Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Factor out setup_up / destroy_ui functions. | 2015-09-13 | 4 | -58/+58 | |
| | | | | | | | | | This pulls out and renames setup_ui/destroy_ui so we have something that can be replaced as-needed, moving the the console setup code for Windows to app_win.c in -portable, instead of needing a local patch to enable binary console mode ui_read/write are also simplified. | ||||
* | document extra algorithms available with openssl speed command | 2015-09-13 | 1 | -1/+4 | |
| | | | | ok jmc@ | ||||
* | display negotiated TLS version and cipher suite in verbose mode. | 2015-09-13 | 1 | -2/+3 | |
| | | | | ok jsing@ | ||||
* | Set woken flag when flushing so that the channel is freed, while here | 2015-09-13 | 1 | -3/+3 | |
| | | | | use the same loop construct for both loops. | ||||
* | tweak STANDARDS; | 2015-09-13 | 1 | -3/+3 | |
| | |||||
* | Adapt to just committed libtls api change | 2015-09-12 | 1 | -21/+14 | |
| | |||||
* | Nuke SSLEAY_CONF -- a backwards compatibility environment variable that | 2015-09-12 | 4 | -14/+5 | |
| | | | | | | | | | | has been superseded by OPENSSL_CONF and discouraged from use for almost 16 years. "Definately ok" jsing@ "burn it" deraadt@ "Kill it with fire" miod@ "KILL IT WITH FIRE!!! BURN!!!!" beck@ | ||||
* | drop useless .Li macros | 2015-09-12 | 1 | -5/+5 | |
| | |||||
* | ouch, sorry, fix previous | 2015-09-12 | 1 | -2/+3 | |
| | |||||
* | use .Cm rather than .Li for fixed string arguments, and | 2015-09-12 | 1 | -6/+9 | |
| | | | | don't manually add blank characters inside .Sm off | ||||
* | use sysctl() to get FSCALE value; ok guenther | 2015-09-12 | 1 | -12/+10 | |
| | |||||
* | Add openssl(1) speed support for AEAD algorithms. | 2015-09-12 | 1 | -17/+96 | |
| | | | | | | | This adds aes-128-gcm aes-256-gcm chacha20-poly1305 from Adam Langley's original patch for OpenSSL ok beck@ jsing@ | ||||
* | don't use literal brackets to indicate optional syntax elements, | 2015-09-12 | 1 | -4/+4 | |
| | | | | use the .Op macro (or in this case, .Oo/.Oc) | ||||
* | Fix the openssl(1) prime command: When checking a decimal number for | 2015-09-12 | 1 | -3/+2 | |
| | | | | | | | | | primality, do not unnecessarily convert the original decimal number to hex in the output. Hex numbers explicitly specified with -hex remain unchanged. ok beck@ deraadt@ jsing@ miod@ | ||||
* | Old diff found in my tree: Add HISTORY; info from the CSRG CDs. | 2015-09-12 | 1 | -2/+7 | |
| | |||||
* | use SOCK_CLOEXEC instead of fnctl; ok guenther beck jsing | 2015-09-12 | 1 | -12/+16 | |
| | |||||
* | fix previous; | 2015-09-12 | 2 | -31/+48 | |
| | |||||
* | Update sqlite3 to 3.8.11.1. Bump major, regen .pc and header. Changes | 2015-09-12 | 1 | -94/+205 | |
| | | | | | | | available here: http://sqlite.org/changes.html Tested in bulk by aja@. ok landry@ "Please crank sqlite when you get this mail." deraadt@ | ||||
* | spaces found during a read | 2015-09-11 | 1 | -19/+18 | |
| | |||||
* | add some missing .Cm macros and drop some redundant .Bk while here | 2015-09-11 | 1 | -6/+4 | |
| | |||||
* | Add TLS suppport to nc. Provides a useful little test and script tool. | 2015-09-11 | 3 | -45/+346 | |
| | | | | ok jsing@ bluhm@ | ||||
* | unifdef -DOPENSSL_NO_RC5 | 2015-09-11 | 2 | -42/+2 | |
| | |||||
* | Remove XRESOLVE support. | 2015-09-11 | 2 | -5/+3 | |
| | | | | | dlg@ is sad because we won't be able to implement arpd(8) the way people intended it in the 80s. | ||||
* | The -D option requires an argument, and the argument must follow | 2015-09-11 | 1 | -6/+6 | |
| | | | | | without intervening whitespace. Documentation bug found because the SYNOPSIS markup was technically incomplete. | ||||
* | kill evil comment | 2015-09-11 | 1 | -3/+1 | |
