wireguard-openbsd/lib/libtls/tls.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libtls/tls.c?h=jd%2Fqueueboosts 2020-05-24T15:12:54Z Clear SSL_MODE_AUTO_RETRY in libtls, since we handle WANT_POLLIN correctly. 2020-05-24T15:12:54Z jsing jsing@openbsd.org 2020-05-24T15:12:54Z urn:sha1:3c640480539951042108a0301e1d64aba8396de3 Add support for TLSv1.3 as a protocol to libtls. 2020-01-20T08:39:21Z jsing jsing@openbsd.org 2020-01-20T08:39:21Z urn:sha1:4c47943547690ae663117419af1d1408754483fd This makes tls_config_parse_protocols() recognise and handle "tlsv1.3". If TLSv1.3 is enabled libtls will also request libssl to enable it. ok beck@ tb@ Add a mutex to guard reference counting for tls_config. 2019-04-01T15:58:02Z jsing jsing@openbsd.org 2019-04-01T15:58:02Z urn:sha1:bebb943a196415fbcce9ded465749b2710c53245 This makes libtls more friendly for multithreaded use - otherwise we can end up with incorrect refcounts and end up freeing when we should not be (or not freeing when we should be). ok beck@ expose the default cert file as a function, not a define. it's really 2018-11-29T14:24:23Z tedu tedu@openbsd.org 2018-11-29T14:24:23Z urn:sha1:f6b75673f6c960a9743bfd16c1e52dd100265c68 an internal detail of the library, so the string should live inside it, not in the application code. ok jsing Define TLS_CA_CERT_FILE rather than having every application create their 2018-11-06T20:34:54Z jsing jsing@openbsd.org 2018-11-06T20:34:54Z urn:sha1:44f35d7b2039ec18149e46a4da8db4c146219c2f own define for /etc/ssl/cert.pem. ok beck@ bluhm@ tb@ Switch to OPENSSL_init_ssl() and prevent an openssl configuration file from 2018-04-07T16:30:59Z jsing jsing@openbsd.org 2018-04-07T16:30:59Z urn:sha1:c650228d5d914b0377b2a477213f1ee1978a9679 being loaded behind our back, at a later point. ok beck@ Automatically handle library initialisation for libtls. 2018-03-19T16:34:47Z jsing jsing@openbsd.org 2018-03-19T16:34:47Z urn:sha1:b9573a74af9f34d4eb2bda625e3f663704431e4b Now that we have tls_init() under pthread_once(), automatically initialise libtls from the entry point functions (tls_config(), tls_client() and tls_server()) - this makes an explicit tls_init() call no longer a requirement. ok bcook@ beck@ inoguchi@ un-revert tls_init pthread_once change, now that stub is added so that builds work 2018-03-08T16:12:00Z beck beck@openbsd.org 2018-03-08T16:12:00Z urn:sha1:c029eb3257fdc5cea15943e95c8fea7001b632d4 backout. diff was not tested comprehensively, resulting in a broken tree. 2018-03-07T19:07:13Z deraadt deraadt@openbsd.org 2018-03-07T19:07:13Z urn:sha1:d6bdacfdb0b9edd553f9810fcc2c1f3c8e0e5e8d Make tls_init() concurrently callable using pthread_once(). 2018-03-07T17:17:47Z beck beck@openbsd.org 2018-03-07T17:17:47Z urn:sha1:62f07b25bdd968b3fd75b30b4d3f23fe17e878b2 ok jsing@ This brings pthread_once usage into libressl, which will need to get dealt with correctly in portable. This sets us up to autoinit libtls, and we will also be using pthread_once to deal with autoinit stuff in libssl and libcrypto