summaryrefslogtreecommitdiff
path: root/lib/libtls/tls_internal.h
AgeCommit message (Expand)Author
2022-03-24Hide the tls_signer from public visibility. It's not ready yet andTheo Buehler
2022-01-25Introduce a signer interface intented to make TLS privsep simplerEric Faurot
2021-01-21Allow setting a keypair on a tls context without specifying the privateEric Faurot
2019-11-16Allow 1.3 ciphers in libtls.Bob Beck
2019-11-16Allow portable to override the default CA bundle locationBob Beck
2019-11-02Provide tls_conn_cipher_strength().Joel Sing
2019-04-01Add a mutex to guard reference counting for tls_config.Joel Sing
2018-11-06Define TLS_CA_CERT_FILE rather than having every application create theirJoel Sing
2018-04-07Correct tls_config_clear_keys() behaviour.Joel Sing
2018-03-19Automatically handle library initialisation for libtls.Joel Sing
2018-02-10Move the keypair pubkey hash handling code to during config.Joel Sing
2018-02-10Add support to libtls for client-side TLS session resumption.Joel Sing
2018-02-08Have tls_keypair_pubkey_hash() call tls_keypair_load_cert() instead ofJoel Sing
2018-02-08Move tls_keypair_pubkey_hash() to the keypair file.Joel Sing
2018-02-08Split keypair handling out into its own file - it had already appearedJoel Sing
2017-09-20Keep track of which keypair is in use by a TLS context.Joel Sing
2017-08-10Add a tls_config_set_ecdhecurves() function to libtls, which allows theJoel Sing
2017-08-09Don't use tls_cert_hash for the hashing used by the engine offloading magicClaudio Jeker
2017-07-06Add support for providing CRLs to libtls - once a CRL is provided weJoel Sing
2017-06-22Use the tls_password_cb() callback with all PEM_read_bio_*() calls, so thatJoel Sing
2017-05-07Ensure that a client context has been connected before attempting toJoel Sing
2017-05-06Perform reference counting for tls_config. This allows tls_config_free() toJoel Sing
2017-05-04Move tls_config_skip_private_key_check() out from under HIDDEN_DECLS.Claudio Jeker
2017-04-10Rework name verification code so that a match is indicated via an argument,Joel Sing
2017-04-07Use uint8_t instead of u_int8_t - for consistency and to make things easierJoel Sing
2017-04-05Add tls_peer_cert_chain_pem - To retreive the peer certificate and chainBob Beck
2017-04-05Internal changes to allow for relayd engine privsep. sends the hash of theBob Beck
2017-01-29Move the ocsp staple to being part of the keypair structure internally,Bob Beck
2017-01-26Use a flag to track when we need to call SSL_shutdown(). This avoids anJoel Sing
2017-01-24Introduce ticket support. To enable them it is enough to set a positiveClaudio Jeker
2016-11-05Add support for server side OCSP stapling to libtls.Bob Beck
2016-11-05rename ocsp_ctx to ocspBob Beck
2016-11-04Add an explict list of exported symbols with just the functions declaredPhilip Guenther
2016-11-04make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hiddenBob Beck
2016-11-04Add ocsp_require_stapling config option for tls - allows a connectionBob Beck
2016-11-03Only set an error from libssl related code, if an error has not alreadyJoel Sing
2016-11-02Add OCSP client side support to libtls.Bob Beck
2016-09-04Add callback-based interface to libtls.Brent Cook
2016-08-22Various clean up and reorganisation of the connection info handling code.Joel Sing
2016-08-22Provide an API that enables server side SNI support - add the ability toJoel Sing
2016-08-22Create contexts for server side SNI - these include the additional SSL_CTXJoel Sing
2016-08-15The tls_conninfo serial is also unused.Joel Sing
2016-08-15Group conninfo fields by connection and peer cert based information,Joel Sing
2016-08-15Explicitly pass in an SSL_CTX * to the functions that operate on one,Joel Sing
2016-08-13Load CA, certificate and key files into memory when the appropriateJoel Sing
2016-08-12Add ALPN support to libtls.Joel Sing
2016-08-02Revert previous since it adds new symbols.Joel Sing
2016-08-01Add ALPN support to libtls.Joel Sing
2016-07-13Split the existing TLS cipher suite groups into four:Joel Sing
2016-07-07Revert previous - it introduces problems with a common privsep use case.Joel Sing
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-13 03:19:59 +0000