summaryrefslogtreecommitdiff
path: root/lib/libtls
AgeCommit message (Expand)Author
2015-09-08Remove the default HTTPS port from tls_connect() - this is a TLS library,Joel Sing
2015-08-27Improve libtls error messages.Joel Sing
2015-08-27Split the persistent/configuration flags from temporary state flags andJoel Sing
2015-08-27Make functions that are internal to tls verify static.Joel Sing
2015-08-27Crank major version for libssl and libtls due to SSLv3 removal.Doug Hogan
2015-08-22Unify error message between client and server.Joel Sing
2015-08-22SSL_set_app_data is a macro for SSL_set_ex_data(), which is a wrapperJoel Sing
2015-08-22Store a reference to the libtls context in the SSL client connection appJoel Sing
2015-08-22Make tls_read()/tls_write always set outlen to zero on error - this gotJoel Sing
2015-07-19Remove OpenSSL engine RSAX.Doug Hogan
2015-07-19tweak previous; ok dougJason McIntyre
2015-07-19Crank the major of libtls: the behaviour of tls_write() has beenReyk Floeter
2015-07-19Add documentation on how to use TLS_{READ,WRITE}_AGAIN.Doug Hogan
2015-07-18Set SSL_MODE_ENABLE_PARTIAL_WRITE and SSL_MODE_ACCEPT_MOVING_WRITE_BUFFERAlexander Bluhm
2015-06-20Crank major for libcrypto, ssl and tls due to MDC-2DES removal.Doug Hogan
2015-06-19Add standard headers, C++ support to tls.h.Brent Cook
2015-06-05Link ssl and crypto via BSDOBJDIR, works with native and cross buildsTobias Ulmer
2015-05-17*** empty log message ***Mark Kettenis
2015-04-29Reject dNSName of " " for subjectAltName extension.Doug Hogan
2015-04-15Treat SSL_ERROR_ZERO_RETURN as a success, rather than a failure. AlsoJoel Sing
2015-04-15Make tls_close() more robust - do not rely on a close notify being receivedJoel Sing
2015-04-03comma fix;Jason McIntyre
2015-04-02Handle the case where multiple calls to SSL_shutdown() are required toJoel Sing
2015-04-02Correct man page title.Joel Sing
2015-04-02Document the fact that the tls_accept_*() functions can returnJoel Sing
2015-03-31Bump libtls minor due to API addition.Joel Sing
2015-03-31Provide a tls_accept_fds() function, which allows a TLS connection to beJoel Sing
2015-03-31Store errors that occur during a tls_accept_socket() call on the contextJoel Sing
2015-03-21free the server certificate in tls_connect_fds(); fixes a memory leak withStuart Henderson
2015-02-26Prefix function parameter names with underscores in tls.h, since this makesJoel Sing
2015-02-22Bump libtls major due to symbol removal.Joel Sing
2015-02-22Rename tls_config_insecure_noverifyhost() toJoel Sing
2015-02-22Check return values when setting dheparams and ecdhecurve for the defaultJoel Sing
2015-02-22In the interests of being secure by default, make the default TLS ciphersJoel Sing
2015-02-21explain how tls_accept_socket works.Ted Unangst
2015-02-21tls_config_set_protocols is really void. Greg Martin.Ted Unangst
2015-02-21fill out docs a bit more, notably the read/write again behaviors.Ted Unangst
2015-02-15s/tls_load_keys/tls_load_file/Joel Sing
2015-02-15Document tls_config_parse_protocols() and update documentation forJoel Sing
2015-02-12bump minor for TLS_PROTOCOLS_ALL. OK jsing@Reyk Floeter
2015-02-12Add a tls_config_parse_protocols() function that allows a protocols stringJoel Sing
2015-02-12Fix handling of "legacy" mode for tls_config_set_dheparams().Joel Sing
2015-02-12Change TLS_PROTOCOLS_DEFAULT to be TLSv1.2 only. Add a TLS_PROTOCOLS_ALLJoel Sing
2015-02-11Provide a tls_connect_servername() function that has the same behaviourJoel Sing
2015-02-11Be consistent with naming - only use "host" and "hostname" when referringJoel Sing
2015-02-09When parsing the host in tls_connect(), first check if it is a numericReyk Floeter
2015-02-08Use the AI_ADDRCONFIG flag in tls_connect(). This tells the resolverReyk Floeter
2015-02-07Added tls_load_file()Reyk Floeter
2015-02-07Add manpage bits for tls_load_file() and tls_accept_socket().Reyk Floeter
2015-02-07Add tls_load_file() as a helper to load certificates or encrypted keysReyk Floeter