summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Collapse)Author
2017-01-03Pull out, rework and dedup the code that determines the highest sharedJoel Sing
version. ok beck@ doug@
2016-12-30Add support for SSL_get_server_tmp_key().Joel Sing
ok doug@
2016-12-30Pull out (and largely rewrite) the code that determines the enabledJoel Sing
protocol version range. This also fixes a bug whereby if all protocols were disabled, the client would still use TLSv1.2 in the client hello, only to have if fail with unsupported version when it received and processed the server hello. ok doug@
2016-12-30Remove now unused c2l, c2ln, l2c, n2l, l2cn and n2l3 macros.Joel Sing
2016-12-30Explicitly include openssl/opensslconf.h in headers that use OPENSSL_NO_*Joel Sing
defines - do not rely on another heading making those available for us.
2016-12-29fix typo; from OpenSSLIngo Schwarze
commit 67adf0a7c273a82901ce8705ae8d71ee2f1c959c Author: Markus Triska <triska@metalevel.at> Date: Sun Dec 25 19:58:38 2016 +0100
2016-12-26Restore two frees that were unintentionally lost during recent refactoring.Joel Sing
2016-12-26Restore previous ASN.1 encoding for the peer certificate - this wasJoel Sing
unintentionally changed during the CBS/CBB rewrite. Issue reported by jeremy@ due to failing ruby tests. Analysis and near identical diff from Kazuki Yamaguchi <k at rhe.jp>.
2016-12-26Restore previous behaviour of incrementing the pointer so that it pointsJoel Sing
at the end of the buffer. Issue identified by and diff from Kazuki Yamaguchi <k at rhe.jp>.
2016-12-21Pacify compiler warning about an unitialized variable which is obviouslyTheo de Raadt
not really being used. ok beck.
2016-12-21Bump libcrypto/libssl/libtls majors due to libcrypto symbol removal andJoel Sing
changes to libssl non-opaque structs.
2016-12-21Add minimum and maximum version fields to SSL, SSL_CTX and SSL_METHODJoel Sing
for future work. Discussed with beck@
2016-12-21Add support for ECDHE with X25519.Joel Sing
Testing of an earlier revision by naddy@. ok beck@
2016-12-18Convert ssl3_get_server_hello() to CBS.Joel Sing
ok doug@
2016-12-16various minor cleanup;Jason McIntyre
2016-12-14Make sure all manual pages discussing X509_NAME objectsIngo Schwarze
reference X509_NAME_new(3). Sparingly add a few other references to relevant X509_NAME*(3) pages while here.
2016-12-13Complete the CBB conversion and cleanup of send_client_key_exchange().Joel Sing
ok doug@
2016-12-13Convert ssl3_send_client_kex_gost() to CBB.Joel Sing
ok doug@
2016-12-13Convert ssl3_send_client_kex_ecdhe() to CBB. Also check the return value ofJoel Sing
the EC_POINT_point2oct() calls. Feedback from and ok doug@
2016-12-10Add Copyright and license.Ingo Schwarze
Delete all the function prototypes. They are all available from their individual manual pages. Here, they were incomplete and nothing but a maintenance nightmare. Add several missing cross reference, such that this page now references all libssl manual pages. Delete a sentence that said nothing and correct a typo. Now all libssl manuals have proper Copyright notices and licenses, and i have merged all improvements from OpenSSL that i could find.
2016-12-10Write an SSL_get_shared_ciphers(3) manual from scratch; another oneIngo Schwarze
where BUGS is longer than DESCRIPTION. The function is listed in ssl(3) and <openssl/ssl.h>, so it's clearly public. The code looks slightly mysterious to me, so it would be welcome if somebody more familiar with TLS protocols could check factual accuracy.
2016-12-10New manual pages SSL_get_certificate(3), SSL_get_state(3), andIngo Schwarze
SSL_num_renegotiations(3) written from scratch. These functions are listed in ssl(3) and <openssl/ssl.h>, so they are clearly public.
2016-12-10Document SSL_version(3). It's listed in ssl(3) and <openssl/ssl.h>,Ingo Schwarze
so it's clearly a public interface.
2016-12-07Write SSL_renegotiate(3) manual from scratch; this function is listedIngo Schwarze
in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. More could probably be said, the code looks somewhat mysterious to me, but i think this stub is already better than nothing.
2016-12-07add missing .Nm SSL_peek in the NAME sectionIngo Schwarze
2016-12-07Write SSL_copy_session_id(3) manual from scratch. This function isIngo Schwarze
listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. We might wish to merge the improved code from OpenSSL 1.1.0, but that's major bump, so i'm documenting the BUGS for now.
