| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2017-09-20 | Slightly restructure tls_ocsp_verify_cb() to make it more like libtls code. |   jsing | 1 | -6/+7 |
| 2017-09-20 | Provide a useful error if there are no OCSP URLs in the peer certificate. | jsing | 1 | -1/+4 |
| 2017-09-20 | Fix indentation. | jsing | 1 | -1/+1 |
| 2017-08-30 | Bump libssl/libtls minors due to symbol (re)addition. | jsing | 1 | -1/+1 |
| 2017-08-28 | Bump lib{crypto,ssl,tls} majors due to symbol removals. | jsing | 1 | -2/+2 |
| 2017-08-28 | Fix unchecked return nit |   beck | 1 | -2/+5 |
| 2017-08-27 | Make the symbol for ASN1_time_tm_clamp_notafter visible so libtls | beck | 1 | -1/+5 |
| 2017-08-13 | Switch to -Werror with clang for libressl. |   doug | 1 | -2/+2 |
| 2017-08-12 | Document tls_config_set_dheparams(). | jsing | 1 | -4/+13 |
| 2017-08-12 | Document tls_reset(). | jsing | 1 | -2/+13 |
| 2017-08-11 | new sentence, new line; |   jmc | 1 | -3/+4 |
| 2017-08-11 | Bump minor due to symbol addition. | jsing | 1 | -1/+1 |
| 2017-08-10 | Add a tls_config_set_ecdhecurves() function to libtls, which allows the | jsing | 7 | -34/+108 |
| 2017-08-09 | Don't use tls_cert_hash for the hashing used by the engine offloading magic |   claudio | 3 | -11/+24 |
| 2017-08-01 | correct function name; | jmc | 1 | -3/+3 |
| 2017-07-06 | Document tls_config_set_crl_file() and tls_config_set_crl_mem(). | jsing | 1 | -3/+30 |
| 2017-07-06 | Bump minor due to symbol addition. | jsing | 1 | -1/+1 |
| 2017-07-06 | Add support for providing CRLs to libtls - once a CRL is provided we | jsing | 5 | -4/+67 |
| 2017-07-05 | RFC 6066 states that IP literals are not permitted in "HostName" for a | jsing | 1 | -3/+9 |
| 2017-06-22 | Use the tls_password_cb() callback with all PEM_read_bio_*() calls, so that | jsing | 4 | -11/+14 |
| 2017-06-22 | Fix incorrect indentation. | jsing | 1 | -2/+2 |
| 2017-06-22 | Plug a memory leak in tls_keypair_cert_hash(), introduced in r1.60. | jsing | 1 | -1/+3 |
| 2017-06-22 | Remove dead code that has remained hiding since ressl.c r1.14! | jsing | 1 | -4/+1 |
| 2017-06-22 | Use the standard `rv' idiom in tls_keypair_load_cert(), rather than | jsing | 1 | -5/+4 |
| 2017-05-16 | Plug a memory leak. The main_cert needs to be X509_free()ed since | claudio | 1 | -0/+2 |
| 2017-05-07 | Ensure that a client context has been connected before attempting to | jsing | 2 | -4/+12 |
| 2017-05-07 | Return an error if tls_handshake() is called on a TLS context that has | jsing | 1 | -1/+6 |
| 2017-05-06 | Use freezero() for the tls_load_file() failure case, since we're | jsing | 1 | -4/+4 |
| 2017-05-06 | BIO_free_all() and EVP_PKEY_free() can be called with NULL. | jsing | 1 | -5/+3 |
| 2017-05-06 | Be explicit about when it is safe to call tls_config_free(). | jsing | 1 | -3/+8 |
| 2017-05-06 | Document tls_unload_file(). | jsing | 1 | -3/+14 |
| 2017-05-06 | Perform reference counting for tls_config. This allows tls_config_free() to | jsing | 4 | -6/+22 |
| 2017-05-06 | Provide a tls_unload_file() function, that frees the memory returned from | jsing | 3 | -2/+10 |
| 2017-05-06 | Bump minors for symbol addition in libcrypto | beck | 1 | -1/+1 |
| 2017-05-04 | Move tls_config_skip_private_key_check() out from under HIDDEN_DECLS. | claudio | 1 | -2/+4 |
| 2017-05-02 | use freezero() instead of memset/explicit_bzero + free. Substantially |   deraadt | 1 | -4/+2 |
| 2017-04-30 | Only enable -Werror on libcrypto/libssl/libtls if we are building with | jsing | 1 | -2/+5 |
| 2017-04-30 | Add a tls_keypair_clear_key() function that uses freezero() to make key | jsing | 1 | -5/+11 |
| 2017-04-27 | tls_free(3) and tls_config_free(3) accept NULL; |   schwarze | 2 | -4/+14 |
| 2017-04-10 | Rework name verification code so that a match is indicated via an argument, | jsing | 5 | -47/+76 |
| 2017-04-07 | Use uint8_t instead of u_int8_t - for consistency and to make things easier | jsing | 1 | -2/+2 |
| 2017-04-05 | Add tls_peer_cert_chain_pem - To retreive the peer certificate and chain | beck | 7 | -6/+77 |
| 2017-04-05 | Internal changes to allow for relayd engine privsep. sends the hash of the | beck | 5 | -29/+87 |
| 2017-03-02 | fix error in Dt; from robert klein | jmc | 1 | -3/+3 |
| 2017-02-28 | Bump minors due to symbol addition. | jsing | 1 | -1/+1 |
| 2017-02-20 | spelling fix; | jmc | 1 | -2/+2 |
| 2017-02-20 | document tls_config_error(3) RETURN VALUES, improve what is said | schwarze | 2 | -6/+59 |
| 2017-01-31 | tweak previous; | jmc | 2 | -12/+8 |
| 2017-01-31 | Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may be | beck | 6 | -58/+209 |
| 2017-01-31 | Disable client-initiated renegotiation for libtls servers. | jsing | 1 | -1/+3 |
