| Commit message (Expand) | Author | Age | Files | Lines |
* | Call CBB_add_space() rather than reimplementing it. | doug | 2015-04-29 | 2 | -4/+4 |
* | Rename cbb_buffer_add_u to cbb_add_u and remove redundant code. | doug | 2015-04-29 | 2 | -30/+12 |
* | Added len_len error checking for internal cbb_buffer_add_u(). | doug | 2015-04-29 | 2 | -2/+8 |
* | Call CBS_mem_equal() rather than reimplementing it. | doug | 2015-04-29 | 2 | -6/+4 |
* | Avoid NULL deref in CBS_get_any_asn1_element(). | doug | 2015-04-29 | 2 | -4/+6 |
* | Added error checking for len argument in cbs_get_u(). | doug | 2015-04-29 | 2 | -2/+8 |
* | free() can handle NULL. | doug | 2015-04-29 | 2 | -16/+8 |
* | Reject dNSName of " " for subjectAltName extension. | doug | 2015-04-29 | 1 | -1/+20 |
* | Add missing BN_CTX_end() calls. | doug | 2015-04-29 | 8 | -36/+36 |
* | Not all Linux libc's include linux/sysctl.h in sys/sysctl.h. | bcook | 2015-04-27 | 2 | -4/+6 |
* | Support AIX versions without WPAR support. | bcook | 2015-04-27 | 2 | -2/+10 |
* | Don't ignore the reference count in X509_STORE_free. | doug | 2015-04-25 | 2 | -2/+10 |
* | Check for invalid leading zeros in CBS_get_asn1_uint64. | doug | 2015-04-25 | 3 | -8/+20 |
* | Do not need to buf[0] = 0 before strlcpy(buf, ... | deraadt | 2015-04-23 | 2 | -4/+2 |
* | Only set the cipher list if one was specified and actually check the return | jsing | 2015-04-15 | 1 | -7/+12 |
* | Clean up the ssl_bytes_to_cipher_list() API - rather than having the | jsing | 2015-04-15 | 6 | -42/+30 |
* | Now that tls_close() is more robust, consider a failure to be fatal. | jsing | 2015-04-15 | 1 | -1/+1 |
* | Treat SSL_ERROR_ZERO_RETURN as a success, rather than a failure. Also | jsing | 2015-04-15 | 1 | -5/+6 |
* | Make tls_close() more robust - do not rely on a close notify being received | jsing | 2015-04-15 | 1 | -13/+17 |
* | Another couple of commas in the wrong place, ok jmc | nicm | 2015-04-14 | 1 | -3/+3 |
* | Move verify externs into the header file. | jsing | 2015-04-14 | 4 | -12/+8 |
* | Convert openssl(1) s_time to new option handling. | jsing | 2015-04-14 | 1 | -201/+178 |
* | Clean up and improve openssl(1) errstr: | jsing | 2015-04-14 | 1 | -21/+28 |
* | Convert openssl(1) errstr to new option handling. | jsing | 2015-04-13 | 1 | -6/+34 |
* | Remove d2i_X509_PKEY and i2d_X509_PKEY from the SSLeay days. | doug | 2015-04-12 | 4 | -88/+4 |
* | Send OPENSSL_issetugid() straight to hell, no final cigarette. | deraadt | 2015-04-11 | 7 | -34/+6 |
* | Remove all getenv() calls, especially those wrapped by issetugid(). | deraadt | 2015-04-11 | 13 | -115/+30 |
* | Put back a goto end that was unintentionally removed. | jsing | 2015-04-11 | 1 | -1/+2 |
* | Convert openssl(1) pkeyparam to new option handling. | jsing | 2015-04-11 | 1 | -61/+74 |
* | Make pthread_atfork() track the DSO that called it like atexit() does, | guenther | 2015-04-07 | 3 | -2/+81 |
* | bludgeon DES support out of crypt. long live the bcrypt. | tedu | 2015-04-06 | 2 | -761/+9 |
* | improve realloc. when expanding a region, actually use the free page cache | tedu | 2015-04-06 | 1 | -7/+16 |
* | readdir() is thread-safe when DIR handles aren't shared, so delete the lock. | guenther | 2015-04-06 | 2 | -6/+2 |
* | comma fix; | jmc | 2015-04-03 | 1 | -3/+3 |
* | Handle the case where multiple calls to SSL_shutdown() are required to | jsing | 2015-04-02 | 2 | -8/+14 |
* | Correct man page title. | jsing | 2015-04-02 | 1 | -2/+2 |
* | Document the fact that the tls_accept_*() functions can return | jsing | 2015-04-02 | 1 | -7/+11 |
* | Bump libtls minor due to API addition. | jsing | 2015-03-31 | 1 | -1/+1 |
* | Provide a tls_accept_fds() function, which allows a TLS connection to be | jsing | 2015-03-31 | 4 | -9/+39 |
* | Nuke the OPENSSL_MAX_TLS1_2_CIPHER_LENGTH hack - this has to be enabled at | jsing | 2015-03-31 | 4 | -44/+4 |
* | Store errors that occur during a tls_accept_socket() call on the context | jsing | 2015-03-31 | 4 | -11/+12 |
* | add initial AIX getentropy/arc4random files. Thanks to Michael Felt. | bcook | 2015-03-30 | 4 | -0/+1002 |
* | Factor out the init_buf initialisation code, rather than duplicating it | jsing | 2015-03-27 | 16 | -206/+112 |
* | BUF_MEM_free() has its own explicit NULL check. | jsing | 2015-03-27 | 2 | -18/+12 |
* | The code in socks.c writes multiple times in a row to a socket. If the | tobias | 2015-03-26 | 1 | -3/+6 |
* | Fix error message in case of write failure. | tobias | 2015-03-26 | 1 | -3/+3 |
* | Check for short writes in fdpass(). Clean up while at it. | tobias | 2015-03-26 | 1 | -4/+3 |
* | Sync camel case of "ProxyUseFdpass" with ssh_config(5). | tobias | 2015-03-26 | 1 | -3/+3 |
* | Make rcmdsh(3) not fail if it is passed a non resolvable hostname. | halex | 2015-03-23 | 3 | -20/+16 |
* | differentiate between a failed read, returning -1, and encountering | halex | 2015-03-22 | 1 | -2/+4 |