| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2017-02-07 | Change SSLerror() back to taking two args, with the first one being an SSL *. | Bob Beck | |
| Make a table of "function codes" which maps the internal state of the SSL * to something like a useful name so in a typical error in the connection you know in what sort of place in the handshake things happened. (instead of by arcane function name). Add SSLerrorx() for when we don't have an SSL * ok jsing@ after us both being prodded by bluhm@ to make it not terrible | |||
| 2017-01-29 | Send the function codes from the error functions to the bit bucket, | Bob Beck | |
| as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ | |||
| 2017-01-26 | Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the ugly | Bob Beck | |
| line wraps that resulted | |||
| 2017-01-26 | Send the error function codes to rot in the depths of hell where they belong | Bob Beck | |
| We leave a single funciton code (0xFFF) to say "SSL_internal" so the public API will not break, and we replace all internal use of the two argument SSL_err() with the internal only SSL_error() that only takes a reason code. ok jsing@ | |||
| 2017-01-24 | sk_free() checks for NULL so do not bother doing it from the callers. | Joel Sing | |
| 2017-01-24 | sk_pop_free() checks for NULL so do not bother doing it from the callers. | Joel Sing | |
| 2017-01-23 | Move a large part of ssl_st into internal, so we can see what squeals. | Bob Beck | |
| ok jsing@ | |||
| 2017-01-23 | Move most of the fields in SSL_CTX to internal - the ones that remain are | Joel Sing | |
| known to be in use. ok beck@ | |||
| 2017-01-23 | move the callbacks from ssl_st to internal | Bob Beck | |
| ok jsing@ | |||
| 2017-01-23 | Move callback function pointers and argument pointers from SSL_CTX to | Joel Sing | |
| internal. ok beck@ | |||
| 2017-01-22 | Move most of the SSL3_STATE fields to internal - the ones that remain are | Joel Sing | |
| known to be used by ports. ok beck@ | |||
| 2016-12-21 | Add support for ECDHE with X25519. | Joel Sing | |
| Testing of an earlier revision by naddy@. ok beck@ | |||
| 2016-03-11 | X509_free(3) is NULL-safe, so remove NULL checks before its calls. | Michael McConville | |
| ok doug@ | |||
| 2015-09-11 | Nuke ssl_set_peer_cert_type(). | Joel Sing | |
| ok "flensing knife" | |||
| 2015-04-06 | readdir() is thread-safe when DIR handles aren't shared, so delete the lock. | Philip Guenther | |
| (POSIX is fixing its description: readdir_r() was a botch) Patch from Carlos MartÃn Nieto (cmn (at) dwim.me) no -portable concerns bcook@ | |||
| 2014-12-14 | Remove trailing whitespace. | Joel Sing | |
| 2014-12-10 | Remove support for GOST R 34.10-94 signature authentication, along with | Joel Sing | |
| the two ciphersuites that use it. GOST94 public/private keys have been long obsoleted and libcrypto does not have support for them anyway. Discussed with Dmitry Eremin-Solenikov. | |||
| 2014-12-06 | Remove client handling of RSA in ServerKeyExchange messages, along with | Joel Sing | |
| the associated peer_rsa_tmp goop. This was only needed for export cipher handling and intentional RFC violations. The export cipher suites have already been removed and previous cleanup means that we will never send ServerKeyExchange messages from the server side for RSA. | |||
| 2014-11-18 | Update the GOST code in libssl, as contributed by Dmitry Eremin-Solenikov. | Miod Vallat | |
| This causes a libssl major version bump as this affects the layout of some internal-but-unfortunately-made-visible structs. | |||
| 2014-11-16 | Sort and group includes. | Joel Sing | |
| 2014-10-31 | Add support for automatic DH ephemeral keys. | Joel Sing | |
| This allows an SSL server to enable DHE ciphers with a single setting, which results in an DH key being generated based on the server key length. Partly based on OpenSSL. | |||
| 2014-10-31 | Remove support for ephemeral/temporary RSA private keys. | Joel Sing | |
