| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2021-01-02 | Tweak previous: |   schwarze | 1 | -19/+34 | |
| * Do not abuse .Bl -tag for lists without bodies, use .Bl -item instead. * In tagged lists, put bodies into bodies, not into heads. * Add a few missing macros. * Drop some useless quoting. | |||||
| 2021-01-02 | Make list of DHE parameters more prominent |   kn | 1 | -6/+19 | |
| Follow the previous commit and complete the manual page for consistency; better readable and tags for free. OK tb | |||||
| 2020-12-30 | Make the list of supported protocols more prominent | kn | 1 | -5/+15 | |
| Manuals like httpd.conf(5) refer to this for valid protocol strings, but elements inlined into sentences are hard find to spot. Use a list as already done elsewhere in this manual. OK jmc on earlier version Feeback OK tb | |||||
| 2020-01-22 | Note in the man page that the default protocols list includes 1.3 |   beck | 1 | -4/+4 | |
| ok jsing@ | |||||
| 2020-01-20 | Add support for TLSv1.3 as a protocol to libtls. |   jsing | 1 | -6/+7 | |
| This makes tls_config_parse_protocols() recognise and handle "tlsv1.3". If TLSv1.3 is enabled libtls will also request libssl to enable it. ok beck@ tb@ | |||||
| 2019-11-02 | Document tls_conn_cipher_strength(). | jsing | 1 | -2/+14 | |
| ok schwarze@ | |||||
| 2019-07-09 | Group tls_{handshake,read,write,close}() return values documentation. | jsing | 1 | -21/+21 | |
| Move the documentation for tls_error() down so that both the special return values for tls_{handshake,read,write,close}() directly follow the standard return values for the same functions. Prompted by deraadt@. ok deraadt@ schwarze@ | |||||
| 2019-06-20 | tls_read() & tls_write() return 4 possible values: TLS_WANT_POLLOUT, |   deraadt | 1 | -4/+4 | |
| TLS_WANT_POLLIN, -1, or 0. After handling the first two, check for -1 rather than vaguely "< 0". ok jsing | |||||
| 2019-03-20 | fix examples (libtls uses its own error reporting mechanism) |   espie | 1 | -4/+4 | |
| okay tb@ | |||||
| 2018-12-14 | Delete a note taken during the rev. 1.1 man page splite | schwarze | 1 | -5/+2 | |
| that should have been deleted before commit. The cross reference is already present below SEE ALSO. Glitch noticed by jsing@. | |||||
| 2018-11-29 | expose the default cert file as a function, not a define. it's really |   tedu | 1 | -3/+9 | |
| an internal detail of the library, so the string should live inside it, not in the application code. ok jsing | |||||
| 2018-08-21 | typo in argument type, from Mario dot Andres dot Campos at gmail dot com | schwarze | 1 | -3/+3 | |
| 2018-07-24 | Use the same order in NAME, SYNOPSIS, DESCRIPTION, and RETURN VALUES to |   tb | 1 | -27/+28 | |
| improve readability and ease of maintenance. Positive feedback jmc Detailed suggestion & ok schwarze | |||||
| 2018-07-23 | Document tls_peer_ocsp_result() and use it in place of the non-existent | tb | 1 | -6/+12 | |
| tls_peer_ocsp_result_msg() in the documentation. input & ok jsing Reads fine to jmc and makes sense to schwarze | |||||
| 2018-07-09 | Move a detail on tls_connect(3) to its documentation and be a bit more | tb | 1 | -5/+7 | |
| explicit about the servername argument of tls_connect_servername(3). input & ok jsing, input & ok schwarze on earlier version | |||||
| 2018-07-09 | wording tweak for tls_init() from jsing | tb | 1 | -4/+4 | |
| ok jsing, schwarze | |||||
| 2018-07-08 | Simplify and shorten the description of tls_init(3), | schwarze | 1 | -4/+4 | |
| fixing an awkward wording noticed by tb@. OK tb@ | |||||
| 2018-05-26 | minor markup improvement: .Fa *cctx -> .Pf * Fa cctx | schwarze | 1 | -3/+3 | |
| 2018-05-26 | Quote .Fa arguments containing blanks. | schwarze | 1 | -4/+4 | |
