summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2017-02-21Remove STREEBOG 512 as a TLS MAC since there are currently no cipher suitesJoel Sing
2017-02-15Avoid dereferencing a pointer when reporting an error about the sameJoel Sing
2017-02-07Change SSLerror() back to taking two args, with the first one being an SSL *.Bob Beck
2017-02-05Define values for SSL_CTRL_SET_GROUPS{,_LIST} and wire them up to theJoel Sing
2017-01-31Provide an SSL_OP_NO_CLIENT_RENEGOTIATION option that disallowsJoel Sing
2017-01-29Send the function codes from the error functions to the bit bucket,Bob Beck
2017-01-29Put comment back in the right place.Joel Sing
2017-01-29Avoid clearing the mac_packet flag in the wrong place.Joel Sing
2017-01-26knfBob Beck
2017-01-26Convert ssl3_get_client_hello() to CBS.Joel Sing
2017-01-26Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglyBob Beck
2017-01-26Send the error function codes to rot in the depths of hell where they belongBob Beck
2017-01-26Merge the single two line function from ssl_err2.c into ssl_err.c.Joel Sing
2017-01-26english is hard.Bob Beck
2017-01-26Limit the number of sequential empty records that we will processBob Beck
2017-01-26Refactor the code to generate a WANT_READ into a function, as we areBob Beck
2017-01-26Remove most of SSL3_ENC_METHOD - we can just inline the function callsJoel Sing
2017-01-26Move relatively new version range code from ssl_lib.c into a separateJoel Sing
2017-01-26Rename s3_{both,clnt,pkt_srvr}.c to have an ssl_ prefix since they are noJoel Sing
2017-01-26Merge the client/server version negotiation into the existing (currentlyJoel Sing
2017-01-26Remove ssl3_undef_enc_method - if we have internal bugs we want to segfaultJoel Sing
2017-01-26Remove a sess_cert reference from a comment in the public header.Joel Sing
2017-01-25Limit enabled version range by the versions configured on the SSL_CTX/SSL,Joel Sing
2017-01-25Change the SSL_IS_DTLS() macro to check the version, rather than using aJoel Sing
2017-01-25Provide ssl3_packet_read() and ssl3_packet_extend() functions that improveJoel Sing
2017-01-25Provide defines for SSL_CTRL_SET_CURVES/SSL_CTRL_SET_CURVES_LIST for thingsJoel Sing
2017-01-24BUF_MEM_free(), X509_STORE_free() and X509_VERIFY_PARAM_free() all checkJoel Sing
2017-01-24sk_free() checks for NULL so do not bother doing it from the callers.Joel Sing
2017-01-24sk_pop_free() checks for NULL so do not bother doing it from the callers.Joel Sing
2017-01-24Within libssl a SSL_CTX * is referred to as a ctx - fix this forJoel Sing
2017-01-24#if 0 the ecformats_list and eccurves_list - these are currently unused butJoel Sing
2017-01-24Remove unused cert variable.Joel Sing
2017-01-24Bump libssl and libtls minors due to symbol additions.Joel Sing
2017-01-24Add support for setting the supported EC curves viaJoel Sing
2017-01-24Correct bounds checks used when generating the EC curves extension.Joel Sing
2017-01-24Fix typo in brainpool curve name within a comment.Joel Sing
2017-01-24There is no point returning then breaking...Joel Sing
2017-01-24unifdef OPENSSL_NO_BIO - we do not support this in any form.Joel Sing
2017-01-24ssl_cert_free() checks for NULL itself.Joel Sing
2017-01-24Remove a "free up if allocated" comment that exists before code that freesJoel Sing
2017-01-24sk_SSL_CIPHER_free() checks for NULL so do not bother doing the same fromJoel Sing
2017-01-24ssl_sess_cert_free() checks for NULL, so do not bother doing it at theJoel Sing
2017-01-24There is no point in zeroing fields that exist within a struct that isJoel Sing
2017-01-23move default_passwd_cb and default_passwd_cb_userdata back intoBob Beck
2017-01-23Move options and mode from SSL_CTX and SSL to internal, since these can beJoel Sing
2017-01-23Split most of SSL_METHOD out into an internal variant, which is opaque.Joel Sing
2017-01-23Remove ssl_ctrl, ssl_ctx_ctrl, ssl_callback_ctrl and ssl_ctx_callback_ctrlJoel Sing
2017-01-23send state and rstate from ssl_st into internal. There are accessorsBob Beck
2017-01-23move back read_hash and enc_read_ctx into ssl_st. wpa_supplicant andBob Beck
2017-01-23Move a large part of ssl_st into internal, so we can see what squeals.Bob Beck