summaryrefslogtreecommitdiffstats
path: root/lib
AgeCommit message (Expand)AuthorFilesLines
2020-09-24Make free_strings() NULL safetb1-1/+3
2020-09-24KNF and grammar tweaks for comments; wrap a few overlong prototypes.tb1-161/+186
2020-09-24Simplify the cleanup of init_buf via a ssl3_release_init_buffer() function.jsing5-16/+22
2020-09-24Release read and write buffers using freezero().jsing4-21/+26
2020-09-23Ensure chain is set on the X509_STORE_CTX before triggering callback.jsing1-12/+39
2020-09-22Comment out SSL_get0_peername(3) for the OpenBSD 6.8 releaseschwarze1-4/+18
2020-09-22reword ambiguous title line;schwarze1-3/+3
2020-09-22Link up libagentxmartijn1-2/+2
2020-09-21s/before the handshake is complete/during the handshake/gschwarze1-8/+7
2020-09-21two wording tweaks suggested by jsing@, adding clarityschwarze1-5/+4
2020-09-21In ssl.h rev. 1.174 to 1.176, tb@ added some stubs related to 0-RTT data.schwarze3-4/+183
2020-09-21Fix some line wrapping and other whitespace issues.tb1-45/+34
2020-09-21Move freeing and zeroing up to right after the while loop.tb1-5/+5
2020-09-20Avoid memleak caused by shadowingtb1-2/+5
2020-09-20KNF/whitespace nitstb2-6/+7
2020-09-20Correct a 1 byte read overflow in x509_contraints_uri and addbeck1-4/+9
2020-09-20Document the public function SSL_set_SSL_CTX(3) from scratch,schwarze3-3/+72
2020-09-20Add guards around SSL_get0_peername that were accidentally omitted.tb1-1/+3
2020-09-20Fix a memory leak in x509_constraints_extract_namestb1-6/+6
2020-09-19remove superfluous NULL checkbeck1-2/+2
2020-09-19Prepare to provide SSL_get0_peernametb2-2/+9
2020-09-19Prepare to provide stubbed out versions for reading/writing 0-RTT datatb2-2/+41
2020-09-19Prepare to provide SSL{,_CTX}_{get,set}_max_early_datatb2-2/+34
2020-09-19Prepare to provide SSL_SESSION_{set,get}_max_early_data()tb2-2/+18
2020-09-18If ssl_cert_dup() fails in SSL_set_SSL_CTX(3), return failureschwarze1-5/+10
2020-09-18add forgotten link to newish page SSL_set1_host(3)schwarze1-3/+4
2020-09-18Fix potential overflow in CN subject line parsing, thanks tobeck1-4/+5
2020-09-17Prepare to provide SSL_get_peer_tmp_key().jsing2-9/+20
2020-09-17Simplify SSL method lookups.jsing5-66/+44
2020-09-17Add a comment saying that the public function NAME_CONSTRAINTS_check(3)schwarze1-2/+5
2020-09-17Install the new page SSL_set1_host(3), link to it from relevant places,schwarze6-22/+31
2020-09-17Import a manual page for SSL_set1_host(3), which we already have since 6.5,schwarze1-0/+155
2020-09-16Apparently some time ago I moved the timeout argument to the final positionmartijn1-10/+6
2020-09-16simple mdoc(7) fixes:schwarze1-20/+19
2020-09-16revert my putting this on a diet. sadly the NAME_CONSTRAINTS_checkbeck1-7/+1
2020-09-16Group seal record functions together.jsing1-11/+11
2020-09-16noop NAME_CONSTRAINTS_check stubinoguchi1-4/+5
2020-09-16Import libagentx.martijn10-0/+6916
2020-09-16Let SSL_CTX_get_ciphers(NULL) return NULL rather than crashschwarze2-6/+7
2020-09-16Mark SSL_get_cipher_list(3) as deprecated; it is badly misnamed, and thereschwarze1-4/+6
2020-09-16Avoid memset() before memcpy() for CBB_add_bytes().jsing1-2/+2
2020-09-16Make check in x509_verify_ctx_set_max_signatures() consistent with others.jsing1-4/+2
2020-09-16Dedup code in x509_verify_ctx_new_from_xsc().jsing1-14/+7
2020-09-15The undocumented public function SSL_set_SSL_CTX(3) changes theschwarze1-4/+4
2020-09-15Split the tls12_record_layer_write_mac() function.jsing1-10/+19
2020-09-15Do not destroy an existing cipher list when ssl_parse_ciphersuites()schwarze1-4/+2
2020-09-15Correct a failure case in tls12_record_layer_seal_record_protected()jsing1-2/+2
2020-09-15Create the missing RETURN VALUES section and move the appropriateschwarze1-57/+103
2020-09-15set error_depth and current_cert to make more legacy callbacks that don't checkbeck1-1/+3
2020-09-15Deduplicate the time validation code between the legacy and newbeck3-27/+8
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.