summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2014-06-01Overhaul the key block handling in tls1_change_cipher_state() - useJoel Sing
2014-06-01In tls1_setup_key_block(), use the correct IV length for GCM mode, whichJoel Sing
2014-06-01Clean up the tls1_change_cipher_state() key length handling and use aJoel Sing
2014-06-01Use C99 initialisers for cipher_aliases. This improves readability,Joel Sing
2014-05-31BUF_MEM_grow_clean() takes a size_t as the size argument. Remove false commentsMiod Vallat
2014-05-31Some KNF and fix the vairable spelling.Joel Sing
2014-05-31More KNF.Joel Sing
2014-05-31More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup.Joel Sing
2014-05-31unifdef -UDOXYGEN and manually remove the few doxygen comments that are notJoel Sing
2014-05-31ECDH and ECDSA will not work overly well if there is no EC, so unifdefJoel Sing
2014-05-31TLS would not be entirely functional without extensions, so unifdefJoel Sing
2014-05-30More KNF.Joel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-30While working on another diff I ended up looking to see why on earth theJoel Sing
2014-05-29the comment says RAND_pseudo_bytes should be RAND_bytes. make it so.Ted Unangst
2014-05-29we no longer care that these aren't used for ssl2Ted Unangst
2014-05-29Everything sane has stdio, and FILE *. we don't need ifdefs for this.Bob Beck
2014-05-29remove back compat that was already disabled back in 1998.Ted Unangst
2014-05-29Any sane platform has stdio. Stop pretending we will ever use a platformBob Beck
2014-05-29no space before labelTed Unangst
2014-05-29line up else betterTed Unangst
2014-05-29consistent bracesTed Unangst
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.Ted Unangst
2014-05-29repair KNF indentTheo de Raadt
2014-05-29Make it substantially easier to identify protocol version requirementsJoel Sing
2014-05-29When you have functions that perform specific functions, use them.Joel Sing
2014-05-29Fix another two cases where the return value of ssl_replace_hash() isJoel Sing
2014-05-28More KNF.Joel Sing
2014-05-28Refactor tls1_change_cipher_state() and split the compression handling outJoel Sing
2014-05-28EVP_MD_CTX_create() calls malloc and can return NULL. However, only one ofJoel Sing
2014-05-28There is no point in checking if a pointer is non-NULL before calling free,Joel Sing
2014-05-28More KNF.Joel Sing
2014-05-27Remove unused defines.Miod Vallat
2014-05-27Remove redundant test introduced in s3_pkt.c on 20001225, which got cargo-cultedMiod Vallat
2014-05-27Wrap some long lines.Joel Sing
2014-05-27Remove MemCheck_{on,off} that escaped last time around.Joel Sing
2014-05-27More KNF.Joel Sing
2014-05-26Replace the following logic:Miod Vallat
2014-05-26Unchecked malloc() return value in SSL_COMP_add_compression_method(), in theMiod Vallat
2014-05-26We don't really to keep history in constructs such as:Miod Vallat
2014-05-26tls_decrypt_ticket(): memory leak and uncleaned EVP_CIPHER_CTX upon error.Miod Vallat
2014-05-26Make sure all error paths in dtls1_buffer_record() invoke SSLErr byMiod Vallat
2014-05-26Use C99 initialisers for BIO_METHOD.Joel Sing
2014-05-26repair some KNF missed by the script; ok jsingTheo de Raadt
2014-05-25heartbearts->heartbeats fixLoganaden Velvindron
2014-05-25remove unused shit. from Alexander SchrijverTed Unangst
2014-05-25Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofJoel Sing
2014-05-25Turn off MemCheck_on and MemCheck_off. These calls are pointless since theJoel Sing
2014-05-25The ssl_ciper_get_evp() function is currently overloaded to also return theJoel Sing