summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2014-08-20Remove userland bits related to the crypto(4) interface; ok deraadtMike Belopuhov
2014-08-19Three independent typos for `independent' or `independently'.Miod Vallat
2014-08-18replace more ROTATE macros with plain-old C code.bcook
2014-08-18remove return value from HOST_c2l/l2c macrosbcook
2014-08-18a small tweak to improve malloc in multithreaded programs. we don't needTed Unangst
2014-08-18Add mention of execvpe() setting errno on failure.Philip Guenther
2014-08-16Cover execvpe() in the description of what the envp arg means.Philip Guenther
2014-08-16only build the getrandom path if SYS_getrandom is defined.bcook
2014-08-16Fixed typo in "distinct".Tobias Stoeckmann
2014-08-16getrandom(2) support for getentropy_linuxbcook
2014-08-15use void * instead of char *. ok jsingTed Unangst
2014-08-15XPG requires insque() and remque() to work with linear lists and not justPhilip Guenther
2014-08-15Use O_CLOEXEC wherever we open a file and then call fcntl(F_SETFD, FD_CLOEXEC)Philip Guenther
2014-08-14fixed overrid(d)en typoTobias Stoeckmann
2014-08-13munmap correct object in (extremely unlikely, and effectively terminal)Theo de Raadt
2014-08-12Merge a patch that i successfully pushed to OpenSSL,Ingo Schwarze
2014-08-12Replace intrinsic ROTATE macros with an inline.bcook
2014-08-11Guard RSA / RC4-5 ASM when NO_ASM is not definedbcook
2014-08-11Check the return value of sk_SSL_CIPHER_new_null(), since it allocatesJoel Sing
2014-08-11Unchecked memory allocation and potential leak upon error inMiod Vallat
2014-08-11Remove now-unused SSL2_STATE as well as ssl2-specific state machine values.Miod Vallat
2014-08-11Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed wayJoel Sing
2014-08-11Provide a ssl3_get_cipher_by_id() function that allows ciphers to be lookedJoel Sing
2014-08-10Tweak cipher list comments and add missing cipher value comments.Joel Sing
2014-08-10Remove disabled (weakened export and non-ephemeral DH) cipher suites fromJoel Sing
2014-08-10Since we no longer need to support SSLv2-style cipher lists, startJoel Sing
2014-08-10debug level test for clock_gettime() calls should matchJonathan Gray
2014-08-10AF_IMPLINK and AF_BLUETOOTH are gonePhilip Guenther
2014-08-10Only need <stdint.h> and not all of <inttypes.h> herePhilip Guenther
2014-08-09Only need <stdint.h> and not <inttypes.h> herePhilip Guenther
2014-08-08Fix CVE-2014-3507, avoid allocating and then leaking a fresh fragmentPhilip Guenther
2014-08-08Fix CVE-2014-3508, pretty printing and OID validation:Philip Guenther
2014-08-07Correct test reversed during merge of fix for CVE-2014-3509Philip Guenther
2014-08-07Fix CVE-2014-3506, DTLS handshake message size checks. FromPhilip Guenther
2014-08-07Oops, revert changes commited by mistake. The previous commit was supposedMiod Vallat
2014-08-07When you expect a function to return a particular value, don't put a commentMiod Vallat
2014-08-07Fix CVE-2014-3511; TLS downgrade, verbatim diffTheo de Raadt
2014-08-07merge CVE-2014-3510; Fix DTLS anonymous EC(DH) denial of serviceTheo de Raadt
2014-08-06merge fix for CVE-2014-3509 -- basically a missing s->hit check; ok guentherTheo de Raadt
2014-08-06Prevent a possible use after free by mimicing the s3_srvr.c fixes contributed byMiod Vallat
2014-08-06Allow B64_EOF to follow a base64 padding character. This restores previousJoel Sing
2014-08-06Correct error checks in EVP_read_pw_string_min(): UI_add_input_string()Philip Guenther
2014-08-06Add support for loading the public/private key from memory, rather thanJoel Sing
2014-08-05Add $OpenBSD$ tags.Joel Sing
2014-08-04Implement ressl_accept_socket, which allocates a new server connectionJoel Sing
2014-08-04Return -1 on error (not 1).Joel Sing
2014-08-04A ressl server needs different configuration from a ressl client - provideJoel Sing
2014-08-04Provide a function that returns a server connection context.Joel Sing
2014-08-04Provide a utility function for loading a private/public keypair.Joel Sing
2014-08-04Improve ressl_{read,write} handling of non-blocking reads/writes.Joel Sing