Age | Commit message (Collapse) | Author | |
---|---|---|---|
2000-03-02 | $OpenBSD$ | Todd T. Fries | |
2000-02-24 | fread() of /dev/random reads an entire huge stdio buffer, instead of the 32 | Theo de Raadt | |
bytes that we actually need, thus wasting a lot of system entropy. found by alecm@coyote.uk.sun.com, passed on by Pete.Zaytsev@EBay.Sun.COM | |||
1999-11-23 | do not assume shell scripts are +x; d | Theo de Raadt | |
1999-09-29 | import openssl-0.9.7-beta1 | Bob Beck | |
1999-09-29 | new files for OpenSSL 0.9.4 | Bob Beck | |
1999-09-29 | OpenSSL 0.9.4 merge | Bob Beck | |
1999-09-29 | import openssl-0.9.7-beta1 | Bob Beck | |
1999-09-28 | do not put a bad crypt() in libcrypt, it is in libc | Theo de Raadt | |
1999-09-26 | crank to version 2 for release, in case any dependencies have crept in | Theo de Raadt | |
1998-10-05 | Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build | ryker | |
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible. | |||
2016-09-01 | delete wrong cvs $ tags | Theo de Raadt | |
2016-09-01 | bump | Otto Moerbeek | |
2016-09-01 | Less lock contention by using more pools for mult-threaded programs. | Otto Moerbeek | |
tested by many (thanks!) ok tedu, guenther@ | |||
2016-09-01 | black magic for sparc page size can go | Ted Unangst | |
2016-09-01 | remove references to sparc | Ted Unangst | |
2016-09-01 | Update list of ioctls for the audio promise. Suggested by jmc@, thanks. | Alexandre Ratchov | |
2016-09-01 | remove sparc support | Ted Unangst | |
2016-09-01 | Mention explicit_bzero(3); ok jmc | Martin Natano | |
2016-09-01 | retire sparc | Ted Unangst | |
2016-09-01 | retire sparc | Ted Unangst | |
2016-09-01 | retire the sparc library code | Ted Unangst | |
2016-08-31 | Crank minor due to API addition | Bob Beck | |
2016-08-31 | Avoid undefined-behavior right-shifting by a word-size # of bits. | Brent Cook | |
Found with STACK, originally from OpenSSL, ok @beck | |||
2016-08-31 | Bring in functions used by stunnel and exim from BoringSSL - this brings | Bob Beck | |
in X509_check_host, X509_check_email, X509_check_ip, and X509_check_ip_asc, with some cleanup on the way in by myself and jsing@ ok bcook@ | |||
2016-08-31 | Fix some very unnecessary convoultion. | Bob Beck | |
ok krw@ | |||
2016-08-30 | Use struct stat for storing attributes in fusebufs, because using struct | Martin Natano | |
vattr in userspace is suboptimal as some related helpers are not available, e.g. VATTR_NULL() and IFTOVT(). The conversion is now done in the kernel where it belongs. As a side effect the <sys/vnode.h> include can be removed from libfuse. tweaks and ok guenther | |||
2016-08-30 | Use a constant format string and output the variable part with %s | Philip Guenther | |
ok krw@ millert@ | |||
2016-08-30 | Use O_CLOEXEC when opening fds local to a function | Philip Guenther | |
ok jca@ krw@ | |||
2016-08-29 | Store the return value of mbrtowc() in a size_t, not int. | Todd C. Miller | |
OK schwarze@ | |||
2016-08-28 | Don't call lstat() before readlink() just to see if it's a symlink, | Philip Guenther | |
as readlink() will tell you that more cheaply. ok millert@ | |||
2016-08-27 | Stop recommending the non-standard and slightly dangerous fgetln(3). | Ingo Schwarze | |
Recommend POSIX getline(3) instead. | |||
2016-08-27 | When a precision is specified for a string format use strnlen() | Todd C. Miller | |
to determine the length instead of doing it manually. OK schwarze@ | |||
2016-08-27 | Be more strict when parsing TLS extensions. | Joel Sing | |
Based on a diff from Kinichiro Inoguchi. ok beck@ | |||
2016-08-27 | improve revision 1.2: in unusual cases, fgetwc(3) can succeed | Ingo Schwarze | |
even though ferror(3) is already set; also from Andrey Chernov <ache at freebsd dot org>; OK millert@ | |||
2016-08-27 | Pull in <stdio.h> for NULL | Philip Guenther | |
ok deraadt@ | |||
2016-08-27 | Pull in <stdio.h> for NULL | Philip Guenther | |
ok deraadt@ | |||
2016-08-27 | Pull in <stdio.h> for NULL | Philip Guenther | |
ok deraadt@ | |||
2016-08-27 | Pull in <sys/time.h> for struct timespec | Philip Guenther | |
ok deraadt@ | |||
2016-08-26 | Pull in <time.h> for clock_gettime() | Philip Guenther | |
ok deraadt@ | |||
2016-08-25 | After read errors, fgetln(3) sometimes succeeded (returning non-NULL) | Ingo Schwarze | |
and failed (setting errno and ferror(3)) both at the same time. That's a bad idea in general, and here in particular since returning partial lines was neither reliable (sometimes, you got NULL anyway) nor predictable (almost always, the line would be truncated long before the actual read error). Instead, on read failure, fail properly and always return NULL. Issue found in a discussion with Andrey Chernov <ache at freebsd dot org> who finally agreed to move FreeBSD into the same direction. The fix is joint work with and OK by millert@. | |||
2016-08-24 | set the error indicator on malloc(3) failure; | Ingo Schwarze | |
from Andrey Chernov <ache at freebsd dot org>; OK millert@ | |||
2016-08-22 | Various clean up and reorganisation of the connection info handling code. | Joel Sing | |
In particular, rename tls_free_conninfo() to tls_conninfo_free() and make it a real free function. Rename tls_get_conninfo() to tls_conninfo_populate() and have it allocate the struct tls_conninfo (after freeing any existing one). ok beck@ | |||
2016-08-22 | Stick with the usual 'if NULL return NULL' idiom. | Joel Sing | |
ok beck@ | |||
2016-08-22 | Bump TLS_API due to the addition of server side SNI functions. | Joel Sing | |
2016-08-22 | Bump libtls minor due to the addition of symbols. | Joel Sing | |
2016-08-22 | Provide an API that enables server side SNI support - add the ability to | Joel Sing | |
provide additional keypairs (via tls_config_add_keypair_{file,mem}()) and allow the server to determine what servername the client requested (via tls_conn_servername()). ok beck@ | |||
2016-08-22 | Create contexts for server side SNI - these include the additional SSL_CTX | Joel Sing | |
that is required for certificate switching with libssl and the certificate itself so that we can match against the subject and SANs. Hook up the servername callback and switch to the appropriate SSL_CTX if we find a matching certificate. ok beck@ | |||
2016-08-21 | bugfix: when fgetwc(3) fails, fgetwln(3) must fail as well; | Ingo Schwarze | |
OK jca@ martijn@ millert@ | |||
2016-08-21 | fix obvious typo in the .Dt section number | Ingo Schwarze | |
2016-08-20 | Sync connect_wait() example with its real usage in ftp(1). | Todd C. Miller | |