summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2016-11-06Do not create machine@ symlinks in obj as root during includes:, butTheo Buehler
2016-11-06delete prototypes available in other pages and add a missing .Xr linkIngo Schwarze
2016-11-06conditionalize ocsp load properlyBob Beck
2016-11-06Do not create machine@ symlinks in obj as root during includes:, butTheo Buehler
2016-11-06delete prototypes available in other pages and add two missing .Xr linksIngo Schwarze
2016-11-06first pass; ok schwarzeJason McIntyre
2016-11-06since ocsp stapling is optional, make sure we guard if we do not have it.Bob Beck
2016-11-06delete prototypes available in other pages and add three missing .Xr linksIngo Schwarze
2016-11-06delete prototypes available in other pages and add two missing .Xr linksIngo Schwarze
2016-11-06Split ssl3_get_client_key_exchange() into separate per algorithm functions.Joel Sing
2016-11-06Remove pointless check - without fixed ECDH, there is only one way to reachJoel Sing
2016-11-06tweak previous;Jason McIntyre
2016-11-06simplify error handling in c2i_ASN1_OBJECTBrent Cook
2016-11-06Split out the DHE and ECDHE code paths fromJoel Sing
2016-11-06rename tlslegacy to tlsall, and better describe what it does.Bob Beck
2016-11-06Bump ftp(1)'s cipher default from "all" to "legacy" - this really shouldJoel Sing
2016-11-06Adjust cipher suite strengths - move MD5 to LOW, RC4 to LOW and 3DES toJoel Sing
2016-11-06Update regress for IDEA cipher suite removal.Joel Sing
2016-11-06Avoid calling usbd_set_config_no() in *_attach() and let the stack doMartin Pieuchot
2016-11-06Remove unused fields from ffs_opt_t.Martin Natano
2016-11-06Pass -peam to pax(1), so ownership and permissions that were set byTheo Buehler
2016-11-06Remove the single IDEA cipher suite. There is no good reason to supportJoel Sing
2016-11-06unifdef -m -UOPENSSL_NO_CHACHA -UOPENSSL_NO_POLY1305Joel Sing
2016-11-06Add regress test script for openssl command.Kinichiro Inoguchi
2016-11-06Avoid compiling in an unused function.Joel Sing
2016-11-06tweak previous;Jason McIntyre
2016-11-06Add OCSP stapling support to httpdBob Beck
2016-11-06adjust guards to elide unused Bi arrayBrent Cook
2016-11-06Rework X509_verify_cert to support alt chains on certificate verification,Bob Beck
2016-11-06The upcoming x509 alt chains diff tightens the trust requirementsBob Beck
2016-11-06Add interrupt handling routines for Loongson 3A.Visa Hankala
2016-11-06Commit a reminder that the default is not the default. This needs toBob Beck
2016-11-06dont issue sas config page requests against raid targets.David Gwynne
2016-11-06remove unused variableBrent Cook
2016-11-06use the correct function for freeBrent Cook
2016-11-06add an .Xr that was missingIngo Schwarze
2016-11-06Validate address ranges for AllowUser/DenyUsers at configuration loadDamien Miller
2016-11-05syncTheo de Raadt
2016-11-05document BN_set_negative() and BN_is_negative();Ingo Schwarze
2016-11-05Part one of the alt chains changes, bring in newer modifications toBob Beck
2016-11-05Add objects for X25519, X448, Ed25519 and Ed448.Joel Sing
2016-11-05One of the error paths would attempt to access not-yet-initialized locals.Miod Vallat
2016-11-05Do a partial CBB conversion of ssl3_send_server_key_exchange(), which willJoel Sing
2016-11-05fix misplaced quote by tls_peer_ocsp_this_updateBrent Cook
2016-11-05fix previous; looks good to bcook@Ingo Schwarze
2016-11-05don't skip names that match the beginning of the file name;Ingo Schwarze
2016-11-05Remove syscall.ph from vi.recoverAndrew Fresh
2016-11-05update example directoryBrent Cook
2016-11-05zap trailing whitespace, and add -o to usage() and help (-h);Jason McIntyre
2016-11-05syncTheo de Raadt