2016-12-07Write new SSL_dup(3) manual from scratch. This function is listedIngo Schwarze
in ssl(3) and <openssl/ssl.h>, so it is clearly public.
2016-12-07New SSL_dup_CA_list(3) manual written from scratch.Ingo Schwarze
Mentioned in ssl(3) and <openssl/ssl.h>, so it is public.
2016-12-07Add documentation for SSL_add_file_cert_subjects_to_stack(3) andIngo Schwarze
SSL_add_dir_cert_subjects_to_stack(3), written from scratch. Both functions are listed in ssl(3) and <openssl/ssl.h> and recommended for the use by browsers in source code comments, so they are clearly public interfaces. Mention deduplication. Purge some duplicate text and improve some wording while here. Two additional cross references instead of the useless ssl(3). Add HISTORY, AUTHORS, and BUGS. It is depressing that BUGS (purely from code inspection) became longer than the DESCRIPTION.
2016-12-07Convert ssl3_send_client_kex_dhe() to CBB.Joel Sing
ok doug@
2016-12-07Ensure that we zero memory that contiansthe ASN.1 encoded session, sinceJoel Sing
this contains the session master key. ok deraadt@ doug@
2016-12-07Ensure that we zero memory used to hold the ASN.1 encoded session, sinceJoel Sing
this contains the session master key. ok deraadt@ doug@
2016-12-06An SSL_SESSION_print(3) manual written from scratch. It's clearlyIngo Schwarze
a public interface since it's listed both in ssl(3) and in <openssl/ssl.h>. Nothing to pilfer from OpenSSL in this case...
2016-12-06s/SSL_CTX_need_tmp_rsa/SSL_CTX_need_tmp_RSA/Ingo Schwarze
because that's what <openssl/ssl.h> #defines. That's likely a typo in the header file because all the other functions are called *tmp_rsa*(). But it would be a bad idea to fix such a bug in interfaces that are only provided for backward compatibility in the first place, so i'm adjusting the manual to be bug-compatible with the code, for now. But, pretty please, for the next major bump, somebody go get Bob's flensing knife and excise this part of the interface. Like, export ciphers? Really?
2016-12-06Copyright and license for the remaining manuals in this directoryIngo Schwarze
2016-12-06Add Copyright and license.Ingo Schwarze
Garbage collect empty RETURN VALUES section. Delete useless cross reference to ssl(3). Add cross reference to SSL_SESSION_new(3).
2016-12-06New manual page SSL_SESSION_new(3) written from scratch.Ingo Schwarze
The function prototype is listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface, but OpenSSL has no documentation about it whatsoever.
2016-12-06Convert ssl3_send_client_kex_rsa() to CBB.Joel Sing
ok doug@
2016-12-06Now that ssl3_send_{client,server}_certificate() are using the commonJoel Sing
handshake functions, we can remove more copied code from DTLS.
2016-12-06Convert certificate handshake message generation to CBB, with some cleanJoel Sing
up and restructure. This also adds CBB based variants of the ssl3_handshake_msg_{start,finish} functions - for the time being these use a CBB to build the messages, then copy back into the init_buf. ok doug@
2016-12-06replace all references to BIO(3) with references to BIO_new(3)Ingo Schwarze
2016-12-05Add Copyright and license.Ingo Schwarze
Add one cross reference, from OpenSSL.
2016-12-04Convert ssl_cipher_list_to_bytes() to CBB, changing the function to returnJoel Sing
the number of bytes written via an explicit *outlen argument and retaining the return value to indicate success or failure. ok doug@
2016-12-04Cleanup some of ssl3_send_client_kex_rsa() - tmp_buf is really theJoel Sing
premaster secret, so name it accordingly. Also, remove bogus assignment of master_key_length - the correct value is assigned when the master_key is set. ok beck@ doug@
2016-12-04Convert ssl3_send_server_hello() to CBB.Joel Sing
ok beck@ doug@
2016-12-04Add Copyright and license.Ingo Schwarze
Stop talking about SSLv2 and SSLv3. Some minor tweaks.
2016-12-04Add Copyright and license.Ingo Schwarze
Wording improvements and a bit of additional information from OpenSSL.
2016-12-04Add Copyright and license.Ingo Schwarze
Stop talking about SSLv2 and SSLv3.
2016-12-04Copyright and licenseIngo Schwarze
2016-12-04Add Copyright and license.Ingo Schwarze
Merge documentation of SSL_peek(3) from OpenSSL. Stop taking about SSLv2. Many wording improvements, most from OpenSSL.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-11 05:36:52 +0000