| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Update regress to match TLS versions change. | jsing | 2021-02-25 | 1 | -6/+6 |
| * | Only use TLS versions internally (rather than both TLS and DTLS versions). | jsing | 2021-02-25 | 9 | -128/+132 |
| * | Rename depth to num_untrusted so it identifies what it actually represents. | jsing | 2021-02-25 | 1 | -6/+6 |
| * | Avoid passing last and depth to x509_verify_cert_error() on ENOMEM. | jsing | 2021-02-25 | 1 | -3/+2 |
| * | - Make use of the fact that we know how the chunks are aligned, and | otto | 2021-02-25 | 2 | -49/+83 |
| * | Fix comment explaining last_untrusted. This should really be called | tb | 2021-02-24 | 1 | -2/+2 |
| * | Make the new validator check for EXFLAG_CRITICAL | tb | 2021-02-24 | 1 | -8/+15 |
| * | Make this test module aware so it passes with Go 1.16 | tb | 2021-02-23 | 2 | -0/+8 |
| * | Fix bizarre punctuation and capitalization in a comment. | tb | 2021-02-22 | 1 | -2/+2 |
| * | Simplify version checks in the TLSv1.3 client | tb | 2021-02-22 | 1 | -22/+10 |
| * | Factor out/change some of the legacy client version handling code. | jsing | 2021-02-22 | 3 | -12/+36 |
| * | ugly whitespace | tb | 2021-02-20 | 2 | -14/+14 |
| * | Rename f_err into fatal_err. | tb | 2021-02-20 | 7 | -183/+183 |
| * | Rename the truncated label into decode_err. This describes its purpose | tb | 2021-02-20 | 2 | -73/+73 |
| * | Revise regress to match change in SSL{_CTX,}_get_{min,max}_proto_version(). | jsing | 2021-02-20 | 1 | -34/+45 |
| * | Return a min/max version of zero if set to zero. | jsing | 2021-02-20 | 3 | -17/+41 |
| * | Add DTLSv1.2 methods. | jsing | 2021-02-20 | 2 | -3/+159 |
| * | Handle DTLS1_2_VERSION in various places. | jsing | 2021-02-20 | 3 | -6/+9 |
| * | Revise HelloVerifyRequest handling for DTLSv1.2. | jsing | 2021-02-20 | 2 | -4/+14 |
| * | Group HelloVerifyRequest decoding and add missing check for trailing data. | jsing | 2021-02-20 | 1 | -4/+5 |
| * | Add various public DTLS related defines. | jsing | 2021-02-20 | 2 | -2/+14 |
| * | Clean up/simplify dtls1_get_cipher(). | jsing | 2021-02-20 | 1 | -7/+8 |
| * | Pull in fix for EVP_CipherUpdate() overflow from OpenSSL. | tb | 2021-02-18 | 1 | -1/+23 |
| * | mark test-inlabel-wildcard-cert-no-CA-client as an expected failure | tb | 2021-02-18 | 1 | -1/+2 |
| * | Add x509 certificate validation regression tests | jan | 2021-02-16 | 3 | -2/+242 |
| * | Only print the certificate file once on verifification failure. | jsing | 2021-02-15 | 1 | -4/+2 |
| * | Some people still argue that rand(3) and random(3) have suitable deterministic | deraadt | 2021-02-12 | 2 | -4/+10 |
| * | Sync cert.pem with Mozilla NSS root CAs, except "GeoTrust Global CA", ok tb@ | sthen | 2021-02-12 | 1 | -659/+417 |
| * | A few more flag combo's to test | otto | 2021-02-12 | 1 | -2/+14 |
| * | KNF | tb | 2021-02-11 | 1 | -4/+7 |
| * | Walk over all results from getaddrinfo() instead of giving up after the | claudio | 2021-02-09 | 1 | -2/+1 |
| * | Update DTLS client hello due to ECC changes. | jsing | 2021-02-08 | 1 | -5/+8 |
| * | Remove bogus DTLS checks to disable ECC and OCSP. | jsing | 2021-02-08 | 2 | -10/+3 |
| * | Enforce read ahead with DTLS. | jsing | 2021-02-08 | 1 | -5/+5 |
| * | Use dtls1_retrieve_buffered_record() to load buffered application data. | jsing | 2021-02-08 | 1 | -11/+3 |
| * | Absorb ssl3_get_algorithm2() into ssl_get_handshake_evp_md(). | jsing | 2021-02-07 | 4 | -22/+19 |
| * | Correct handshake MAC/PRF for various TLSv1.2 cipher suites. | jsing | 2021-02-07 | 1 | -8/+8 |
| * | Factor out the legacy stack version checks. | jsing | 2021-02-07 | 4 | -28/+24 |
| * | Enable auto DHE and disable session tickets for some tests. | jsing | 2021-02-07 | 1 | -12/+13 |
| * | Only hexdump packets/messages on higher debug levels. | jsing | 2021-02-06 | 1 | -3/+4 |
| * | Test reads and writes between the client and server. | jsing | 2021-02-06 | 1 | -3/+49 |
| * | Fail early in legacy exporter if master secret is not available | tb | 2021-02-03 | 1 | -1/+6 |
| * | Add OID for draft-ietf-opsawg-finding-geofeeds | job | 2021-02-03 | 2 | -0/+2 |
| * | Add a bunch of RPKI OIDs | job | 2021-02-02 | 2 | -1/+26 |
| * | Use "EC/RSA key setup failure" to align error with others | tb | 2021-02-01 | 1 | -3/+3 |
| * | missing word in comment | tb | 2021-01-30 | 1 | -3/+3 |
| * | Remove direct assignment of aead_ctx. | jsing | 2021-01-28 | 1 | -13/+7 |
| * | Move AEAD handling into the new TLSv1.2 record layer. | jsing | 2021-01-28 | 4 | -134/+102 |
| * | wrap an overlong line | tb | 2021-01-27 | 1 | -2/+3 |
| * | Link SSL_get_finished.3 to build. | tb | 2021-01-27 | 1 | -1/+2 |
