Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-08-31 | Crank minor due to API addition | Bob Beck | |
2016-04-28 | Crank majors for lib{crypto,ssl,tls} due to symbol removals, symbol | Joel Sing | |
additions and functionality changes. | |||
2016-03-06 | Make sure stdio functions don't end up in the library, from miod@ | Bob Beck | |
ok doug@ bcook@ | |||
2015-12-09 | bump the major for libcrypto/ssl/tls for a CRYPTO_chacha_20 ABI change | Brent Cook | |
ok jsing@, deraadt@, beck@ | |||
2015-11-02 | bump minors after adding EVP_aead_chacha20_poly1305_ietf() | Reyk Floeter | |
OK jsing@ | |||
2015-09-13 | Crank major version due to removal of SHA-0 and MD4 from libcrypto. | Doug Hogan | |
2015-09-13 | Mechanical minor bump to follow libcrypto. | Miod Vallat | |
2015-09-11 | Merge the remnants of s3_enc.c into t1_enc.c. | Joel Sing | |
ok beck@ | |||
2015-09-11 | Put the *method* data structures and functions in the same place. | Joel Sing | |
We can also now nuke ssl23_get_method() since it is the same as tls1_get_method(). And the empty file can bite the dust. ok bcook@ miod@ | |||
2015-08-29 | Remove SSLv3 method data structs and unlink s3_meth.c from the build. | Doug Hogan | |
ok jsing@ | |||
2015-08-27 | Crank major version for libssl and libtls due to SSLv3 removal. | Doug Hogan | |
2015-07-19 | Remove OpenSSL engine RSAX. | Doug Hogan | |
OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@ | |||
2015-07-19 | Crank major and remove legacy variables. | Doug Hogan | |
Libtls is riding this crank. ok miod@ bcook@ | |||
2015-06-27 | Fix pointer to unsigned long conversion. | Doug Hogan | |
bcook@ notes that this check really only impacted 64-bit Windows. Also, changed the check to be unsigned for consistency. ok bcook@ | |||
2015-06-20 | Crank major for libcrypto, ssl and tls due to MDC-2DES removal. | Doug Hogan | |
ok miod@ jsing@ | |||
2015-06-05 | Fix library search path so we link against the freshly built libcrypto.so | Tobias Ulmer | |
instead of a stale one. ok miod@ mpi@ | |||
2015-05-26 | Use a relative path against BSDOBJDIR to pick libcrypto; makes cross-lib | Miod Vallat | |
work again. | |||
2015-05-17 | *** empty log message *** | Mark Kettenis | |
2015-02-22 | Bump libcrypto and libssl majors, due to various recent churn. | Joel Sing | |
Discussed with/requested by deraadt@ at the conclusion of s2k15. | |||
2015-02-07 | Crank libssl major due to the recent changes and removals. | Joel Sing | |
ok beck@ deraadt@ miod@ | |||
2015-02-07 | Stop defining TERMIOS, ANSI_SOURCE and OPENSSL_NO_RC5 for libssl builds. | Joel Sing | |
The first two are unused in libssl/libcrypto and OPENSSL_NO_RC5 is already defined via openssl/opensslfeatures.h. ok beck@ doug@ miod@ | |||
2015-02-06 | Import BoringSSL's crypto bytestring and crypto bytebuilder APIs. | Doug Hogan | |
This is imported with as few changes as possible for the initial commit. I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc() and changed a few header includes. BoringSSL has this as part of their public API. We're leaving it internal to libssl for now. Based on BoringSSL's CBB/CBS API as of commit c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54. input + ok jsing@, miod@ | |||
2015-01-22 | Support CA verification in chroot'ed processes without direct file | Reyk Floeter | |
access to the certificates. SSL_CTX_load_verify_mem() is a frontend to the new X509_STORE_load_mem() function that allows to load the CA chain from a memory buffer that is holding the PEM-encoded files. This function allows to handle the verification in privsep'ed code. Adopted for LibreSSL based on older code from relayd (by pyr@ and myself) With feedback and OK bluhm@ | |||
2014-12-10 | libssl major++ | Joel Sing | |
2014-11-18 | Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov. | Miod Vallat | |
This causes a libssl major version bump as this affects the layout of some internal-but-unfortunately-made-visible structs. | |||
2014-10-31 | Crank libssl major due to recent additions, removals and changes. | Joel Sing | |
