summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2020-05-11Provide an alert sent record layer callback.Joel Sing
2020-05-11Move the record layer callbacks into a struct.Joel Sing
2020-05-11Use ssl_get_new_session() in the TLSv1.3 server.Joel Sing
2020-05-11There is no reason to limit the string length of log_reason() to REASON_LENClaudio Jeker
2020-05-11Should have bumped this to 1.0 a long time ago.Mark Kettenis
2020-05-11On ACPI systems, if there is no SPCR table (or if it doesn't provide usMark Kettenis
2020-05-11Use the same inittodr()/resettodr() implementation as onMark Kettenis
2020-05-11Initialize the timeval passed to todr_gettime() with the base time fromMark Kettenis
2020-05-11Allow specifying -d multiple times. Only print the fcgi header data ifClaudio Jeker
2020-05-11Add support for VPNv6 in the family keyword of show ribClaudio Jeker
2020-05-11drm/atomic: Take the atomic toys away from XJonathan Gray
2020-05-11drm/amdgpu: Fix oops when pp_funcs is unset in ACPI eventJonathan Gray
2020-05-11drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay t...Jonathan Gray
2020-05-11drm/edid: Fix off-by-one in DispID DTD pixel clockJonathan Gray
2020-05-11clarify role of FIDO tokens in multi-factor authentictation;Damien Miller
2020-05-10Initialize a couple of variables to shut up gcc, which apparently isn'tMartijn van Duren
2020-05-10Fix two out-of-bounds array accesses in ioctl code pats. One found byMark Kettenis
2020-05-10In case the order fails print the human readable reason from theFlorian Obser
2020-05-10Make openssl X509 handle the failure case return code from X509_time_cmp.Bob Beck
2020-05-10Send dummy ChangeCipherSpec messages from the TLSv1.3 serverTheo Buehler
2020-05-10Honour SSL_VERIFY_FAIL_IF_NO_PEER_CERT in the TLSv1.3 server.Joel Sing
2020-05-10Provide alert defines for TLSv1.3 and use in the TLSv1.3 code.Joel Sing
2020-05-10Conditionalize sleep-before-retry in server code to only be done whenBob Beck
2020-05-10remove noisy and useless debug lineFlorian Obser
2020-05-10Provide an easy way to get debug information from TLSv1.3 handshakes.Joel Sing
2020-05-10Use size_t for OCSP response length.Joel Sing
2020-05-10Only reset TLS extension state when parsing client hello or server hello.Joel Sing
2020-05-10Correct tlsext_ocsp_resplen check.Joel Sing
2020-05-10In bgpctl argument parser, re-arrange 'reason' parsing ('nei action [reason]')Theo de Raadt
2020-05-10Allow to have multiple domain ... {} sextions with the same domainSebastian Benoit
2020-05-10Pass boothowto from the bootloader to the kernel by adding aMark Kettenis
2020-05-10Pass boothowto from the bootloader to the kernel by adding aMark Kettenis
2020-05-10fix socket_log() calls, EVENT expands to three comma separatedOtto Moerbeek
2020-05-10sockaddr_rtdns does not guarantee alignment of the buffer. So firstOtto Moerbeek
2020-05-10Use a double-underscore prefix for local variables declared in macrosPhilip Guenther
2020-05-09Use the same inittodr()/resettodr() implementation as onMark Kettenis
2020-05-09Back out server side CCS sending. It breaks TLSv1.3 client communicationTheo Buehler
2020-05-09reenable POOL_DEBUGChristian Weisgerber
2020-05-09Log error notifications other than NO_PROPOSAL_CHOSENtobhe
2020-05-09Forcibly ensure that only PSS may be used with RSA in TLS 1.3.Bob Beck
2020-05-09Shuffle and clarify logic creating the contents of resolv.conf.Kenneth R Westerback
2020-05-09Send dummy ChangeCipherSpec messages from the TLSv1.3 serverTheo Buehler
2020-05-09Send dummy ChangeCipherSpec messages from the TLSv1.3 client.Joel Sing
2020-05-09Correct return value check to handle TLS13_IO_EOF case.Joel Sing
2020-05-09Add a middlebox_compat flag and condition session ID randomisation on it.Joel Sing
2020-05-09catch the other place this needs to changeBob Beck
2020-05-09now that 3.1.1 is out the door as a stable release bump the developmentBob Beck
2020-05-09Add support for certificate status requests in TLS 1.3 clientBob Beck
2020-05-09Make the test for the legacy_compression_method vector in the ClientHelloTheo Buehler
2020-05-09Drop a redundant test. It's effectively doing the same test twiceTheo Buehler