| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Add SERVER_HELLO_RETRY state | tb | 2019-04-05 | 1 | -1/+7 |
* | By design, our state machine is a DAG contrary to the state machine in | tb | 2019-04-05 | 4 | -7/+29 |
* | Import SSL_CTX_add1_chain_cert(3) from OpenSSL branch 1.1.1, which is still | schwarze | 2019-04-05 | 5 | -17/+264 |
* | Zap two dead #defines that were unused since jsing deleted the | tb | 2019-04-05 | 1 | -5/+1 |
* | I forgot to mark some targets as .PHONY | tb | 2019-04-04 | 1 | -1/+5 |
* | Implement legacy fallback for the TLS 1.3 client. | jsing | 2019-04-04 | 3 | -8/+87 |
* | Clean up the cipher/digest table mess. | jsing | 2019-04-04 | 3 | -179/+45 |
* | Use correct define. | jsing | 2019-04-04 | 1 | -2/+2 |
* | Only assign destlen when src is non-NULL. | jsing | 2019-04-04 | 1 | -3/+4 |
* | Switch to pthread_mutex_init(). | jsing | 2019-04-04 | 1 | -3/+5 |
* | Bump libssl/libtls minors due to symbol addition. | jsing | 2019-04-04 | 2 | -2/+2 |
* | Provide SSL chain/cert chain APIs. | jsing | 2019-04-04 | 3 | -2/+161 |
* | This case also needs to be fatal. | jsing | 2019-04-04 | 1 | -1/+2 |
* | update root CAs in cert.pem in sync with Mozilla | sthen | 2019-04-04 | 1 | -287/+440 |
* | Avoid some out of bound accesses in aesni_cbc_hmac_sha1_cipher(). | tb | 2019-04-03 | 1 | -7/+13 |
* | fix broken comment | sthen | 2019-04-02 | 1 | -1/+1 |
* | Sort. | jsing | 2019-04-01 | 1 | -3/+3 |
* | Make the openssl(1) enc -iter flag actually work. | jsing | 2019-04-01 | 1 | -2/+2 |
* | Add a mutex to guard reference counting for tls_config. | jsing | 2019-04-01 | 3 | -4/+16 |
* | Implement a print function for BIGNUM_it. | jsing | 2019-04-01 | 1 | -2/+18 |
* | Correct the return values from long_print. | jsing | 2019-04-01 | 1 | -2/+5 |
* | Require all ASN1_PRIMITIVE_FUNCS functions to be provided. | jsing | 2019-04-01 | 5 | -26/+42 |
* | mark ERR_R_INTERNAL_ERROR instead of assert or _exit, sigh | deraadt | 2019-04-01 | 1 | -3/+3 |
* | Correct subtle bug in sigalgs, only care about curve_nid if we are | beck | 2019-04-01 | 1 | -4/+4 |
* | Clean up and simplify the client verify code: | jsing | 2019-03-31 | 1 | -50/+49 |
* | Wrap long lines and apply some style(9). | jsing | 2019-03-31 | 1 | -7/+10 |
* | Use named field initialisers. | jsing | 2019-03-31 | 2 | -16/+18 |
* | Use correct capitalization of EC_GROUP_get_curve_GF{2m,p}(3). | tb | 2019-03-29 | 1 | -4/+4 |
* | Enable GOST cipher selection test after libssl has been fixed. | bluhm | 2019-03-28 | 1 | -6/+1 |
* | Cast nonce bytes to avoid undefined behaviour when left shifting. | jsing | 2019-03-27 | 1 | -3/+3 |
* | remove duplicate set key file call. from alf. | tedu | 2019-03-27 | 1 | -3/+1 |
* | bump to 2.9.1 | bcook | 2019-03-27 | 1 | -3/+3 |
* | Use limits.h instead of sys/limits.h for portability. | jsing | 2019-03-26 | 1 | -3/+2 |
* | Update regress following sigalgs changes. | jsing | 2019-03-25 | 1 | -17/+1 |
* | Strip out all of the pkey to sigalg and sigalg to pkey linkages. | jsing | 2019-03-25 | 5 | -59/+8 |
* | tls1_process_sigalgs() is no longer needed. | jsing | 2019-03-25 | 2 | -57/+2 |
* | Defer sigalgs selection until the certificate is known. | jsing | 2019-03-25 | 9 | -48/+124 |
* | Rework ssl_ctx_use_certificate_chain_bio() to use the CERT_PKEY chain. | jsing | 2019-03-25 | 1 | -46/+26 |
* | Remove ssl_get_server_send_cert() which is now unused. | jsing | 2019-03-25 | 2 | -14/+2 |
* | Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains. | jsing | 2019-03-25 | 4 | -40/+36 |
* | Add a chain member to CERT_PKEY and provide functions for manipulating it. | jsing | 2019-03-25 | 2 | -3/+74 |
* | In the incredibly unbelievable circumstance where _rs_init() fails to | deraadt | 2019-03-24 | 1 | -2/+2 |
* | If ssl_cipher_apply_rule() is given a specific cipher suite, match on it. | jsing | 2019-03-24 | 1 | -3/+4 |
* | Don't allow asn1_parse2 to recurse arbitrarily deep. Constrain to a max | beck | 2019-03-24 | 1 | -1/+5 |
* | Cast nonce bytes to avoid undefined behaviour when left shifting. | jsing | 2019-03-24 | 1 | -3/+3 |
* | do not call assert(), which has a tendency to leave traces of stuff in | deraadt | 2019-03-24 | 1 | -2/+3 |
* | Add range checks to varios ASN1_INTEGER functions to ensure the | beck | 2019-03-23 | 3 | -6/+62 |
* | Fix typo in usage and comment. | bluhm | 2019-03-21 | 3 | -6/+6 |
* | import EVP_camellia_128_cbc(3) from OpenSSL 1.1.1, | schwarze | 2019-03-21 | 4 | -3/+156 |
* | space before punct; | jmc | 2019-03-21 | 1 | -3/+3 |