summaryrefslogtreecommitdiff
path: root/lib/libssl/s3_lib.c
AgeCommit message (Expand)Author
2014-10-03Add support for automatic ephemeral EC keys.Joel Sing
2014-09-30Clean up EC cipher handling in ssl3_choose_cipher().Joel Sing
2014-09-07Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,Joel Sing
2014-08-24Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and aJoel Sing
2014-08-23Remove non-standard GOST cipher suites (which are not compiled inJoel Sing
2014-08-23Replace the remaining ssl3_get_cipher_by_char() calls with n2s() andJoel Sing
2014-08-11Provide a ssl3_get_cipher_by_id() function that allows ciphers to be lookedJoel Sing
2014-08-10Tweak cipher list comments and add missing cipher value comments.Joel Sing
2014-08-10Remove disabled (weakened export and non-ephemeral DH) cipher suites fromJoel Sing
2014-08-07Oops, revert changes commited by mistake. The previous commit was supposedMiod Vallat
2014-08-07When you expect a function to return a particular value, don't put a commentMiod Vallat
2014-07-13The bell tolls for BUF_strdup - Start the migration to usingBob Beck
2014-07-12The correct name for EDH is DHE, likewise EECDH should be ECDHE.Joel Sing
2014-07-11Remove the PSK code. We don't need to drag around thisBob Beck
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
2014-07-09remove unused, private version strings except SSL_version_strBrent Cook
2014-07-08Mark the weakened 40-bit export ciphers as invalid - no one in their rightJoel Sing
2014-07-08Remove SSL_FIPS.Joel Sing
2014-07-08Nuke SSL_NOT_EXP since it does nothing.Joel Sing
2014-06-21Specify the correct strength bits for 3DES cipher suites.Joel Sing
2014-06-13Add ChaCha20-Poly1305 based ciphersuites.Joel Sing
2014-06-13Switch the AES-GCM cipher suites to SSL_CIPHER_ALGORITHM2_AEAD.Joel Sing
2014-06-13Remove support for the `opaque PRF input' extension, which draft has expiredMiod Vallat
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-07Remove another NULL check before a BIO_free().Joel Sing
2014-06-07ssl3_free_digest_list() has its own NULL check.Joel Sing
2014-06-07BIO_free has an implicit NULL check, so do not bother checking for NULLJoel Sing
2014-06-07ssl3_release_{read,write}_buffer() handle being called with NULL buffers,Joel Sing
2014-06-07The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all haveJoel Sing
2014-05-31More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup.Joel Sing
2014-05-31ECDH and ECDSA will not work overly well if there is no EC, so unifdefJoel Sing
2014-05-31TLS would not be entirely functional without extensions, so unifdefJoel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.Ted Unangst
2014-05-29Make it substantially easier to identify protocol version requirementsJoel Sing
2014-05-28There is no point in checking if a pointer is non-NULL before calling free,Joel Sing
2014-05-26Replace the following logic:Miod Vallat
2014-05-25Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofJoel Sing
2014-05-24Use C99 initialisers for SSL3_ENC_METHOD structs.Joel Sing
2014-05-23Clean up the SSL cipher initialisation and use C99 initialisers forJoel Sing
2014-05-22There are two actual uses of e_os2.h in libssl - an OPENSSL_GLOBAL (anJoel Sing
2014-05-22Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now.Joel Sing
2014-05-20KSSL is dead... nuke KSSL_DEBUG from orbit.Joel Sing
2014-05-17deleted seed some time agoTed Unangst
2014-05-05Remove SRP and Kerberos support from libssl. These are complex protocolsTed Unangst
2014-04-24More KNF, things that couldn't be verified with md5(1), and some whitespaceRyan Thomas McBride
2014-04-24KNFRyan Thomas McBride
2014-04-21more malloc/realloc/calloc cleanups; ok beck kettenisTheo de Raadt