summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl
AgeCommit message (Collapse)Author
2016-08-31Crank minor due to API additionBob Beck
2016-04-28Crank majors for lib{crypto,ssl,tls} due to symbol removals, symbolJoel Sing
additions and functionality changes.
2016-03-06Make sure stdio functions don't end up in the library, from miod@Bob Beck
ok doug@ bcook@
2015-12-09bump the major for libcrypto/ssl/tls for a CRYPTO_chacha_20 ABI changeBrent Cook
ok jsing@, deraadt@, beck@
2015-11-02bump minors after adding EVP_aead_chacha20_poly1305_ietf()Reyk Floeter
OK jsing@
2015-09-13Crank major version due to removal of SHA-0 and MD4 from libcrypto.Doug Hogan
2015-09-13Mechanical minor bump to follow libcrypto.Miod Vallat
2015-09-11Merge the remnants of s3_enc.c into t1_enc.c.Joel Sing
ok beck@
2015-09-11Put the *method* data structures and functions in the same place.Joel Sing
We can also now nuke ssl23_get_method() since it is the same as tls1_get_method(). And the empty file can bite the dust. ok bcook@ miod@
2015-08-29Remove SSLv3 method data structs and unlink s3_meth.c from the build.Doug Hogan
ok jsing@
2015-08-27Crank major version for libssl and libtls due to SSLv3 removal.Doug Hogan
2015-07-19Remove OpenSSL engine RSAX.Doug Hogan
OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@
2015-07-19Crank major and remove legacy variables.Doug Hogan
Libtls is riding this crank. ok miod@ bcook@
2015-06-27Fix pointer to unsigned long conversion.Doug Hogan
bcook@ notes that this check really only impacted 64-bit Windows. Also, changed the check to be unsigned for consistency. ok bcook@
2015-06-20Crank major for libcrypto, ssl and tls due to MDC-2DES removal.Doug Hogan
ok miod@ jsing@
2015-06-05Fix library search path so we link against the freshly built libcrypto.soTobias Ulmer
instead of a stale one. ok miod@ mpi@
2015-05-26Use a relative path against BSDOBJDIR to pick libcrypto; makes cross-libMiod Vallat
work again.
2015-05-17*** empty log message ***Mark Kettenis
2015-02-22Bump libcrypto and libssl majors, due to various recent churn.Joel Sing
Discussed with/requested by deraadt@ at the conclusion of s2k15.
2015-02-07Crank libssl major due to the recent changes and removals.Joel Sing
ok beck@ deraadt@ miod@
2015-02-07Stop defining TERMIOS, ANSI_SOURCE and OPENSSL_NO_RC5 for libssl builds.Joel Sing
The first two are unused in libssl/libcrypto and OPENSSL_NO_RC5 is already defined via openssl/opensslfeatures.h. ok beck@ doug@ miod@
2015-02-06Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.Doug Hogan
This is imported with as few changes as possible for the initial commit. I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc() and changed a few header includes. BoringSSL has this as part of their public API. We're leaving it internal to libssl for now. Based on BoringSSL's CBB/CBS API as of commit c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54. input + ok jsing@, miod@
2015-01-22Support CA verification in chroot'ed processes without direct fileReyk Floeter
access to the certificates. SSL_CTX_load_verify_mem() is a frontend to the new X509_STORE_load_mem() function that allows to load the CA chain from a memory buffer that is holding the PEM-encoded files. This function allows to handle the verification in privsep'ed code. Adopted for LibreSSL based on older code from relayd (by pyr@ and myself) With feedback and OK bluhm@
2014-12-10libssl major++Joel Sing
2014-11-18Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov.Miod Vallat
This causes a libssl major version bump as this affects the layout of some internal-but-unfortunately-made-visible structs.
2014-10-31Crank libssl major due to recent additions, removals and changes.Joel Sing
2014-10-03Bump minor version for ECDH auto.Joel Sing
While there are no additional symbols, there is an additional command that clients will potentially depend on.
2014-09-28Bump minor after adding SSL_CTX_use_certificate_chain().Reyk Floeter
ok jsing@ miod@
2014-07-12-DOPENSSL_NO_KRB5 is no longer neededTheo de Raadt
ok guenther
2014-07-12enough churn, a crank is advised by guenther..Theo de Raadt
2014-07-10crank major for decompression featureTed Unangst
2014-06-13Remove support for the `opaque PRF input' extension, which draft has expiredMiod Vallat
7 years ago and never made it into an RFC. That code wasn't compiled in anyway unless one would define the actual on-the-wire extension id bytes; crank libssl major. With help and enlightenment from Brendan MacDonell.
2014-05-29Make make includes work again without kssl.hBob Beck
2014-05-25define LIBRESSL_INTERNAL, and use it to hide the bad stuff from ourselvesTed Unangst
ok beck
2014-05-18Omit -Werror if building with gcc3, for it triggers "redefinition of `pqueue'"Miod Vallat
warnings now that pqueue.h has been removed from public scope.
2014-05-15No longer make pqueue.h a public (and installed) header file. Replace itsMiod Vallat
inclusion in <ssl/dtls1.h> by the benign `struct _pqueue; typedef struct _pqueue *pqueue;'. Note that said dtls1.h should probably be considered a private header as well... ok beck@
2014-05-12Move the `pqueue' part of libcrypto, which is a glorified sorted linked listMiod Vallat
of 64-bit data, and only used by DTLS, to libssl where it belongs. Remove pqueue_print() which is a debugging interface and serves no useful purpose, except for the regress test, which grows its own pqueue_print() routine. Bump libcrypto major and libssl minor. WARNING: do not update your tree right now, more changes are coming, which will ride the libcrypto major bump.
2014-05-05Remove SRP and Kerberos support from libssl. These are complex protocolsTed Unangst
all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected.
2014-04-23Make libssl and libcrypto compile with -WerrorBob Beck
ok miod@
2014-04-20Chop off more SSLv2 tentacles and start fixing and noting y2038 issues.Philip Guenther
APIs that pass times as longs will have to change at some point... Bump major on both libcrypto and libssl. ok tedu@
2014-04-17-WallTed Unangst
2014-04-16TANSTAAFL - delete the buf freelist code. if you need a better malloc, getTed Unangst
a better malloc. ok beck deraadt
2014-04-16add back SRP. i was being too greedy.Ted Unangst
2014-04-16disentangle SRP code from TLSTed Unangst
2014-04-15remove ssl2 support even more completely.Ted Unangst
in the process, always include ssl3 and tls1, we don't need config options for them. when the time comes to expire ssl3, it will be with an ax. checked by miod
2014-04-15Crank major for libcrypto and libssl; more symbol removals to occur during theMiod Vallat
next few moments, don't rush your update. Requested by deraadt@
2014-04-14o_dir.c has a questionable odor.. now that we got rid of OPENSSL_DIR_XXXBob Beck
remove it from the build.. we can cvs rm it and the files it includes once we know for sure ports are good. ok deraadt@
2014-04-14make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miodTed Unangst
2014-04-13Move undocumented internal OPENSSL_DIR interface from libcrypto to libssl,Miod Vallat
so that libssl no longer need to access the non-external headers of libcrypto to build. No library bump, riding upon the recent update.
2014-04-13Crank libcrypto minor (addition of BN_consttime_swap and CRYPTO_memcmp)Miod Vallat
and libssl major (ssl_check_clienthello_tlsext split into two functions)