summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2015-03-16Fix typoeJames Turner
2015-03-16Bump major to 29, regen .pc and header with new version infoJames Turner
2015-03-16Merge conflictsJames Turner
2015-03-16Update sqlite3 to 3.8.7.4. Changes available here: http://sqlite.org/changes....James Turner
2015-03-15Avoid a NULL pointer deref when X509_get_pubkey() returns NULL.Doug Hogan
2015-03-15tzfile.h is an internal header that should never have been installed.Todd C. Miller
2015-03-14TZ_MAX_CHARS in the old tzfile.h bears no resemblence to the actualTodd C. Miller
2015-03-14Do not reference tzfile.h since that is an internal header.Todd C. Miller
2015-03-14remove incorrect statement. the standard *does* require calloc to checkTed Unangst
2015-03-13remove the first comma from constructs like ", and," and ", or,": you can useJason McIntyre
2015-03-13delete useless comment about Open GroupTheo de Raadt
2015-03-12_PERFPOLICY can also be set to "high"; it's "auto" not "automatic"; and the v...Jason McIntyre
2015-03-12Fix typo: nemb -> nmembLawrence Teo
2015-03-11document HW_PERFPOLICY; ok teduJason McIntyre
2015-03-11delay EVP_MD_CTX_init so we don't forget to clean it up.Ted Unangst
2015-03-08Reject DH keys sent by a server if they are considered too small; inspiredMiod Vallat
2015-03-05Do not use sha512-parisc for now, as it is subtly bugged - passes the shaMiod Vallat
2015-03-05Revert; committed by accident without approval from deraadt@ at releaseLawrence Teo
2015-03-05Fix typo, from Ryan May.Lawrence Teo
2015-03-03sort sections;Jason McIntyre
2015-03-03Fix variable name typo in IDIOMS.Kent R. Spillner
2015-03-02Update comment to match code; Caspar SchutijserTodd C. Miller
2015-03-02Document that POLLPRI and POLLRDBAND are set for out-of-band socketTodd C. Miller
2015-03-02Document out-of-band data on a socket as an example of an exceptionalTodd C. Miller
2015-03-02Document when closefrom() was added to OpenBSD. OK bcook@Todd C. Miller
2015-03-02Note that closefrom is an extension.Brent Cook
2015-03-02gethostbyname(3) would fail when more than 16 addrs/aliases were returned.Bryan Steele
2015-03-02Fix a minor information leak that was introduced in t1_lib.c r1.71, wherebyJoel Sing
2015-02-28Reduce usage of predefined strings in manpages.Anthony J. Bentley
2015-02-27Be clear that when tv_nsec is set to UTIME_*, tv_sec is ignored.Todd C. Miller
2015-02-26Prefix function parameter names with underscores in tls.h, since this makesJoel Sing
2015-02-25Fix CVE-2014-3570: properly calculate the square of a BIGNUM value.Brent Cook
2012-10-13import OpenSSL-1.0.1cDamien Miller
2015-02-25Fix CVE-2015-0205: Do not accept client authentication with Diffie-HellmanBrent Cook
2015-02-24we don't let strtonum errors bleed through now.Ted Unangst
2015-02-24Set errno to EINVAL, instead of letting ERANGE escape out.Ted Unangst
2015-02-23Convert a table unsupported by mandoc to a columnated list.Anthony J. Bentley
2015-02-23fourth batch of perlpod(1) to mdoc(7) conversionIngo Schwarze
2015-02-22Bump libcrypto and libssl majors, due to various recent churn.Joel Sing
2015-02-22Reluctantly add server-side support for TLS_FALLBACK_SCSV.Joel Sing
2015-02-22There is not much point constructing an SSL_CIPHER, then callingJoel Sing
2015-02-22Remove IMPLEMENT_STACK_OF noops.Joel Sing
2015-02-22Bump libtls major due to symbol removal.Joel Sing
2015-02-22Rename tls_config_insecure_noverifyhost() toJoel Sing
2015-02-22Check return values when setting dheparams and ecdhecurve for the defaultJoel Sing
2015-02-22In the interests of being secure by default, make the default TLS ciphersJoel Sing
2015-02-21explain how tls_accept_socket works.Ted Unangst
2015-02-21tls_config_set_protocols is really void. Greg Martin.Ted Unangst
2015-02-21fill out docs a bit more, notably the read/write again behaviors.Ted Unangst
2015-02-21update siphash manpages to reflect change in return type spelling.Ted Unangst