summaryrefslogtreecommitdiffstats
path: root/lib/libssl/ssl_cert.c
AgeCommit message (Expand)AuthorFilesLines
2020-06-05Handle GOST in ssl_cert_dup().jsing1-1/+5
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.jsing1-9/+4
2019-05-15s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there isbcook1-3/+2
2019-04-13Avoid leak in SSL_dup_CA_list()tb1-8/+14
2019-03-25Strip out all of the pkey to sigalg and sigalg to pkey linkages.jsing1-23/+1
2019-03-25Add a chain member to CERT_PKEY and provide functions for manipulating it.jsing1-2/+66
2018-11-19Revert previous - the default sigalg for RSA key exchange is {sha1,rsa}.jsing1-4/+4
2018-11-16Unbreak legacy ciphers for prior to 1.1 by setting having a legacybeck1-4/+4
2018-11-10Stop keeping track of sigalgs by guessing it from digest and pkey,beck1-9/+13
2018-11-08Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.jsing1-29/+1
2018-11-05Mop up ecdh_tmp, since it is no longer used.jsing1-11/+1
2018-04-25OpenSSL started adding const to functions all over the place. Make alltb1-2/+2
2017-08-12Remove support for DSS/DSA, since we removed the cipher suites a whilejsing1-7/+1
2017-08-10Clean up the EC key/curve configuration handling.jsing1-3/+1
2017-02-07Change SSLerror() back to taking two args, with the first one being an SSL *.beck1-16/+16
2017-01-29Send the function codes from the error functions to the bit bucket,beck1-2/+2
2017-01-26Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglybeck1-5/+3
2017-01-26Send the error function codes to rot in the depths of hell where they belongbeck1-16/+16
2017-01-24sk_free() checks for NULL so do not bother doing it from the callers.jsing1-3/+3
2017-01-24sk_pop_free() checks for NULL so do not bother doing it from the callers.jsing1-9/+4
2017-01-23Move a large part of ssl_st into internal, so we can see what squeals.beck1-6/+6
2017-01-23Move most of the fields in SSL_CTX to internal - the ones that remain arejsing1-5/+5
2017-01-23move the callbacks from ssl_st to internalbeck1-3/+3
2017-01-23Move callback function pointers and argument pointers from SSL_CTX tojsing1-3/+4
2017-01-22Move most of the SSL3_STATE fields to internal - the ones that remain arejsing1-2/+2
2016-12-21Add support for ECDHE with X25519.jsing1-1/+2
2016-03-11X509_free(3) is NULL-safe, so remove NULL checks before its calls.mmcc1-13/+7
2015-09-11Nuke ssl_set_peer_cert_type().jsing1-8/+1
2015-04-06readdir() is thread-safe when DIR handles aren't shared, so delete the lock.guenther1-3/+1
2014-12-14Remove trailing whitespace.jsing1-9/+9
2014-12-10Remove support for GOST R 34.10-94 signature authentication, along withjsing1-2/+1
2014-12-06Remove client handling of RSA in ServerKeyExchange messages, along withjsing1-2/+1
2014-11-18Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov.miod1-1/+5
2014-11-16Sort and group includes.jsing1-6/+7
2014-10-31Add support for automatic DH ephemeral keys.jsing1-1/+2
2014-10-31Remove support for ephemeral/temporary RSA private keys.jsing1-9/+1
2014-10-03Add support for automatic ephemeral EC keys.jsing1-1/+2
2014-07-10KNF comments, reflowing and moving out of the middle of argument lists inguenther1-16/+25
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportjsing1-3/+1
2014-06-21Fix memory leak in error path.logan1-2/+2
2014-06-12tags as requested by miod and teduderaadt1-1/+1
2014-06-08No, we will not be building with OPENSSL_NO_X509_VERIFY. Nuke it andjsing1-14/+8
2014-06-07BIO_free has an implicit NULL check, so do not bother checking for NULLjsing1-4/+2
2014-06-07The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all havejsing1-22/+12
2014-06-07More KNF.jsing1-19/+22
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingtedu1-14/+0
2014-05-29Any sane platform has stdio. Stop pretending we will ever use a platformbeck1-2/+0
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.tedu1-22/+0
2014-05-26We don't really to keep history in constructs such as:miod1-6/+1
2014-05-22There are two actual uses of e_os2.h in libssl - an OPENSSL_GLOBAL (anjsing1-1/+0