wireguard-openbsd/lib/libssl, branch master WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl?h=master 2021-03-31T18:03:13Z Update for DTLSv1.2 support. 2021-03-31T18:03:13Z tb tb@openbsd.org 2021-03-31T18:03:13Z urn:sha1:1b7b74baa76fa46d160309cb8a4ec348c220d824 Bump minors after symbol addition 2021-03-31T17:02:18Z tb tb@openbsd.org 2021-03-31T17:02:18Z urn:sha1:5625f5cae8f63347961b06e08016bbddc47693be Expose various DTLSv1.2 specific functions and defines 2021-03-31T16:59:32Z tb tb@openbsd.org 2021-03-31T16:59:32Z urn:sha1:e6d88397616a72165a937474dab56c25efd3d032 ok bcook inoguchi jsing Document SSL_set_hostflags(3) and SSL_get0_peername(3) 2021-03-31T16:56:46Z tb tb@openbsd.org 2021-03-31T16:56:46Z urn:sha1:e7b81046d385288c2230046b05f28f12981156d6 ok bcook inoguchi jsing Expose SSL_set_hostflags(3) and SSL_get0_peername(3) 2021-03-31T16:55:04Z tb tb@openbsd.org 2021-03-31T16:55:04Z urn:sha1:625eacf7434e04121b655b1ab165795f27faff54 ok bcook inoguchi jsing Document SSL_use_certificate_chain_file(3) 2021-03-31T16:53:30Z tb tb@openbsd.org 2021-03-31T16:53:30Z urn:sha1:9482f494ebb99425dbd7450c1fe02857c2750256 ok bcook inoguchi jsing Expose SSL_use_certificate_chain_file(3) 2021-03-31T16:52:15Z tb tb@openbsd.org 2021-03-31T16:52:15Z urn:sha1:05d6e4b62f48eacbfc3fb91b1e10c0056a1655e0 ok bcook inoguchi jsing whitespace nits 2021-03-29T18:24:04Z tb tb@openbsd.org 2021-03-29T18:24:04Z urn:sha1:73c18e467fc2304b3734b98382e0575eeea85f81 Remove pointless assignment in SSL_get0_alpn_selected(). 2021-03-29T16:57:38Z jsing jsing@openbsd.org 2021-03-29T16:57:38Z urn:sha1:259b748b8e3ddf6ba6d551fedd171c9c98c0d8bf ok tb@ Avoid transcript initialisation when sending a TLS HelloRequest. 2021-03-29T16:56:20Z jsing jsing@openbsd.org 2021-03-29T16:56:20Z urn:sha1:5c4127adeea384f7e8f31247856a5d2af9902964 When server side renegotiation is triggered, the TLSv1.2 state machine sends a HelloRequest before going to ST_SW_FLUSH and ST_OK. In this case we do not need the transcript and currently hit the sanity check in ST_OK that ensures the transcript has been freed, breaking server initiated renegotiation. We do however need the transcript in the DTLS case. ok tb@