summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_lib.c
AgeCommit message (Expand)Author
2014-10-18Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().Joel Sing
2014-10-15Disable SSLv3 by default.Joel Sing
2014-10-03Add support for automatic ephemeral EC keys.Joel Sing
2014-09-07Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,Joel Sing
2014-08-24Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and aJoel Sing
2014-08-23Replace the remaining ssl3_get_cipher_by_char() calls with n2s() andJoel Sing
2014-08-11Check the return value of sk_SSL_CIPHER_new_null(), since it allocatesJoel Sing
2014-08-11Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed wayJoel Sing
2014-08-10Since we no longer need to support SSLv2-style cipher lists, startJoel Sing
2014-07-12The correct name for EDH is DHE, likewise EECDH should be ECDHE.Joel Sing
2014-07-12Provide ssl_version_string() function, which uses one of those modern CJoel Sing
2014-07-12if (x) FOO_free(x) -> FOO_free(x).Miod Vallat
2014-07-12Remove remnants from PSK, KRB5 and SRP.Joel Sing
2014-07-11Remove the PSK code. We don't need to drag around thisBob Beck
2014-07-10Remove more compression tendrils.Joel Sing
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-07-10remove unused ecc_pkey_size.Brent Cook
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
2014-06-17ssl_session_cmp is not a sort function, can use CRYPTO_memcmp here too.Ted Unangst
2014-06-13Add an SSL_AEAD_CTX to enable the use of EVP_AEAD with an SSL cipher.Joel Sing
2014-06-13Remove support for the `opaque PRF input' extension, which draft has expiredMiod Vallat
2014-06-12tags as requested by miod and teduTheo de Raadt
2014-06-07More KNF.Joel Sing
2014-05-31Some KNF and fix the vairable spelling.Joel Sing
2014-05-31More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup.Joel Sing
2014-05-31unifdef -UDOXYGEN and manually remove the few doxygen comments that are notJoel Sing
2014-05-31ECDH and ECDSA will not work overly well if there is no EC, so unifdefJoel Sing
2014-05-31TLS would not be entirely functional without extensions, so unifdefJoel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-29Any sane platform has stdio. Stop pretending we will ever use a platformBob Beck
2014-05-29no space before labelTed Unangst
2014-05-29consistent bracesTed Unangst
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.Ted Unangst
2014-05-29Make it substantially easier to identify protocol version requirementsJoel Sing
2014-05-29When you have functions that perform specific functions, use them.Joel Sing
2014-05-28EVP_MD_CTX_create() calls malloc and can return NULL. However, only one ofJoel Sing
2014-05-28There is no point in checking if a pointer is non-NULL before calling free,Joel Sing
2014-05-25remove unused shit. from Alexander SchrijverTed Unangst
2014-05-25Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofJoel Sing
2014-05-24I'm so sorry to learn that the Diab compiler can't (or used not to) parse CMiod Vallat
2014-05-24Use C99 initialisers for SSL3_ENC_METHOD structs.Joel Sing
2014-05-22Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now.Joel Sing
2014-05-05Remove SRP and Kerberos support from libssl. These are complex protocolsTed Unangst
2014-05-02Nuke OPENSSL_NO_SOCK since any half sane operating system has sockets.Joel Sing
2014-04-24More KNF, things that couldn't be verified with md5(1), and some whitespaceRyan Thomas McBride
2014-04-24KNFRyan Thomas McBride
2014-04-21more malloc/realloc/calloc cleanups; ok beck kettenisTheo de Raadt
2014-04-20Chop off more SSLv2 tentacles and start fixing and noting y2038 issues.Philip Guenther