| The only use for these is via SSL_OP_EPHEMERAL_RSA (which is effectively a standards violation) and for RSA sign-only, should only be possible if you are using an export cipher and have an RSA private key that is more than 512 bits in size (however we no longer support export ciphers). ok bcook@ miod@ | |||
| 2014-10-03 | Add support for automatic ephemeral EC keys. | Joel Sing | |
| This allows an SSL server to enable ECDHE ciphers with a single setting, which results in an EC key being generated using the first preference shared curve. Based on OpenSSL with inspiration from boringssl. ok miod@ | |||
| 2014-07-10 | KNF comments, reflowing and moving out of the middle of argument lists in | Philip Guenther | |
| places ok jsing@ | |||
| 2014-07-09 | tedu the SSL export cipher handling - since we do not have enabled export | Joel Sing | |
| ciphers we no longer need the flags or code to support it. ok beck@ miod@ | |||
| 2014-06-21 | Fix memory leak in error path. | Loganaden Velvindron | |
| OK from miod@ | |||
| 2014-06-12 | tags as requested by miod and tedu | Theo de Raadt | |
| 2014-06-08 | No, we will not be building with OPENSSL_NO_X509_VERIFY. Nuke it and | Joel Sing | |
| do some other clean up while here. ok deraadt@ | |||
| 2014-06-07 | BIO_free has an implicit NULL check, so do not bother checking for NULL | Joel Sing | |
| before calling it. | |||
| 2014-06-07 | The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all have | Joel Sing | |
| implicit NULL checks, so there is no point ensuring that the pointer is non-NULL before calling them. | |||
| 2014-06-07 | More KNF. | Joel Sing | |
| 2014-05-30 | remove some #if 0 code. we don't need any more reminders that we're using | Ted Unangst | |
| a not quite appropriate data structure. ok jsing | |||
| 2014-05-29 | Any sane platform has stdio. Stop pretending we will ever use a platform | Bob Beck | |
| that does not. "fire bomb" tedu@ | |||
| 2014-05-29 | unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them. | Ted Unangst | |
| ok deraadt jsing | |||
| 2014-05-26 | We don't really to keep history in constructs such as: | Miod Vallat | |
| #if 1 /* new with openssl 0.9.4 */ current code; #else obsolete code; #endif | |||
| 2014-05-22 | There are two actual uses of e_os2.h in libssl - an OPENSSL_GLOBAL (an | Joel Sing | |
| empty define) and an OPENSSL_EXTERN (which is defined as, well... extern). The use of OPENSSL_EXTERN is already inconsistent since the lines above and below just use plain old "extern". Expand the two uses of these macros and stop including e_os2.h in libssl. ok miod@ | |||
| 2014-04-26 | Replace all use of ERR_add_error_data with ERR_asprintf_error_data. | Bob Beck | |
| This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@ | |||
| 2014-04-21 | more malloc/realloc/calloc cleanups; ok beck kettenis | Theo de Raadt | |
| 2014-04-19 | More KNF and style consistency tweaks | Philip Guenther | |
| 2014-04-17 | always build in RSA and DSA. ok deraadt miod | Ted Unangst | |
| 2014-04-17 | kill REF_PRINT/REF_CHECK debugging framework noone would use | Theo de Raadt | |
| ok miod | |||
| 2014-04-17 | Change library to use intrinsic memory allocation functions instead of | Bob Beck | |
| OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||
| 2014-04-15 | o_dir.c had a very funny odor. all users of this now use standard functions. | Bob Beck | |
| consign it to the Attic. ok deraadt@ | |||
| 2014-04-14 | convert the use of OPENSSL_DIR_XXX functions to opendir() and frends. | Bob Beck | |
| ok deraadt@ | |||
| 2014-04-14 | First pass at applying KNF to the OpenSSL code, which almost makes it | Joel Sing | |
| readable. This pass is whitespace only and can readily be verified using tr and md5. | |||
| 2014-04-13 | Remove vms support stuff. | Bob Beck | |
| ok deraadt@ | |||
| 2014-04-13 | Do not include "e_os.h" anymore. Simply pull in the necessary headers. | Martin Pieuchot | |
| ok miod@, deraadt@ | |||
| 2014-04-13 | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | Miod Vallat | |
| 2012-10-13 | resolve conflicts | Damien Miller | |
| 2010-10-01 | resolve conflicts, fix local changes | Damien Miller | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |