summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2000-03-02$OpenBSD$Todd T. Fries
2000-02-24fread() of /dev/random reads an entire huge stdio buffer, instead of the 32Theo de Raadt
bytes that we actually need, thus wasting a lot of system entropy. found by alecm@coyote.uk.sun.com, passed on by Pete.Zaytsev@EBay.Sun.COM
1999-11-23do not assume shell scripts are +x; dTheo de Raadt
1999-09-29import openssl-0.9.7-beta1Bob Beck
1999-09-29new files for OpenSSL 0.9.4Bob Beck
1999-09-29OpenSSL 0.9.4 mergeBob Beck
1999-09-29import openssl-0.9.7-beta1Bob Beck
1999-09-28do not put a bad crypt() in libcrypt, it is in libcTheo de Raadt
1999-09-26crank to version 2 for release, in case any dependencies have crept inTheo de Raadt
1998-10-05Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD buildryker
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible.
2016-09-01delete wrong cvs $ tagsTheo de Raadt
2016-09-01bumpOtto Moerbeek
2016-09-01Less lock contention by using more pools for mult-threaded programs.Otto Moerbeek
tested by many (thanks!) ok tedu, guenther@
2016-09-01black magic for sparc page size can goTed Unangst
2016-09-01remove references to sparcTed Unangst
2016-09-01Update list of ioctls for the audio promise. Suggested by jmc@, thanks.Alexandre Ratchov
2016-09-01remove sparc supportTed Unangst
2016-09-01Mention explicit_bzero(3); ok jmcMartin Natano
2016-09-01retire sparcTed Unangst
2016-09-01retire sparcTed Unangst
2016-09-01retire the sparc library codeTed Unangst
2016-08-31Crank minor due to API additionBob Beck
2016-08-31Avoid undefined-behavior right-shifting by a word-size # of bits.Brent Cook
Found with STACK, originally from OpenSSL, ok @beck
2016-08-31Bring in functions used by stunnel and exim from BoringSSL - this bringsBob Beck
in X509_check_host, X509_check_email, X509_check_ip, and X509_check_ip_asc, with some cleanup on the way in by myself and jsing@ ok bcook@
2016-08-31Fix some very unnecessary convoultion.Bob Beck
ok krw@
2016-08-30Use struct stat for storing attributes in fusebufs, because using structMartin Natano
vattr in userspace is suboptimal as some related helpers are not available, e.g. VATTR_NULL() and IFTOVT(). The conversion is now done in the kernel where it belongs. As a side effect the <sys/vnode.h> include can be removed from libfuse. tweaks and ok guenther
2016-08-30Use a constant format string and output the variable part with %sPhilip Guenther
ok krw@ millert@
2016-08-30Use O_CLOEXEC when opening fds local to a functionPhilip Guenther
ok jca@ krw@
2016-08-29Store the return value of mbrtowc() in a size_t, not int.Todd C. Miller
OK schwarze@
2016-08-28Don't call lstat() before readlink() just to see if it's a symlink,Philip Guenther
as readlink() will tell you that more cheaply. ok millert@
2016-08-27Stop recommending the non-standard and slightly dangerous fgetln(3).Ingo Schwarze
Recommend POSIX getline(3) instead.
2016-08-27When a precision is specified for a string format use strnlen()Todd C. Miller
to determine the length instead of doing it manually. OK schwarze@
2016-08-27Be more strict when parsing TLS extensions.Joel Sing
Based on a diff from Kinichiro Inoguchi. ok beck@
2016-08-27improve revision 1.2: in unusual cases, fgetwc(3) can succeedIngo Schwarze
even though ferror(3) is already set; also from Andrey Chernov <ache at freebsd dot org>; OK millert@
2016-08-27Pull in <stdio.h> for NULLPhilip Guenther
ok deraadt@
2016-08-27Pull in <stdio.h> for NULLPhilip Guenther
ok deraadt@
2016-08-27Pull in <stdio.h> for NULLPhilip Guenther
ok deraadt@
2016-08-27Pull in <sys/time.h> for struct timespecPhilip Guenther
ok deraadt@
2016-08-26Pull in <time.h> for clock_gettime()Philip Guenther
ok deraadt@
2016-08-25After read errors, fgetln(3) sometimes succeeded (returning non-NULL)Ingo Schwarze
and failed (setting errno and ferror(3)) both at the same time. That's a bad idea in general, and here in particular since returning partial lines was neither reliable (sometimes, you got NULL anyway) nor predictable (almost always, the line would be truncated long before the actual read error). Instead, on read failure, fail properly and always return NULL. Issue found in a discussion with Andrey Chernov <ache at freebsd dot org> who finally agreed to move FreeBSD into the same direction. The fix is joint work with and OK by millert@.
2016-08-24set the error indicator on malloc(3) failure;Ingo Schwarze
from Andrey Chernov <ache at freebsd dot org>; OK millert@
2016-08-22Various clean up and reorganisation of the connection info handling code.Joel Sing
In particular, rename tls_free_conninfo() to tls_conninfo_free() and make it a real free function. Rename tls_get_conninfo() to tls_conninfo_populate() and have it allocate the struct tls_conninfo (after freeing any existing one). ok beck@
2016-08-22Stick with the usual 'if NULL return NULL' idiom.Joel Sing
ok beck@
2016-08-22Bump TLS_API due to the addition of server side SNI functions.Joel Sing
2016-08-22Bump libtls minor due to the addition of symbols.Joel Sing
2016-08-22Provide an API that enables server side SNI support - add the ability toJoel Sing
provide additional keypairs (via tls_config_add_keypair_{file,mem}()) and allow the server to determine what servername the client requested (via tls_conn_servername()). ok beck@
2016-08-22Create contexts for server side SNI - these include the additional SSL_CTXJoel Sing
that is required for certificate switching with libssl and the certificate itself so that we can match against the subject and SANs. Hook up the servername callback and switch to the appropriate SSL_CTX if we find a matching certificate. ok beck@
2016-08-21bugfix: when fgetwc(3) fails, fgetwln(3) must fail as well;Ingo Schwarze
OK jca@ martijn@ millert@
2016-08-21fix obvious typo in the .Dt section numberIngo Schwarze
2016-08-20Sync connect_wait() example with its real usage in ftp(1).Todd C. Miller