summaryrefslogtreecommitdiffstats
path: root/lib
AgeCommit message (Expand)AuthorFilesLines
2020-09-15ifdef out code that is no longer used in here. once we are certainbeck1-2/+5
2020-09-15Cleanup/simplify SSL_set_ssl_method().jsing1-18/+18
2020-09-15Mop up the get_ssl_method function pointer.jsing2-50/+2
2020-09-14Move state initialisation from SSL_clear() to ssl3_clear().jsing2-4/+4
2020-09-14Cleanup and simplify SSL_set_session().jsing1-36/+22
2020-09-14Avoid NULL deref SSL_{,CTX_}set_ciphersuitestb1-2/+2
2020-09-14simplify RETURN VALUES for x509_verify(3) after beck@ made the rulesschwarze1-7/+3
2020-09-14Add initial man page for new x509_verify chain validatorbeck1-0/+225
2020-09-14Set error if we are given an NULL ctx in x509_verify, and set errorbeck1-5/+3
2020-09-14nuke a stray spacetb1-2/+2
2020-09-14Fix potential leak when tmpext fails to be added tobeck1-2/+6
2020-09-14remove unneeded variable "type".beck1-6/+5
2020-09-14Don't leak names on successbeck1-1/+2
2020-09-14remove unneded variable "time1"beck1-6/+6
2020-09-14remove unneded variable "time"beck1-3/+2
2020-09-14fix bug introduced on review where refactor made it possible tobeck1-2/+2
2020-09-14re-enable new x509 chain verifier as the defaultbeck1-3/+1
2020-09-14Correctly fix double free introduced on review.beck2-3/+3
2020-09-14Fix double free - review moved the pop_free of roots to x509_verify_ctx_freebeck1-2/+1
2020-09-14revert previous, need to fix a problembeck1-1/+3
2020-09-14Enable the use of the new x509 chain validator by default.beck1-3/+1
2020-09-13Implement SSL_{CTX_,}set_ciphersuites().jsing5-13/+211
2020-09-13Add new x509 certificate chain validator in x509_verify.cbeck10-59/+1191
2020-09-13Improve handling of BIO_read()/BIO_write() failures in the TLSv1.3 stack.jsing1-1/+9
2020-09-13Spell out n as en for consistency with other parts of the page.tb1-3/+3
2020-09-13%lln is percent ell ell n (not dee).claudio1-4/+4
2020-09-12Use the correct type for tls1_set_ec_id()tb1-3/+3
2020-09-12Simplify tls1_set_ec_id() a bittb1-24/+19
2020-09-12Unindent a bit of code that performs a few too many checks totb1-10/+8
2020-09-12Avoid an out-of-bounds access in BN_rand()tb1-3/+8
2020-09-12Change over to use the new x509 name constraints verification.beck1-28/+7
2020-09-12Fix byte order handling for DLT_LOOP linkskn1-4/+21
2020-09-12Include machine/endian.h in gost2814789.cinoguchi1-1/+3
2020-09-11Add x509_constraints.c - a new implementation of x509 name constraints, withbeck3-2/+1272
2020-09-11Remove cipher_list_by_id.jsing7-89/+32
2020-09-11Simplify SSL_get_ciphers().jsing1-13/+7
2020-09-11Rename ssl_cipher_is_permitted()jsing3-10/+10
2020-09-11Some SSL_AD_* defines snuck into the TLSv1.3 code - replace them withjsing2-10/+10
2020-09-11Add issuer cache, to be used by upcoming changes to validation code.beck3-1/+216
2020-09-11Various ciphers related clean up.jsing1-41/+36
2020-09-09Set alpn_selected_len = 0 when alpn_selected is NULLinoguchi1-1/+4
2020-09-09Import latest OPENSSL_NO_* flags from OpenSSL 1.1.1ginoguchi1-0/+8
2020-09-08Mention that EC_KEY_get0_public_key returns a public key.tb1-3/+5
2020-09-07Garbage collect renew_ticket in tls_decrypt_tickettb1-8/+5
2020-09-07sync a couple of minor fixes (no API/ABI change) to bring libfido2djm4-4/+10
2020-09-06For page-sized and larger allocations do not put the pages we'reotto1-21/+18
2020-09-04Create ERRORS section for ober_read_elements.martijn1-6/+29
2020-09-03Missed one case of errno not being set in previous.martijn1-2/+4
2020-09-03Clean up asn1/x_info.ctb1-22/+9
2020-09-03Remove unnecessary zeroing after recallocarray(3)tb1-3/+1
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.