summaryrefslogtreecommitdiffstats
path: root/lib/libssl/ssl_lib.c
AgeCommit message (Expand)AuthorFilesLines
2020-05-23Enable SSL_MODE_AUTO_RETRY by default.jsing1-1/+2
2020-05-23fix a confusingly wrapped linetb1-3/+3
2020-05-21Make ssl_set_cert_masks() more consistent and closer to readable.jsing1-44/+27
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.jsing1-16/+8
2020-05-10Use size_t for OCSP response length.jsing1-2/+2
2020-03-16Consistently spell 'unsigned' as 'unsigned int', as style(9) seemstb1-3/+3
2020-01-26When an SSL method is set, bump the max version back to that of thejsing1-1/+10
2020-01-23Correctly handle TLSv1.3 ciphers suites in ssl3_choose_cipher().jsing1-1/+4
2020-01-23Switch back to a function pointer for ssl_pending.jsing1-10/+2
2020-01-21Clear and free the tls13_ctx that hangs off an SSL *s fromtb1-1/+6
2019-11-17Bring back the ssl_shutdown internal method pointer.jsing1-2/+2
2019-11-04Allow ip addresses as argument to SSL_set1_host() but be careful to nototto1-2/+14
2019-05-15s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there isbcook1-19/+13
2019-03-25Strip out all of the pkey to sigalg and sigalg to pkey linkages.jsing1-10/+4
2019-03-25Defer sigalgs selection until the certificate is known.jsing1-13/+2
2019-03-25Remove ssl_get_server_send_cert() which is now unused.jsing1-12/+1
2019-01-22Add a re-implementation of SSL_get1_supported_ciphers().tb1-1/+35
2019-01-22Provide SSL_get_client_ciphers().tb1-1/+9
2019-01-21Move ssl_cipher_list_to_bytes() and ssl_bytes_to_cipher_list() totb1-115/+1
2019-01-21Use ssl_cipher_is_permitted() in ssl_cipher_list_to_bytes().tb1-9/+6
2019-01-21Teach ssl_version_string() about TLS1_3_VERSION.jsing1-1/+3
2018-11-19Revert previous - DTLSv1 uses MD5+SHA1 for RSA signature verification.jsing1-5/+2
2018-11-17Fix DTLS, because DTLS still remains a special flower, allows regress to passbeck1-2/+5
2018-11-14Fix wrong sizeof argument by using 'uint16_t *', with minor nit from tb@,mestre1-2/+2
2018-11-11Add SSL_set1_host(), a thin wrapper around X509_VERIFY_PARAM_set1_host().tb1-1/+7
2018-11-10Stop keeping track of sigalgs by guessing it from digest and pkey,beck1-7/+29
2018-11-08Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.jsing1-32/+9
2018-11-07Add TLSv1.3 cipher suites (with appropriate guards).jsing1-1/+6
2018-09-05Use the newer/more sensible names for EVP_MD_CTX_* functions.jsing1-3/+3
2018-09-05Correctly clear the current cipher state, when changing cipher state.jsing1-27/+25
2018-08-30Nuke ssl_pending/ssl_shutdown function pointers.jsing1-6/+6
2018-08-24Let SSL_copy_session_id() return an int for error checking.tb1-24/+25
2018-04-25OpenSSL started adding const to functions all over the place. Make alltb1-2/+2
2018-04-14make ENGINE_finish() succeed on NULL and simplify callers as intb1-3/+2
2018-04-07Remove function pointers for ssl_{read,write,peek}.jsing1-4/+4
2018-03-17Bring in compatibility for OpenSSL 1.1 style init functions.beck1-1/+6
2018-03-17Provide SSL_CTX_get_default_passwd_cb{,_userdata}()tb1-1/+13
2018-03-15Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_versionjca1-1/+24
2018-02-22Provide SSL_is_server().jsing1-1/+7
2018-02-22Provide SSL_up_ref().jsing1-1/+8
2018-02-22Provide SSL_CTX_get_ciphers().jsing1-1/+7
2018-02-17Provide SSL_get_client_random() and SSL_get_server_random()jsing1-2/+35
2018-02-17Provide SSL_CTX_get0_certificate()jsing1-1/+10
2018-02-14Provide SSL_CTX_up_ref().jsing1-1/+8
2018-02-14Provide SSL_CTX_get0_param() and SSL_get0_param().jsing1-1/+13
2017-10-11Convert ssl3_client_hello() to CBB.jsing1-27/+16
2017-10-10Make ssl_bytes_to_cipher_list() take a CBS, rather than a pointer andjsing1-24/+14
2017-08-30Bring back the NPN related symbols.jsing1-1/+25
2017-08-28Completely remove NPN remnants.jsing1-25/+1
2017-08-13Make SSL{,_CTX}_set_alpn_protos() do atomic updates and handle NULL.doug1-10/+38