| | | | | ok deraadt@ | ||||
* | Remove never called functions to dump per-ifp IPv6 statistics now that | 2015-09-11 | 2 | -129/+2 | |
| | | | | | | the kernel buffers are gone. ok claudio@ | ||||
* | avoid gratuitious use of the low-level .br request | 2015-09-11 | 1 | -7/+3 | |
| | |||||
* | delete bogus escaping from ellipsis to forestall cargo cult effects | 2015-09-11 | 1 | -3/+3 | |
| | |||||
* | fix unchecked mallocs - coverity 130454 and 130455 | 2015-09-11 | 1 | -6/+15 | |
| | | | | ok jsing@ | ||||
* | "Shutdown" should be "Shut down" in the usage for s_time's -no_shutdown | 2015-09-11 | 1 | -2/+2 | |
| | | | | flag. Pointed out by jmc@'s commit to the openssl(1) man page. | ||||
* | Merge delete-buffer into cmd-set-buffer.c and change the paste buffer | 2015-09-11 | 6 | -127/+41 | |
| | | | | | API so it has one paste_free() rather than free_top and free_name (everywhere that uses it already has the right pointer). | ||||
* | Remove engine command and parameters from openssl(1). | 2015-09-11 | 40 | -1726/+184 | |
| | | | | | | | We do not have any builtin or dynamic engines, meaning openssl(1) has no way to use the engine command or parameters at all. ok jsing@ | ||||
* | remove stupid casts | 2015-09-11 | 1 | -4/+4 | |
| | |||||
* | Use explicit_bzero() when zeroing before free() | 2015-09-11 | 1 | -1/+1 | |
| | | | | | from Michael McConville (mmcconv1 (at) sccs.swarthmore.edu) ok millert@ djm@ | ||||
* | sync -Q in usage() to SYNOPSIS; since it's drastically shorter, | 2015-09-11 | 1 | -6/+4 | |
| | | | | | i've reformatted the block to sync with the man (80 cols) and saved a line; | ||||
* | tweak previous; | 2015-09-11 | 1 | -3/+4 | |
| | |||||
* | shutdown (n.) -> shut down (v.); | 2015-09-11 | 1 | -2/+2 | |
| | |||||
* | Update usage to match man page. | 2015-09-11 | 1 | -2/+2 | |
| | |||||
* | expand %i in ControlPath to UID; bz#2449 | 2015-09-11 | 2 | -6/+9 | |
| | | | | patch from Christian Hesse w/ feedback from dtucker@ | ||||
* | mention -Q key-plain and -Q key-cert; | 2015-09-11 | 1 | -5/+9 | |
| | | | | bz#2455 pointed out by Jakub Jelen | ||||
* | more clarity on what AuthorizedKeysFile=none does; | 2015-09-11 | 2 | -5/+8 | |
| | | | | based on diff by Thiebaud Weksteen | ||||
* | Change the default behavior of the s_time command so that it will | 2015-09-11 | 1 | -2/+7 | |
| | | | | | | | | | | | | | | | | perform a proper shutdown by sending a "close notify" alert to the server. This allows s_time to benchmark a full TLS connection more accurately. Introduce a new flag called -no_shutdown to make s_time adopt the previous behavior (i.e. shut down the connection without notifying the server) so that comparisons can still be made with OpenSSL's version. The idea of using a flag (which replaces a #define) was suggested by bcook@. Thanks to millert@ and miod@ as well for their feedback on an earlier diff which resulted in this change. ok bcook@ beck@ | ||||
* | *** empty log message *** | 2015-09-11 | 1 | -19/+24 | |
| | |||||
* | Nuke references to DTLS1_BAD_VER and unbreak the tree. | 2015-09-10 | 1 | -5/+2 | |
| | |||||
* | Remove call to CRYPTO_malloc_init(), which does nothing. | 2015-09-10 | 1 | -2/+1 | |
| | |||||
* | Correct spelling of OPENSSL_cleanse. | 2015-09-10 | 6 | -17/+17 | |
| | |||||
* | reduce .Nd to one line and kill .Tn while here | 2015-09-10 | 2 | -10/+6 | |
| | |||||
* | Unbreak ftp(1) after tls_read()/tls_write() change. | 2015-09-10 | 1 | -8/+8 | |
| | | | | | | Found the hard way by naddy@ Joint work with beck@ | ||||
* | fix after libtls api changes | 2015-09-10 | 1 | -14/+10 | |
| | | | | ok jsing@ | ||||
* | Add session_last_attached time and format, from Sina Siadat. | 2015-09-10 | 7 | -8/+23 | |
| |