summaryrefslogtreecommitdiff
path: root/lib/libtls
AgeCommit message (Expand)Author
2015-09-10revert accidental commitBob Beck
2015-09-10comment for errno clobbering, to indicate why we do this.Bob Beck
2015-09-10bump majorBob Beck
2015-09-10change TLS_READ_AGAIN to TLS_WANT_POLLIN and TLS_WRITE_AGAIN to TLS_WANT_POLLOUTBob Beck
2015-09-10Change tls_read and tls_write semantics to return an ssize_t to betterBob Beck
2015-09-10Split tls_handshake() out from tls_accept/tls_connect. By doing this theJoel Sing
2015-09-10add MLINKS for _prefer_ciphers_*Jason McIntyre
2015-09-10Add support for preferring the server's cipher list or the client's cipherJoel Sing
2015-09-09Indent labels with a space so that diff -p is more friendly.Joel Sing
2015-09-09Add client certificate support. Still needs a few tweaks but this willBob Beck
2015-09-09always clear errno when coming back from tls_read tls_write, and tls_close.Bob Beck
2015-09-09nuke trailing whitespaceBob Beck
2015-09-09Only take ownership of a socket if we allocated it within libtls. If we areJoel Sing
2015-09-08Remove the default HTTPS port from tls_connect() - this is a TLS library,Joel Sing
2015-08-27Improve libtls error messages.Joel Sing
2015-08-27Split the persistent/configuration flags from temporary state flags andJoel Sing
2015-08-27Make functions that are internal to tls verify static.Joel Sing
2015-08-27Crank major version for libssl and libtls due to SSLv3 removal.Doug Hogan
2015-08-22Unify error message between client and server.Joel Sing
2015-08-22SSL_set_app_data is a macro for SSL_set_ex_data(), which is a wrapperJoel Sing
2015-08-22Store a reference to the libtls context in the SSL client connection appJoel Sing
2015-08-22Make tls_read()/tls_write always set outlen to zero on error - this gotJoel Sing
2015-07-19Remove OpenSSL engine RSAX.Doug Hogan
2015-07-19tweak previous; ok dougJason McIntyre
2015-07-19Crank the major of libtls: the behaviour of tls_write() has beenReyk Floeter
2015-07-19Add documentation on how to use TLS_{READ,WRITE}_AGAIN.Doug Hogan
2015-07-18Set SSL_MODE_ENABLE_PARTIAL_WRITE and SSL_MODE_ACCEPT_MOVING_WRITE_BUFFERAlexander Bluhm
2015-06-20Crank major for libcrypto, ssl and tls due to MDC-2DES removal.Doug Hogan
2015-06-19Add standard headers, C++ support to tls.h.Brent Cook
2015-06-05Link ssl and crypto via BSDOBJDIR, works with native and cross buildsTobias Ulmer
2015-05-17*** empty log message ***Mark Kettenis
2015-04-29Reject dNSName of " " for subjectAltName extension.Doug Hogan
2015-04-15Treat SSL_ERROR_ZERO_RETURN as a success, rather than a failure. AlsoJoel Sing
2015-04-15Make tls_close() more robust - do not rely on a close notify being receivedJoel Sing
2015-04-03comma fix;Jason McIntyre
2015-04-02Handle the case where multiple calls to SSL_shutdown() are required toJoel Sing
2015-04-02Correct man page title.Joel Sing
2015-04-02Document the fact that the tls_accept_*() functions can returnJoel Sing
2015-03-31Bump libtls minor due to API addition.Joel Sing
2015-03-31Provide a tls_accept_fds() function, which allows a TLS connection to beJoel Sing
2015-03-31Store errors that occur during a tls_accept_socket() call on the contextJoel Sing
2015-03-21free the server certificate in tls_connect_fds(); fixes a memory leak withStuart Henderson
2015-02-26Prefix function parameter names with underscores in tls.h, since this makesJoel Sing
2015-02-22Bump libtls major due to symbol removal.Joel Sing
2015-02-22Rename tls_config_insecure_noverifyhost() toJoel Sing
2015-02-22Check return values when setting dheparams and ecdhecurve for the defaultJoel Sing
2015-02-22In the interests of being secure by default, make the default TLS ciphersJoel Sing
2015-02-21explain how tls_accept_socket works.Ted Unangst
2015-02-21tls_config_set_protocols is really void. Greg Martin.Ted Unangst
2015-02-21fill out docs a bit more, notably the read/write again behaviors.Ted Unangst