| Commit message (Expand) | Author | Age | Files | Lines |
* | Add MLINK for tls_config_set_ca_mem() | reyk | 2015-01-22 | 1 | -1/+2 |
* | Allow to to load the CA chain directly from memory instead of | reyk | 2015-01-22 | 6 | -8/+39 |
* | Support CA verification in chroot'ed processes without direct file | reyk | 2015-01-22 | 6 | -6/+20 |
* | Add X509_STORE_load_mem() to load certificates from a memory buffer | reyk | 2015-01-22 | 9 | -8/+338 |
* | Make it obvious which openssl test complained and whether it was expected. | doug | 2015-01-22 | 1 | -2/+5 |
* | Assume that the size of a pointer will not change at runtime. | bcook | 2015-01-22 | 2 | -56/+30 |
* | Fix DTLS memory leak (CVE-2015-0206).libressl-v2.1.3 | doug | 2015-01-21 | 2 | -18/+46 |
* | Missing $OpenBSD$'s. | krw | 2015-01-20 | 5 | -0/+5 |
* | Add arc4random/getentropy shims for NetBSD. | bcook | 2015-01-19 | 4 | -0/+300 |
* | Improve wording in alloca. | tedu | 2015-01-17 | 1 | -7/+5 |
* | Use ">", not ">=" when comparing length to HOST_NAME_MAX since | millert | 2015-01-16 | 1 | -3/+3 |
* | Replace HOST_NAME_MAX+1-1 with HOST_NAME_MAX. OK deraad@ | millert | 2015-01-16 | 2 | -8/+8 |
* | Replace check for ">= HOST_NAME_MAX+1" with "> HOST_NAME_MAX". | millert | 2015-01-16 | 1 | -1/+1 |
* | Move to the <limits.h> universe. | deraadt | 2015-01-16 | 23 | -57/+40 |
* | The SSL/TLS session Id context is limited to 32 bytes. Instead of | reyk | 2015-01-16 | 1 | -1/+13 |
* | Delete the MANLINT variable and the related SUFFIXES rules because | schwarze | 2015-01-16 | 2 | -4/+4 |
* | remove unused variable | chl | 2015-01-15 | 1 | -2/+1 |
* | back in september I did the large abstraction refactoring to allow these | deraadt | 2015-01-15 | 14 | -14/+28 |
* | Make strlcpy/strlcat slightly easier to read. | millert | 2015-01-15 | 4 | -86/+82 |
* | For non-blocking sockets tls_connect_fds() could fail with EAGAIN. | bluhm | 2015-01-13 | 2 | -7/+22 |
* | Document the openssl s_client -proxy feature. | bluhm | 2015-01-13 | 1 | -2/+14 |
* | Add the possibility to use the openssl s_client tool with an http | bluhm | 2015-01-13 | 1 | -4/+24 |
* | Implement more thorough error checks: | lteo | 2015-01-13 | 1 | -12/+38 |
* | rename blocks to words. bcrypt "blocks" are unrelated to blowfish blocks, | tedu | 2015-01-12 | 1 | -9/+9 |
* | Fix a memory leak in bss_dgram. | doug | 2015-01-12 | 2 | -6/+26 |
* | Convert spkac.c to the new option handling code. | doug | 2015-01-08 | 1 | -100/+137 |
* | Convert pkcs8.c to the new option handling code. | doug | 2015-01-08 | 1 | -157/+220 |
* | Convert asn1pars.c to the new option handling. | doug | 2015-01-08 | 1 | -137/+206 |
* | missing , found by Dongsheng Song | deraadt | 2015-01-08 | 1 | -3/+3 |
* | Avoid a double-free in an error path. | doug | 2015-01-08 | 2 | -2/+4 |
* | stupid me. need errno.h | tedu | 2015-01-07 | 1 | -1/+2 |
* | set errno = EINVAL for invalid salts and hashes in most functions. | tedu | 2015-01-07 | 1 | -12/+20 |
* | mix in more virtual memory and process information | bcook | 2015-01-07 | 2 | -4/+8 |
* | add initial HP-UX getentropy/arc4random support. | bcook | 2015-01-06 | 4 | -0/+992 |
* | rename kern enter/exit macros to malloc enter/leave to better reflect | tedu | 2015-01-05 | 1 | -7/+7 |
* | Convert openssl(1) passwd to new option handling. | jsing | 2015-01-05 | 1 | -119/+151 |
* | convert clock() to clock_gettime() for improved precision (and accuracy?) | tedu | 2015-01-05 | 1 | -7/+9 |
* | Zap a reference to .rnd, which is likely the last RANDFILE remnant on | lteo | 2015-01-05 | 1 | -3/+2 |
* | Fix incorrect OPENSSL_assert() usage. | doug | 2015-01-03 | 2 | -48/+106 |
* | Check the return values of several reallocarray() calls. While here, | lteo | 2015-01-03 | 3 | -3/+17 |
* | Rename the tls_connect_socket() parameter 'socket' to 's' to avoid | bluhm | 2015-01-02 | 1 | -4/+4 |
* | Remove ifdef statements for TIMES and USE_TOD; they don't do anything, | lteo | 2015-01-02 | 1 | -5/+1 |
* | Provide option types for binary AND, binary OR and silently discarding an | jsing | 2015-01-01 | 2 | -2/+13 |
* | Convert the openssl(1) enc command to the new option parsing and usage. | jsing | 2015-01-01 | 1 | -250/+382 |
* | Revert previous; tls_accept_socket() was intentionally undocumented | schwarze | 2015-01-01 | 1 | -7/+1 |
* | minimally document tls_accept_socket(); | schwarze | 2015-01-01 | 1 | -2/+8 |
* | copy bcrypt autotune from encrypt(1) and expose via crypt_newhash | tedu | 2014-12-30 | 2 | -5/+43 |
* | don't leak timing info about padding errors by generating a fake key | tedu | 2014-12-29 | 2 | -10/+20 |
* | Fix subtle typo. | jsing | 2014-12-28 | 1 | -2/+2 |
* | Add regress tests for default option handling. | jsing | 2014-12-28 | 1 | -1/+48 |