summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2017-10-08Reduce non-functional differences between dtls1_accept() andjsing1-34/+42
2017-10-08Reduce non-functional differences between dtls1_connect() andjsing1-32/+38
2017-10-08Fix some style/whitespace/indentation issues in ssl3_accept().jsing1-25/+14
2017-10-08Fix some style/whitespace/indentation issues in ssl3_connect().jsing1-10/+9
2017-10-08Convert ssl3_send_change_cipher_spec() to use CBB and make it handle DTLS,jsing6-57/+52
2017-09-25Annotate some API-side memory leaks for future resolution.jsing1-1/+3
2017-09-25Fix various issues in the OCSP extension parsing code:jsing1-20/+14
2017-09-25When building the OCSP extension, only add the length prefixed extensionsjsing1-6/+6
2017-08-30Move the full extension building into tlsext_{client,server}hello_build(),jsing2-47/+26
2017-08-30Bump libssl/libtls minors due to symbol (re)addition.jsing1-1/+1
2017-08-30Bring back the NPN related symbols.jsing3-3/+36
2017-08-29When OCSP status type is unknown, ignore the extension.doug1-1/+6
2017-08-29Actually parse the ALPN extension in a client hello, even if no ALPNjsing1-4/+4
2017-08-28ECDHE-RSA-DES-CBC3-SHA should not be marked HIGH.jsing1-2/+2
2017-08-28Bump lib{crypto,ssl,tls} majors due to symbol removals.jsing1-2/+2
2017-08-28Completely remove NPN remnants.jsing7-107/+9
2017-08-28Remove the original (pre-IETF) chacha20-poly1305 cipher suites.jsing4-73/+5
2017-08-27Rewrite SRTP extension using CBB/CBS and the new extension framework.doug5-274/+250
2017-08-26Rewrite ALPN extension using CBB/CBS and the new extension framework.doug4-143/+159
2017-08-23Work around bug in F5's handling of the supported elliptic curves extension.doug1-2/+16
2017-08-21import SSL_export_keying_material(3) from OpenSSLschwarze3-3/+132
2017-08-21merge the applicable parts of SSL_set_tlsext_host_name(3) documentation;schwarze1-4/+28
2017-08-21Selectively merge OpenSSL commit e091367d May 5 11:56:45 2017 +0100schwarze1-16/+15
2017-08-21Mention three functions related to protocol selection by the clientschwarze1-3/+48
2017-08-21Delete non-existent function SSL_flush_sessions();schwarze1-12/+4
2017-08-21Delete non-existent functions SSL_add_session() and SSL_remove_session() andschwarze1-18/+6
2017-08-20New manual page X509_check_private_key(3), using informationschwarze1-3/+4
2017-08-20remove a duplicate BIO_do_accept() call from an example;schwarze1-12/+6
2017-08-19fix .Xr ordering, found with mandoc -Tlintschwarze2-6/+6
2017-08-19Import SSL_CTX_set_min_proto_version(3) from OpenSSL, suggested by jsing@.schwarze5-7/+134
2017-08-19fix a typo and mention OpenBSD in HISTORY;schwarze1-3/+5
2017-08-13match function implementation with declaration, ok beck@, doug@bcook1-2/+2
2017-08-13Switch to -Werror with clang for libressl.doug1-2/+2
2017-08-13Make SSL{,_CTX}_set_alpn_protos() do atomic updates and handle NULL.doug1-10/+38
2017-08-13Remove support for the TLS padding extension.jsing2-39/+4
2017-08-13Nuke SSL_OP_CRYPTOPRO_TLSEXT_BUG.jsing2-27/+4
2017-08-12Rewrite the TLS status request extension to use the new TLS extension framework.beck3-177/+179
2017-08-12Convert TLS signature algorithms extension handling to the new framework.jsing6-63/+99
2017-08-12Rewrite session ticket TLS extension handling using CBB/CBS and the newdoug3-65/+145
2017-08-12Remove NPN support.jsing7-377/+28
2017-08-12Import the SSL_CTX_set1_groups(3) manual page from OpenSSL, deletingschwarze5-6/+173
2017-08-12New manual page SSL_set_tmp_ecdh(3) written from scratch.schwarze4-7/+112
2017-08-12Remove lots of outdated information found by jsing@.schwarze1-192/+14
2017-08-12Remove support for DSS/DSA, since we removed the cipher suites a whilejsing9-85/+16
2017-08-12Clear the child pointer in CBB_cleanup(), so that we have fewer pointersjsing1-1/+2
2017-08-11remove bogus ".POD" from .Dt name; noticed by jsing@schwarze1-3/+3
2017-08-11I don't think eay will ever fix this...jsing1-2/+2
2017-08-11style(9) in ssl_set_cert_masks().jsing1-7/+7
2017-08-11Rewrite EllipticCurves TLS extension handling using CBB/CBS and the newdoug4-76/+135
2017-08-11Convert ssl3_send_certificate_request() to CBB.jsing3-63/+73