summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2019-01-21In ssl_lib.c rev. 1.197, jsing@ added TLSv1.3 support to SSL_get_version(3).Ingo Schwarze
2019-01-21adapt to changes in KEX API and file removalsDamien Miller
2019-01-21adapt to bignum1 API removal and bignum2 API changeDamien Miller
2019-01-21fix reversed arguments to kex_load_hostkey(); manifested as errors inDamien Miller
2019-01-21Allocate buffer before using it.Kenneth R Westerback
2019-01-21While using buffered stdio over a socket, fflush(3) command beforeSunil Nimmagadda
2019-01-21Adapt to allwinner device tree changes in linux >= 5.0-rc1Jonathan Gray
2019-01-21forgot to cvs add this file in previous series of commits; grrrDamien Miller
2019-01-21Improve logging for TLS certificate validity checking.Joel Sing
2019-01-21Explicitly check timegm() return value.Joel Sing
2019-01-21nothing shall escape this purgeDamien Miller
2019-01-21The main handshake loop can be shared between client and server.Joel Sing
2019-01-21rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamedDamien Miller
2019-01-21merge kexkem[cs] into kexgenDamien Miller
2019-01-21pass values used in KEX hash computation as sshbuf rather thanDamien Miller
2019-01-21remove kex_derive_keys_bn wrapper; no unused since the DH-like KEXDamien Miller
2019-01-21Use ssl_cipher_is_permitted() in ssl_cipher_list_to_bytes().Theo Buehler
2019-01-21use KEM API for vanilla ECDHDamien Miller
2019-01-21Add ssl_cipher_is_permitted(), an internal helper function thatTheo Buehler
2019-01-21use KEM API for vanilla DH KEXDamien Miller
2019-01-21Correct some rwstate handling that I broke when refactoring.Joel Sing
2019-01-21use KEM API for vanilla c25519 KEXDamien Miller
2019-01-21Add support for a PQC KEX/KEM: sntrup4591761x25519-sha512@tinyssh.orgDamien Miller
2019-01-21factor out kex_verify_hostkey() - again, duplicated almost exactlyDamien Miller
2019-01-21factor out kex_load_hostkey() - this is duplicated in both the client andDamien Miller
2019-01-21factor out kex_dh_compute_key() - it's shared between plain DH KEX andDamien Miller
2019-01-21factor out DH keygen; it's identical between the client and the serverDamien Miller
2019-01-21- add 7265D-16 firmwareJason McIntyre
2019-01-21save the derived session id in kex_derive_keys() rather than making eachDamien Miller
2019-01-21Make sshpkt_get_bignum2() allocate the bignum it is parsing ratherDamien Miller
2019-01-21remove obsolete (SSH v.1) sshbuf_get/put_bignum1 functionsDamien Miller
2019-01-21fix all-zero check in kexc25519_shared_keyDamien Miller
2019-01-21remove hack to use non-system libcryptoDamien Miller
2019-01-21Provide TLS 1.3 cipher AEAD/hash and legacy I/O handling functions.Joel Sing
2019-01-21Perform manual validity checking of the X.509 certificate for constraints.Joel Sing
2019-01-21Zap unused ntop_bufkn
2019-01-21explicitly handle printing the AF_KEY socket type as "pfkey"David Gwynne
2019-01-21- -T was added to the first synopsis by mistakeJason McIntyre
2019-01-21Move struct tls13_ctx into a header since other things need access to it.Joel Sing
2019-01-21Support 2TB phys memMike Larkin
2019-01-21vmm: better handling of CPUID[1].ECX[OSXSAVE] bitMike Larkin
2019-01-21Don't add PG_u to the upper level PTEs in the meltdown caseMike Larkin
2019-01-21when installing over wifi, move nwid and wpakey/nwkey to be on the same linePeter Hessler
2019-01-21move example configurations to include nwid and nwkey on the same linePeter Hessler
2019-01-21Typo. "nterface" -> "interface"Kenneth R Westerback
2019-01-21Use Adj-RIB-Out to push UPDATE messages to peers instead of having anotherClaudio Jeker
2019-01-21always print the caller's error message in ossl_error(), even when thereDamien Miller
2019-01-21get the ex_data (pkcs11_key object) back from the keys at theDamien Miller
2019-01-21Use ${rcexec} in rc_pre to do the config testing. This allows to specifyClaudio Jeker
2019-01-21vmm: better handling of two SMM related MSRsMike Larkin