2014-10-03 | Bump minor version for ECDH auto. | Joel Sing | |
While there are no additional symbols, there is an additional command that clients will potentially depend on. | |||
2014-09-28 | Bump minor after adding SSL_CTX_use_certificate_chain(). | Reyk Floeter | |
ok jsing@ miod@ | |||
2014-07-12 | -DOPENSSL_NO_KRB5 is no longer needed | Theo de Raadt | |
ok guenther | |||
2014-07-12 | enough churn, a crank is advised by guenther.. | Theo de Raadt | |
2014-07-10 | crank major for decompression feature | Ted Unangst | |
2014-06-13 | Remove support for the `opaque PRF input' extension, which draft has expired | Miod Vallat | |
7 years ago and never made it into an RFC. That code wasn't compiled in anyway unless one would define the actual on-the-wire extension id bytes; crank libssl major. With help and enlightenment from Brendan MacDonell. | |||
2014-05-29 | Make make includes work again without kssl.h | Bob Beck | |
2014-05-25 | define LIBRESSL_INTERNAL, and use it to hide the bad stuff from ourselves | Ted Unangst | |
ok beck | |||
2014-05-18 | Omit -Werror if building with gcc3, for it triggers "redefinition of `pqueue'" | Miod Vallat | |
warnings now that pqueue.h has been removed from public scope. | |||
2014-05-15 | No longer make pqueue.h a public (and installed) header file. Replace its | Miod Vallat | |
inclusion in <ssl/dtls1.h> by the benign `struct _pqueue; typedef struct _pqueue *pqueue;'. Note that said dtls1.h should probably be considered a private header as well... ok beck@ | |||
2014-05-12 | Move the `pqueue' part of libcrypto, which is a glorified sorted linked list | Miod Vallat | |
of 64-bit data, and only used by DTLS, to libssl where it belongs. Remove pqueue_print() which is a debugging interface and serves no useful purpose, except for the regress test, which grows its own pqueue_print() routine. Bump libcrypto major and libssl minor. WARNING: do not update your tree right now, more changes are coming, which will ride the libcrypto major bump. | |||
2014-05-05 | Remove SRP and Kerberos support from libssl. These are complex protocols | Ted Unangst | |
all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | |||
2014-04-23 | Make libssl and libcrypto compile with -Werror | Bob Beck | |
ok miod@ | |||
2014-04-20 | Chop off more SSLv2 tentacles and start fixing and noting y2038 issues. | Philip Guenther | |
APIs that pass times as longs will have to change at some point... Bump major on both libcrypto and libssl. ok tedu@ | |||
2014-04-17 | -Wall | Ted Unangst | |
2014-04-16 | TANSTAAFL - delete the buf freelist code. if you need a better malloc, get | Ted Unangst | |
a better malloc. ok beck deraadt | |||
2014-04-16 | add back SRP. i was being too greedy. | Ted Unangst | |
2014-04-16 | disentangle SRP code from TLS | Ted Unangst | |
2014-04-15 | remove ssl2 support even more completely. | Ted Unangst | |
in the process, always include ssl3 and tls1, we don't need config options for them. when the time comes to expire ssl3, it will be with an ax. checked by miod | |||
2014-04-15 | Crank major for libcrypto and libssl; more symbol removals to occur during the | Miod Vallat | |
next few moments, don't rush your update. Requested by deraadt@ | |||
2014-04-14 | o_dir.c has a questionable odor.. now that we got rid of OPENSSL_DIR_XXX | Bob Beck | |
remove it from the build.. we can cvs rm it and the files it includes once we know for sure ports are good. ok deraadt@ | |||
2014-04-14 | make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miod | Ted Unangst | |
2014-04-13 | Move undocumented internal OPENSSL_DIR interface from libcrypto to libssl, | Miod Vallat | |
so that libssl no longer need to access the non-external headers of libcrypto to build. No library bump, riding upon the recent update. | |||
2014-04-13 | Crank libcrypto minor (addition of BN_consttime_swap and CRYPTO_memcmp) | Miod Vallat | |
and libssl major (ssl_check_clienthello_tlsext split into two functions) |