromtb2026-03-131-1/+5
* rfc3779 regress: add an actual rangetb2026-03-131-1/+52
* Fix BIO_get_mem_data(3) return value documentationtb2026-03-101-3/+18
* use the "e" flag with fopen() for O_CLOEXEC; ok tbderaadt2026-03-101-3/+3
* use O_CLOEXEC; ok tbderaadt2026-03-103-6/+6
* Use __pledge_open(2) for files that libc urgently needs even in lowerderaadt2026-03-102-10/+29
* mlkem: use timingsafe_memcmp() in decapsulationkenjiro2026-03-061-2/+2
* nc(1) has the more crazy unveil + pledge configuration based uponderaadt2026-02-231-2/+4
* openssl x509: Remove legacy call to OBJ_create()kenjiro2026-02-081-4/+1
* openssl x509: send -text output to the file specified by -outkenjiro2026-02-081-50/+44
* a_bitstr.c: fix includestb2026-02-081-3/+5