summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2020-06-07In the libc resolver function asr_run(), clear the result buffer everytime,Theo de Raadt
2020-06-06Implement a rolling hash of the ClientHello message, Enforce RFC 8446Bob Beck
2020-06-05Remove redundant codedenis
2020-06-05Add a custom copy handler for AES key wrapTheo Buehler
2020-06-05Use IANA allocated GOST ClientCertificateTypes.Joel Sing
2020-06-05Stop sending GOST R 34.10-94 as a CertificateType.Joel Sing
2020-06-05Handle GOST in ssl_cert_dup().Joel Sing
2020-06-05Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.Joel Sing
2020-06-05Allow GOST R 34.11-2012 in PBE/PBKDF2/PKCS#5.Joel Sing
2020-06-05Add OIDs for HMAC using Streebog (GOST R 34.11-2012) hash function.Joel Sing
2020-06-05Add a few more errors to help debugging.Joel Sing
2020-06-05Add support for additional GOST curves.Joel Sing
2020-06-05Remove remaining error *_str_functs[]Joel Sing
2020-06-05Apply some style(9).Joel Sing
2020-06-05One error file per directory is plenty.Joel Sing
2020-06-05HID parser could overflow if a malicious device (potentially USB) providedJonathan Gray
2020-06-04When X509_ATTRIBUTE_create() receives an invalid NID (e.g., -1), returnIngo Schwarze
2020-06-04minor polishing:Ingo Schwarze
2020-06-04Align tls13_server_select_certificate() withTheo Buehler
2020-06-04Improve client certificate selection for TLSv1.3Theo Buehler
2020-06-04mention that TLS_method(3) also supports TLSv1.3;Ingo Schwarze
2020-06-04Collapse the x509v3 directory into x509.Joel Sing
2020-06-04new manual page PKCS7_add_attribute(3);Ingo Schwarze
2020-06-03Properly document PKCS7_final(3), which was already mentionedIngo Schwarze
2020-06-02Remove const modifier in return type of tls13_handshake_active_state()Theo Buehler
2020-06-02distracting whitespaceTheo Buehler
2020-06-01Split the handling of post handshake handshake messages into itsTheo Buehler
2020-06-01Remove expired certificate, ok tb@Stuart Henderson
2020-06-01Send an illegal_parameter alert if a client sends us invalid DH keyTheo Buehler
2020-06-01Add a mechanism to set an alert in those parts of the read half ofTheo Buehler
2020-06-01bump to LibreSSL 3.2.1Brent Cook
2020-05-31Replace ssl_max_server_version() with ssl_downgrade_max_version()Joel Sing
2020-05-31When building a chain look for non-expired certificates first.Joel Sing
2020-05-31Correct downgrade sentinels when a version pinned method is in use.Joel Sing
2020-05-31Fix printing long doubles on architectures with hm and lm bits.mortimer
2020-05-31Remove an outdated BUGS section.Visa Hankala
2020-05-29Add a fix from ncurses 20200523 via Hiltjo Posthuma that preventsNicholas Marriott
2020-05-29Improve server certificate selection for TLSv1.3.Joel Sing
2020-05-29Handle the case where we receive a valid 0 byte application data record.Joel Sing
2020-05-29Wire up the servername callback in the TLSv1.3 server.Joel Sing
2020-05-29Mop up servername_done, which is unused.Joel Sing
2020-05-29from edgar pettijohn: correct return type in pcap_open_live.3;Jason McIntyre
2020-05-27This patch fixes one bug and one instance of undesirable behaviour.Ingo Schwarze
2020-05-27document PKCS7_dataFinal(3);Ingo Schwarze
2020-05-27add support for pcap_breakloop when reading packets from files.David Gwynne
2020-05-26minor cleanup ahead of the following work:Ingo Schwarze
2020-05-26Add additional length checks for TLSv1.3 plaintext and inner plaintext.Joel Sing
2020-05-25from edgar pettijohn:Jason McIntyre
2020-05-25Add missing .Xr and .Nm, reword and simplify few sentencesAlexandre Ratchov
2020-05-24Fix some stylistic nits from jsing.Theo Buehler