summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2021-07-02Add a roff comment saying that X509_name_cmp(3) is intentionallyIngo Schwarze
2021-07-01Merge SSL_METHOD_INTERNAL into SSL_METHOD.Joel Sing
2021-06-30more trivial .Ar -> .Fa replacements in syscall manualsIngo Schwarze
2021-06-30use .Fa rather than .Ar; patch from me at EmilEngler dot comIngo Schwarze
2021-06-30Prepare to provide SSL_get_signature_nid() and friends.Joel Sing
2021-06-30Move some structs from public to private headers.Joel Sing
2021-06-30document and deprecate the macros X509_extract_key(3)Ingo Schwarze
2021-06-30Correct sigalg hash usage when signing content for client verify.Joel Sing
2021-06-29Pull sigalg selection up into ssl3_send_client_verify().Joel Sing
2021-06-29Track sigalg used by ourselves and our peer in the legacy stack.Joel Sing
2021-06-29Pull up and dedup the TLS version check in ssl_sigalg_pkey_ok().Joel Sing
2021-06-29Simplify RSA PSS key size comment.Joel Sing
2021-06-29Use appropriate TLS version when building client sigalg extensions.Joel Sing
2021-06-29Change ssl_sigalg_from_value() to take SSL * instead of a TLS version.Joel Sing
2021-06-29Make various sigalg functions static now that they're only used internally.Joel Sing
2021-06-29Convert legacy stack server to ssl_sigalg_for_peer().Joel Sing
2021-06-29Convert legacy stack client to ssl_sigalg_for_peer().Joel Sing
2021-06-29Provide a ssl_sigalg_for_peer() function and use in the TLSv1.3 code.Joel Sing
2021-06-29Move the RSA-PSS check for TLSv1.3 to ssl_sigalg_pkey_ok().Joel Sing
2021-06-29Factor out handling of legacy default signature algorithms.Joel Sing
2021-06-29Mop up now unused variables.Joel Sing
2021-06-29Require a ServerHello following a HelloRetryRequest to use the same cipher.Joel Sing
2021-06-29Reject zero-length non-application data fragments in the legacy stack.Joel Sing
2021-06-29more precision because the argument is signed,Ingo Schwarze
2021-06-29function args must not use .Ar and EDOM and ERANGE require .Er;Ingo Schwarze
2021-06-29insert missing .NsIngo Schwarze
2021-06-29basic mdoc(7) macro cleanup; patch from me at EmilEngler dot comIngo Schwarze
2021-06-28Use the order action->sender == ctx->mode everywhere for consistency.Theo Buehler
2021-06-28ctx->alert is not a boolean, so compare it explicitly against 0.Theo Buehler
2021-06-28The state machine now takes care of setting the legacy state,Theo Buehler
2021-06-28Expand info callback support for TLSv1.3Theo Buehler
2021-06-27Track the sigalgs used by ourselves and our peer.Joel Sing
2021-06-27Have ssl3_send_client_verify() pass *pkey to called functions.Joel Sing
2021-06-27Change ssl_sigalgs_from_value() to perform sigalg list selection.Joel Sing
2021-06-27Rename ssl_sigalg() to ssl_sigalg_from_value().Joel Sing
2021-06-27Change ssl_sigalgs_build() to perform sigalg list selection.Joel Sing
2021-06-27Tidy some comments and simplify some code.Joel Sing
2021-06-27Keep sigalg initialiser order consistent - key type, then hash.Joel Sing
2021-06-27Correct handling of SSL_OP_NO_DTLSv1.Joel Sing
2021-06-26Fix .Xr order. From mandoc -Tlint.Theo Buehler
2021-06-24alarm(3): remove superfluous pointercheloha
2021-06-23Garbage collect prototoype for ssl_parse_serverhello_tlsext() whichTheo Buehler
2021-06-22zap wonky commas;Jason McIntyre
2021-06-22Clarify tls_config_set_*_file() file I/O semanticskn
2021-06-20We need to store the flagged passed to sigsetjmp(3) and use it inMark Kettenis
2021-06-20scan_scaled: fix rescaling for negative numbersTheo Buehler
2021-06-19C version of fabs(), for nowTheo de Raadt
2021-06-19Correctly handle epoch wrapping in dtls1_get_bitmap().Joel Sing
2021-06-19Provide the ability to set the initial DTLS epoch value.Joel Sing
2021-06-19Initialise the epoch for the DTLS processed and unprocessed queues.Joel Sing