summaryrefslogtreecommitdiffstats
path: root/lib/libtls/tls_client.c
AgeCommit message (Expand)AuthorFilesLines
2018-03-19Automatically handle library initialisation for libtls.jsing1-1/+4
2018-02-10Add support to libtls for client-side TLS session resumption.jsing1-1/+127
2017-08-10Add a tls_config_set_ecdhecurves() function to libtls, which allows thejsing1-1/+9
2017-05-07Ensure that a client context has been connected before attempting tojsing1-1/+8
2017-04-10Rework name verification code so that a match is indicated via an argument,jsing1-7/+7
2017-01-26Use a flag to track when we need to call SSL_shutdown(). This avoids anjsing1-1/+3
2017-01-12If tls_set_cbs() fails an error will already be specified, so do notjsing1-4/+2
2016-12-26Hook up a certificate verify callback so that we can set user friendlyjsing1-4/+2
2016-11-02Add OCSP client side support to libtls.beck1-1/+11
2016-09-04Maintain consistency with function naming.jsing1-4/+4
2016-09-04Add callback-based interface to libtls.bcook1-20/+56
2016-08-15Explicitly pass in an SSL_CTX * to the functions that operate on one,jsing1-5/+6
2016-04-28Factor our the keypair handling in libtls. This results in more readablejsing1-2/+2
2015-10-09fix a gotcha in the connect refactoring, that could result in droppingderaadt1-1/+5
2015-10-08If getaddrinfo() succeeds, then don't try look ups with other flags, evenguenther1-41/+39
2015-09-29Instead of declaring a union in multiple places, move it to tls_internal.h.jsing1-5/+2
2015-09-29clean some ugly intendation wartsderaadt1-2/+5
2015-09-12Ensure that we clear the libssl error stack before we make a function calljsing1-1/+3
2015-09-11add tls_peer functions for checking names and issuers of peer certificates.beck1-2/+2
2015-09-10Split tls_handshake() out from tls_accept/tls_connect. By doing this thejsing1-21/+37
2015-09-09Indent labels with a space so that diff -p is more friendly.jsing1-4/+4
2015-09-09Add client certificate support. Still needs a few tweaks but this willbeck1-26/+6
2015-09-09Only take ownership of a socket if we allocated it within libtls. If we arejsing1-3/+3
2015-09-08Remove the default HTTPS port from tls_connect() - this is a TLS library,jsing1-3/+5
2015-08-27Improve libtls error messages.jsing1-17/+17
2015-08-27Split the persistent/configuration flags from temporary state flags andjsing1-7/+7
2015-08-22SSL_set_app_data is a macro for SSL_set_ex_data(), which is a wrapperjsing1-3/+5
2015-08-22Store a reference to the libtls context in the SSL client connection appjsing1-1/+3
2015-03-31Store errors that occur during a tls_accept_socket() call on the contextjsing1-2/+2
2015-03-21free the server certificate in tls_connect_fds(); fixes a memory leak withsthen1-1/+2
2015-02-11Provide a tls_connect_servername() function that has the same behaviourjsing1-3/+12
2015-02-11Be consistent with naming - only use "host" and "hostname" when referringjsing1-15/+15
2015-02-09When parsing the host in tls_connect(), first check if it is a numericreyk1-29/+49
2015-02-08Use the AI_ADDRCONFIG flag in tls_connect(). This tells the resolverreyk1-1/+2
2015-02-07Convert tls_connect_fds() and tls_accept_socket() to the new OpenSSL errorjsing1-12/+6
2015-01-30Make the TLS connect and accept error messages consistent.bluhm1-2/+2
2015-01-22Allow to to load the CA chain directly from memory instead ofreyk1-2/+15
2015-01-13For non-blocking sockets tls_connect_fds() could fail with EAGAIN.bluhm1-5/+19
2015-01-02Rename the tls_connect_socket() parameter 'socket' to 's' to avoidbluhm1-4/+4
2014-12-27include netinet/in.h to define struct in6_addr.bcook1-1/+2
2014-12-07Allow specific libtls hostname validation errors to propagate.bcook1-4/+5
2014-12-07revert previous change for now, adjusting based on comments from jsing@bcook1-6/+4
2014-12-07Allow specific libtls hostname validation errors to propagate.bcook1-4/+6
2014-11-02Add a tls_connect_fds() function that allows a secure connection to bejsing1-3/+16
2014-10-31Rename libressl to libtls to avoid confusion and to make it easier tojsing1-0/+212