src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-06-04	When X509_ATTRIBUTE_create() receives an invalid NID (e.g., -1), return	Ingo Schwarze
2020-06-04	minor polishing:	Ingo Schwarze
2020-06-04	Align tls13_server_select_certificate() with	Theo Buehler
2020-06-04	Improve client certificate selection for TLSv1.3	Theo Buehler
2020-06-04	mention that TLS_method(3) also supports TLSv1.3;	Ingo Schwarze
2020-06-04	Collapse the x509v3 directory into x509.	Joel Sing
2020-06-04	new manual page PKCS7_add_attribute(3);	Ingo Schwarze
2020-06-03	Properly document PKCS7_final(3), which was already mentioned	Ingo Schwarze
2020-06-02	Remove const modifier in return type of tls13_handshake_active_state()	Theo Buehler
2020-06-02	distracting whitespace	Theo Buehler
2020-06-01	Split the handling of post handshake handshake messages into its	Theo Buehler
2020-06-01	Remove expired certificate, ok tb@	Stuart Henderson
2020-06-01	Send an illegal_parameter alert if a client sends us invalid DH key	Theo Buehler
2020-06-01	Add a mechanism to set an alert in those parts of the read half of	Theo Buehler
2020-06-01	bump to LibreSSL 3.2.1	Brent Cook
2020-05-31	Replace ssl_max_server_version() with ssl_downgrade_max_version()	Joel Sing
2020-05-31	When building a chain look for non-expired certificates first.	Joel Sing
2020-05-31	Correct downgrade sentinels when a version pinned method is in use.	Joel Sing
2020-05-31	Fix printing long doubles on architectures with hm and lm bits.	mortimer
2020-05-31	Remove an outdated BUGS section.	Visa Hankala
2020-05-29	Add a fix from ncurses 20200523 via Hiltjo Posthuma that prevents	Nicholas Marriott
2020-05-29	Improve server certificate selection for TLSv1.3.	Joel Sing
2020-05-29	Handle the case where we receive a valid 0 byte application data record.	Joel Sing
2020-05-29	Wire up the servername callback in the TLSv1.3 server.	Joel Sing
2020-05-29	Mop up servername_done, which is unused.	Joel Sing
2020-05-29	from edgar pettijohn: correct return type in pcap_open_live.3;	Jason McIntyre
2020-05-27	This patch fixes one bug and one instance of undesirable behaviour.	Ingo Schwarze
2020-05-27	document PKCS7_dataFinal(3);	Ingo Schwarze
2020-05-27	add support for pcap_breakloop when reading packets from files.	David Gwynne
2020-05-26	minor cleanup ahead of the following work:	Ingo Schwarze
2020-05-26	Add additional length checks for TLSv1.3 plaintext and inner plaintext.	Joel Sing
2020-05-25	from edgar pettijohn:	Jason McIntyre
2020-05-25	Add missing .Xr and .Nm, reword and simplify few sentences	Alexandre Ratchov
2020-05-24	Fix some stylistic nits from jsing.	Theo Buehler
2020-05-24	Clear SSL_MODE_AUTO_RETRY in libtls, since we handle WANT_POLLIN correctly.	Joel Sing
2020-05-24	Minimally document PKCS7_dataInit(3).	Ingo Schwarze
2020-05-24	Briefly mention the obsolete function OPENSSL_init(3).	Ingo Schwarze
2020-05-23	Enforce that SNI hostnames be correct as per rfc 6066 and 5980.	Bob Beck
2020-05-23	Enable SSL_MODE_AUTO_RETRY by default.	Joel Sing
2020-05-23	Wire up SSL_MODE_AUTO_RETRY mode to retrying after PHH messages.	Joel Sing
2020-05-23	Provide the option to retry or return after post-handshake messages.	Joel Sing
2020-05-23	fix a confusingly wrapped line	Theo Buehler
2020-05-23	Do not assume that server_group != 0 or tlsext_supportedgroups != NULL	Theo Buehler
2020-05-22	Ensure we only attach an ocsp staple to a leaf certificate, because	Bob Beck
2020-05-21	Simplify: transform a dangling else into an early return and	Theo Buehler
2020-05-21	Make ssl_set_cert_masks() more consistent and closer to readable.	Joel Sing
2020-05-21	Avoid a shadowing issue by renaming cbs and cbb to cbb_hs and cbb_hs,	Theo Buehler
2020-05-21	A failure of tls13_handshake_msg_new() could lead to a NULL deref	Theo Buehler
2020-05-21	Actually set the hrr flag when sending a HelloRetryRequest.	Joel Sing
2020-05-20	Revert 1.43 - this fix for PHH in blocking mode breaks SSL_accept and	Bob Beck