summaryrefslogtreecommitdiffstats
path: root/lib
AgeCommit message (Expand)AuthorFilesLines
2019-04-04Only assign destlen when src is non-NULL.jsing1-3/+4
2019-04-04Switch to pthread_mutex_init().jsing1-3/+5
2019-04-04Bump libssl/libtls minors due to symbol addition.jsing2-2/+2
2019-04-04Provide SSL chain/cert chain APIs.jsing3-2/+161
2019-04-04This case also needs to be fatal.jsing1-1/+2
2019-04-04update root CAs in cert.pem in sync with Mozillasthen1-287/+440
2019-04-03Avoid some out of bound accesses in aesni_cbc_hmac_sha1_cipher().tb1-7/+13
2019-04-02Restrict which filesystems are available for swap. This rules outvisa1-2/+6
2019-04-02fix broken commentsthen1-1/+1
2019-04-01Add a mutex to guard reference counting for tls_config.jsing3-4/+16
2019-04-01Implement a print function for BIGNUM_it.jsing1-2/+18
2019-04-01Correct the return values from long_print.jsing1-2/+5
2019-04-01Require all ASN1_PRIMITIVE_FUNCS functions to be provided.jsing5-26/+42
2019-04-01mark ERR_R_INTERNAL_ERROR instead of assert or _exit, sighderaadt1-3/+3
2019-04-01repair confusing "} if" indentation as suggested by deraadt@naddy2-2/+4
2019-04-01Compile with -gdwarf-4 to suppress wrnings about DWARF2 in assembly codekettenis1-1/+4
2019-04-01Correct subtle bug in sigalgs, only care about curve_nid if we arebeck1-4/+4
2019-03-31Clean up and simplify the client verify code:jsing1-50/+49
2019-03-31Wrap long lines and apply some style(9).jsing1-7/+10
2019-03-31Use named field initialisers.jsing2-16/+18
2019-03-30Add retguard macros to setjmp/longjmp on amd64. Knocks out some usefulmortimer3-21/+33
2019-03-29Use correct capitalization of EC_GROUP_get_curve_GF{2m,p}(3).tb1-4/+4
2019-03-29Copy categories outside "mask" from "oldloc" to the new locale object.schwarze2-19/+31
2019-03-28Wait until server disconnects before closing the socket. Otherwise,ratchov1-4/+17
2019-03-27Cast nonce bytes to avoid undefined behaviour when left shifting.jsing1-3/+3
2019-03-27remove duplicate set key file call. from alf.tedu1-3/+1
2019-03-27bump to 2.9.1bcook1-3/+3
2019-03-26adjtime(2): set EINVAL if delta overflows 64 bits of microseconds.cheloha1-3/+13
2019-03-26Use limits.h instead of sys/limits.h for portability.jsing1-3/+2
2019-03-25fix copy pasto: flag -> atflags; ok deraadt@ jca@ millert@anton1-4/+4
2019-03-25Strip out all of the pkey to sigalg and sigalg to pkey linkages.jsing5-59/+8
2019-03-25tls1_process_sigalgs() is no longer needed.jsing2-57/+2
2019-03-25Defer sigalgs selection until the certificate is known.jsing9-48/+124
2019-03-25Rework ssl_ctx_use_certificate_chain_bio() to use the CERT_PKEY chain.jsing1-46/+26
2019-03-25Remove ssl_get_server_send_cert() which is now unused.jsing2-14/+2
2019-03-25Rework ssl3_output_cert_chain() to take a CERT_PKEY and consider chains.jsing4-40/+36
2019-03-25Add a chain member to CERT_PKEY and provide functions for manipulating it.jsing2-3/+74
2019-03-24BUGS goes last;jmc1-7/+6
2019-03-24Document the fact that readlink(2) can bypass restrictions as neededbeck1-2/+10
2019-03-24In the incredibly unbelievable circumstance where _rs_init() fails toderaadt1-2/+2
2019-03-24If ssl_cipher_apply_rule() is given a specific cipher suite, match on it.jsing1-3/+4
2019-03-24Don't allow asn1_parse2 to recurse arbitrarily deep. Constrain to a maxbeck1-1/+5
2019-03-24Cast nonce bytes to avoid undefined behaviour when left shifting.jsing1-3/+3
2019-03-24do not call assert(), which has a tendency to leave traces of stuff inderaadt1-2/+3
2019-03-23Add range checks to varios ASN1_INTEGER functions to ensure thebeck3-6/+62
2019-03-23Remove useless secure_path(3) calls.millert2-25/+12
2019-03-23Separate symbol name and type with a comma for consistency andvisa1-2/+2
2019-03-22that "device" is an abstraction to the underlying OS PRNG.espie1-0/+5
2019-03-21Reference permissions in the canonical plural.rob1-3/+3
2019-03-21import EVP_camellia_128_cbc(3) from OpenSSL 1.1.1,schwarze4-3/+156