| Diff from Jack Burton <jack at saosce dot com dot au>. | |||||
| 2018-03-19 | Automatically handle library initialisation for libtls. | jsing | 1 | -3/+4 | |
| Now that we have tls_init() under pthread_once(), automatically initialise libtls from the entry point functions (tls_config(), tls_client() and tls_server()) - this makes an explicit tls_init() call no longer a requirement. ok bcook@ beck@ inoguchi@ | |||||
| 2018-03-08 | un-revert tls_init pthread_once change, now that stub is added so that builds work | beck | 1 | -3/+3 | |
| 2018-03-07 | backout. diff was not tested comprehensively, resulting in a broken tree. | deraadt | 1 | -2/+2 | |
| 2018-03-07 | Make tls_init() concurrently callable using pthread_once(). | beck | 1 | -3/+3 | |
| ok jsing@ This brings pthread_once usage into libressl, which will need to get dealt with correctly in portable. This sets us up to autoinit libtls, and we will also be using pthread_once to deal with autoinit stuff in libssl and libcrypto | |||||
| 2018-02-10 | Be more specific about when the session file will be updated. | jsing | 1 | -2/+2 | |
| 2018-02-10 | Document functions for client-side TLS session support. | jsing | 2 | -9/+56 | |
| 2017-10-08 | hyphenate DER/PEM-encoded, for consistency; |   jmc | 2 | -9/+9 | |
| 2017-10-07 | Document tls_peer_cert_chain_pem(). | jsing | 1 | -2/+13 | |
| ok beck@ | |||||
| 2017-08-12 | Document tls_config_set_dheparams(). | jsing | 1 | -4/+13 | |
| 2017-08-12 | Document tls_reset(). | jsing | 1 | -2/+13 | |
| 2017-08-11 | new sentence, new line; | jmc | 1 | -3/+4 | |
| 2017-08-10 | Add a tls_config_set_ecdhecurves() function to libtls, which allows the | jsing | 1 | -6/+13 | |
| names of the elliptic curves that may be used during client and server key exchange to be specified. This deprecates tls_config_set_ecdhecurve(), which could only be used to specify a single supported curve. ok beck@ | |||||
| 2017-08-01 | correct function name; | jmc | 1 | -3/+3 | |
| from carlos cardenas | |||||
| 2017-07-06 | Document tls_config_set_crl_file() and tls_config_set_crl_mem(). | jsing | 1 | -3/+30 | |
| Based on a diff from Jack Burton <jack at saosce dot com dot au>, thanks! | |||||
| 2017-05-06 | Be explicit about when it is safe to call tls_config_free(). | jsing | 1 | -3/+8 | |
| Discussed with beck@ | |||||
| 2017-05-06 | Document tls_unload_file(). | jsing | 1 | -3/+14 | |
| 2017-04-27 | tls_free(3) and tls_config_free(3) accept NULL; | schwarze | 2 | -4/+14 | |
| patch from Matthew Martin <phy1729 at gmail dot com>, slightly tweaked by me | |||||
| 2017-03-02 | fix error in Dt; from robert klein | jmc | 1 | -3/+3 | |
| 2017-02-20 | spelling fix; | jmc | 1 | -2/+2 | |
| 2017-02-20 | document tls_config_error(3) RETURN VALUES, improve what is said | schwarze | 2 | -6/+59 | |
| about tls_error(3), and warn about some traps; OK jmc@ | |||||
| 2017-01-31 | tweak previous; | jmc | 2 | -12/+8 | |
| 2017-01-31 | Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may be | beck | 2 | -39/+91 | |
| added associated to a keypair used for SNI, and are usable for more than just the "main" certificate. Modify httpd to use this. Bump libtls minor. ok jsing@ | |||||
| 2017-01-29 | Marko Kreen contributed significantly to the ocsp stuff for libtls | beck | 1 | -2/+3 | |
| 2017-01-28 | add HISTORY and AUTHORS | schwarze | 12 | -24/+256 | |
| 2017-01-27 | Fix Copyright notices; ok beck@ jsing@ tedu@ | schwarze | 11 | -28/+43 | |
| 2017-01-26 | fix Dt; | jmc | 1 | -3/+3 | |
| 2017-01-25 | split the tls_init(3) that had grown fat to allow healthy future growth; | schwarze | 13 | -0/+1468 | |
| suggested by jsing@; "i would just chuck it in" jmc@ | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |