| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Group seal record functions together. | jsing | 2020-09-16 | 1 | -11/+11 |
| * | Add cipher set tests with empty SSL_set_ciphersuites(). | jsing | 2020-09-16 | 1 | -0/+22 |
| * | Correct cipher_set_test() when run on a machine without AES acceleration. | jsing | 2020-09-16 | 1 | -1/+19 |
| * | Make cipher_set_test() log failures and continue, rather than aborting. | jsing | 2020-09-16 | 1 | -11/+3 |
| * | noop NAME_CONSTRAINTS_check stub | inoguchi | 2020-09-16 | 1 | -4/+5 |
| * | Let SSL_CTX_get_ciphers(NULL) return NULL rather than crash | schwarze | 2020-09-16 | 2 | -6/+7 |
| * | Mark SSL_get_cipher_list(3) as deprecated; it is badly misnamed, and there | schwarze | 2020-09-16 | 1 | -4/+6 |
| * | Avoid memset() before memcpy() for CBB_add_bytes(). | jsing | 2020-09-16 | 1 | -2/+2 |
| * | Make check in x509_verify_ctx_set_max_signatures() consistent with others. | jsing | 2020-09-16 | 1 | -4/+2 |
| * | Dedup code in x509_verify_ctx_new_from_xsc(). | jsing | 2020-09-16 | 1 | -14/+7 |
| * | The undocumented public function SSL_set_SSL_CTX(3) changes the | schwarze | 2020-09-15 | 1 | -4/+4 |
| * | Split the tls12_record_layer_write_mac() function. | jsing | 2020-09-15 | 1 | -10/+19 |
| * | Do not destroy an existing cipher list when ssl_parse_ciphersuites() | schwarze | 2020-09-15 | 1 | -4/+2 |
| * | Correct a failure case in tls12_record_layer_seal_record_protected() | jsing | 2020-09-15 | 1 | -2/+2 |
| * | Create the missing RETURN VALUES section and move the appropriate | schwarze | 2020-09-15 | 1 | -57/+103 |
| * | set error_depth and current_cert to make more legacy callbacks that don't check | beck | 2020-09-15 | 1 | -1/+3 |
| * | Deduplicate the time validation code between the legacy and new | beck | 2020-09-15 | 3 | -27/+8 |
| * | ifdef out code that is no longer used in here. once we are certain | beck | 2020-09-15 | 1 | -2/+5 |
| * | Cleanup/simplify SSL_set_ssl_method(). | jsing | 2020-09-15 | 1 | -18/+18 |
| * | Mop up the get_ssl_method function pointer. | jsing | 2020-09-15 | 2 | -50/+2 |
| * | Test botan TLS client with libressl, openssl, openssl11 server. | bluhm | 2020-09-15 | 4 | -6/+305 |
| * | Move state initialisation from SSL_clear() to ssl3_clear(). | jsing | 2020-09-14 | 2 | -4/+4 |
| * | Cleanup and simplify SSL_set_session(). | jsing | 2020-09-14 | 1 | -36/+22 |
| * | Avoid NULL deref SSL_{,CTX_}set_ciphersuites | tb | 2020-09-14 | 1 | -2/+2 |
| * | simplify RETURN VALUES for x509_verify(3) after beck@ made the rules | schwarze | 2020-09-14 | 1 | -7/+3 |
| * | Add initial man page for new x509_verify chain validator | beck | 2020-09-14 | 1 | -0/+225 |
| * | Set error if we are given an NULL ctx in x509_verify, and set error | beck | 2020-09-14 | 1 | -5/+3 |
| * | nuke a stray space | tb | 2020-09-14 | 1 | -2/+2 |
| * | Fix potential leak when tmpext fails to be added to | beck | 2020-09-14 | 1 | -2/+6 |
| * | Change the known output to be the expected output, so that we | beck | 2020-09-14 | 1 | -1421/+1421 |
| * | Use a fixed validation time in these tests so we never | beck | 2020-09-14 | 1 | -2/+4 |
| * | remove unneeded variable "type". | beck | 2020-09-14 | 1 | -6/+5 |
| * | Don't leak names on success | beck | 2020-09-14 | 1 | -1/+2 |
| * | remove unneded variable "time1" | beck | 2020-09-14 | 1 | -6/+6 |
| * | remove unneded variable "time" | beck | 2020-09-14 | 1 | -3/+2 |
| * | fix bug introduced on review where refactor made it possible to | beck | 2020-09-14 | 1 | -2/+2 |
| * | re-enable new x509 chain verifier as the default | beck | 2020-09-14 | 1 | -3/+1 |
| * | Correctly fix double free introduced on review. | beck | 2020-09-14 | 2 | -3/+3 |
| * | Fix double free - review moved the pop_free of roots to x509_verify_ctx_free | beck | 2020-09-14 | 1 | -2/+1 |
| * | revert previous, need to fix a problem | beck | 2020-09-14 | 1 | -1/+3 |
| * | Enable the use of the new x509 chain validator by default. | beck | 2020-09-14 | 1 | -3/+1 |
| * | Connect a client to a server. Both can be current libressl, or | bluhm | 2020-09-14 | 5 | -10/+193 |
| * | Add regress for SSL_{CTX_,}set_ciphersuites(). | jsing | 2020-09-13 | 2 | -7/+318 |
| * | Implement SSL_{CTX_,}set_ciphersuites(). | jsing | 2020-09-13 | 5 | -13/+211 |
| * | Add new x509 certificate chain validator in x509_verify.c | beck | 2020-09-13 | 11 | -68/+1281 |
| * | Improve handling of BIO_read()/BIO_write() failures in the TLSv1.3 stack. | jsing | 2020-09-13 | 1 | -1/+9 |
| * | Use the correct type for tls1_set_ec_id() | tb | 2020-09-12 | 1 | -3/+3 |
| * | Simplify tls1_set_ec_id() a bit | tb | 2020-09-12 | 1 | -24/+19 |
| * | Unindent a bit of code that performs a few too many checks to | tb | 2020-09-12 | 1 | -10/+8 |
| * | If CPU does not support AES-NI, LibreSSL TLS 1.3 client prefers | bluhm | 2020-09-12 | 1 | -9/+18 |
