summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_cert.c
AgeCommit message (Expand)Author
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.Joel Sing
2019-05-15s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there isBrent Cook
2019-04-13Avoid leak in SSL_dup_CA_list()Theo Buehler
2019-03-25Strip out all of the pkey to sigalg and sigalg to pkey linkages.Joel Sing
2019-03-25Add a chain member to CERT_PKEY and provide functions for manipulating it.Joel Sing
2018-11-19Revert previous - the default sigalg for RSA key exchange is {sha1,rsa}.Joel Sing
2018-11-16Unbreak legacy ciphers for prior to 1.1 by setting having a legacyBob Beck
2018-11-10Stop keeping track of sigalgs by guessing it from digest and pkey,Bob Beck
2018-11-08Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.Joel Sing
2018-11-05Mop up ecdh_tmp, since it is no longer used.Joel Sing
2018-04-25OpenSSL started adding const to functions all over the place. Make allTheo Buehler
2017-08-12Remove support for DSS/DSA, since we removed the cipher suites a whileJoel Sing
2017-08-10Clean up the EC key/curve configuration handling.Joel Sing
2017-02-07Change SSLerror() back to taking two args, with the first one being an SSL *.Bob Beck
2017-01-29Send the function codes from the error functions to the bit bucket,Bob Beck
2017-01-26Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglyBob Beck
2017-01-26Send the error function codes to rot in the depths of hell where they belongBob Beck
2017-01-24sk_free() checks for NULL so do not bother doing it from the callers.Joel Sing
2017-01-24sk_pop_free() checks for NULL so do not bother doing it from the callers.Joel Sing
2017-01-23Move a large part of ssl_st into internal, so we can see what squeals.Bob Beck
2017-01-23Move most of the fields in SSL_CTX to internal - the ones that remain areJoel Sing
2017-01-23move the callbacks from ssl_st to internalBob Beck
2017-01-23Move callback function pointers and argument pointers from SSL_CTX toJoel Sing
2017-01-22Move most of the SSL3_STATE fields to internal - the ones that remain areJoel Sing
2016-12-21Add support for ECDHE with X25519.Joel Sing
2016-03-11X509_free(3) is NULL-safe, so remove NULL checks before its calls.Michael McConville
2015-09-11Nuke ssl_set_peer_cert_type().Joel Sing
2015-04-06readdir() is thread-safe when DIR handles aren't shared, so delete the lock.Philip Guenther
2014-12-14Remove trailing whitespace.Joel Sing
2014-12-10Remove support for GOST R 34.10-94 signature authentication, along withJoel Sing
2014-12-06Remove client handling of RSA in ServerKeyExchange messages, along withJoel Sing
2014-11-18Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov.Miod Vallat
2014-11-16Sort and group includes.Joel Sing
2014-10-31Add support for automatic DH ephemeral keys.Joel Sing
2014-10-31Remove support for ephemeral/temporary RSA private keys.Joel Sing
2014-10-03Add support for automatic ephemeral EC keys.Joel Sing
2014-07-10KNF comments, reflowing and moving out of the middle of argument lists inPhilip Guenther
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
2014-06-21Fix memory leak in error path.Loganaden Velvindron
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-08No, we will not be building with OPENSSL_NO_X509_VERIFY. Nuke it andJoel Sing
2014-06-07BIO_free has an implicit NULL check, so do not bother checking for NULLJoel Sing
2014-06-07The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all haveJoel Sing
2014-06-07More KNF.Joel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-29Any sane platform has stdio. Stop pretending we will ever use a platformBob Beck
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.Ted Unangst
2014-05-26We don't really to keep history in constructs such as:Miod Vallat
2014-05-22There are two actual uses of e_os2.h in libssl - an OPENSSL_GLOBAL (anJoel Sing
2014-04-26Replace all use of ERR_add_error_data with ERR_asprintf_error_data.Bob Beck