summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2017-06-10fix broken markup of callback arguments; found with mandoc -TlintIngo Schwarze
2017-05-07Drop cipher suites with DSS authentication - there is no good reason toJoel Sing
2017-05-07Instead of starting a 'zero-sized' CBB at the size of the first additionJoel Sing
2017-05-07Move state from ssl->internal to the handshake structure.Bob Beck
2017-05-06Bring in an SSL_HANDSHAKE structure and commence the great shovellingBob Beck
2017-05-06Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.Joel Sing
2017-05-06Bump minors for symbol addition in libcryptoBob Beck
2017-05-06Add missing $OpenBSD$ tags.Joel Sing
2017-04-30Only enable -Werror on libcrypto/libssl/libtls if we are building withJoel Sing
2017-04-30Switch back to freezero() and explicitly initialise data_len to zero. TheJoel Sing
2017-04-29Fix a bug caused by the return value being set early to signal successfulJoel Sing
2017-04-29Revert previous - we still want to do this, but I forgot about the installerBob Beck
2017-04-29We now require you to have a working libpthreadBob Beck
2017-04-29Make it safe to call SSL_library_init more than once.Bob Beck
2017-04-16backout previous, data_len is not always initializedOtto Moerbeek
2017-04-14Use freezero(3) when cleaning up session tickets - not only does it requireJoel Sing
2017-04-14Use freezero(3) to clean up the X25519 keys - simpler, cleaner code.Joel Sing
2017-04-14Use freezero(3) in the CBB clean up path, since this could hold sensitiveJoel Sing
2017-04-14Switch i2d_SSL_SESSION() back to freezero(3) now that the size constraintsJoel Sing
2017-04-14Clean up server key exchange EC point handling. Encode the point directlyJoel Sing
2017-04-11Revert ssl_asn1.c r1.50 - CBB and freezero(3) do not play nicely together.Joel Sing
2017-04-10Use freezero() for the internal opaque structures, instead of the currentJoel Sing
2017-04-10Use freezero() for X25519 keys - same result with more readable code.Joel Sing
2017-04-10freezero() the key block; simpler code and less of it.Joel Sing
2017-04-10Use freezero() for i2d_SSL_SESSION() - one line of code instead of three.Joel Sing
2017-04-10fix some .Xr errors that jmc@ found with mdoclint(1)Ingo Schwarze
2017-04-10new manual page SSL_get_server_tmp_key(3)Ingo Schwarze
2017-04-10Additional SSL_SESSION documentationIngo Schwarze
2017-04-10for pure *_ctrl() wrapper macros, move the reference from ssl(3)Ingo Schwarze
2017-04-10new manual page SSL_CTX_set_tlsext_servername_callback(3) for SNI;Ingo Schwarze
2017-04-10Convert various client key exchange functions to freezero(3). The memoryJoel Sing
2017-04-10pasto; from <Jon dot Spillett at oracle dot com> via OpenSSL commit 3aaa1bd0Ingo Schwarze
2017-04-10typo fix; from <Jon dot Spillett at oracle dot com>Ingo Schwarze
2017-03-29tweak previous;Jason McIntyre
2017-03-28Fix typo in function name;Ingo Schwarze
2017-03-28After i wrote SSL_renegotiate(3) from scratch, OpenSSL alsoIngo Schwarze
2017-03-25Update RFC reference for TLSEXT_TYPE_padding.Joel Sing
2017-03-25Check tls1_PRF() return value in tls1_generate_master_secret().Joel Sing
2017-03-25More cleanup for tls1_PRF()/tls1_P_hash() - change the argument order ofJoel Sing
2017-03-18Fewer magic numbers.Joel Sing
2017-03-18t1_enc.cJoel Sing
2017-03-18Currently tls1_PRF() requires that a temporary buffer be provided, thatJoel Sing
2017-03-10Remove the handshake digests and related code, replacing remaining usesJoel Sing
2017-03-10Switch CBB to use recallocarray() - this ensures that we do not leakJoel Sing
2017-03-10First pass at cleaning up the tls1_P_hash() function - remove a pointlessJoel Sing
2017-03-10Make tls1_PRF() non-static so it can be regress tested.Joel Sing
2017-03-07Correctly handle TLS PRF with MD5+SHA1 - the secret has to be partitionedJoel Sing
2017-03-06Clean up and simplify the tls1_PRF() implementation now that we have aJoel Sing
2017-03-05Correctly convert an SSLv2 challenge into an SSLv3/TLS client random byJoel Sing
2017-03-05Provide a rolling handshake hash that commences as soon as the cipherJoel Sing