src - OpenBSD base system

Age	Commit message (Expand)	Author
2020-09-15	set error_depth and current_cert to make more legacy callbacks that don't check	Bob Beck
2020-09-15	Deduplicate the time validation code between the legacy and new	Bob Beck
2020-09-15	ifdef out code that is no longer used in here. once we are certain	Bob Beck
2020-09-15	Cleanup/simplify SSL_set_ssl_method().	Joel Sing
2020-09-15	Mop up the get_ssl_method function pointer.	Joel Sing
2020-09-14	Move state initialisation from SSL_clear() to ssl3_clear().	Joel Sing
2020-09-14	Cleanup and simplify SSL_set_session().	Joel Sing
2020-09-14	Avoid NULL deref SSL_{,CTX_}set_ciphersuites	Theo Buehler
2020-09-14	simplify RETURN VALUES for x509_verify(3) after beck@ made the rules	Ingo Schwarze
2020-09-14	Add initial man page for new x509_verify chain validator	Bob Beck
2020-09-14	Set error if we are given an NULL ctx in x509_verify, and set error	Bob Beck
2020-09-14	nuke a stray space	Theo Buehler
2020-09-14	Fix potential leak when tmpext fails to be added to	Bob Beck
2020-09-14	remove unneeded variable "type".	Bob Beck
2020-09-14	Don't leak names on success	Bob Beck
2020-09-14	remove unneded variable "time1"	Bob Beck
2020-09-14	remove unneded variable "time"	Bob Beck
2020-09-14	fix bug introduced on review where refactor made it possible to	Bob Beck
2020-09-14	re-enable new x509 chain verifier as the default	Bob Beck
2020-09-14	Correctly fix double free introduced on review.	Bob Beck
2020-09-14	Fix double free - review moved the pop_free of roots to x509_verify_ctx_free	Bob Beck
2020-09-14	revert previous, need to fix a problem	Bob Beck
2020-09-14	Enable the use of the new x509 chain validator by default.	Bob Beck
2020-09-13	Implement SSL_{CTX_,}set_ciphersuites().	Joel Sing
2020-09-13	Add new x509 certificate chain validator in x509_verify.c	Bob Beck
2020-09-13	Improve handling of BIO_read()/BIO_write() failures in the TLSv1.3 stack.	Joel Sing
2020-09-13	Spell out n as en for consistency with other parts of the page.	Theo Buehler
2020-09-13	%lln is percent ell ell n (not dee).	Claudio Jeker
2020-09-12	Use the correct type for tls1_set_ec_id()	Theo Buehler
2020-09-12	Simplify tls1_set_ec_id() a bit	Theo Buehler
2020-09-12	Unindent a bit of code that performs a few too many checks to	Theo Buehler
2020-09-12	Avoid an out-of-bounds access in BN_rand()	Theo Buehler
2020-09-12	Change over to use the new x509 name constraints verification.	Bob Beck
2020-09-12	Fix byte order handling for DLT_LOOP links	kn
2020-09-12	Include machine/endian.h in gost2814789.c	Kinichiro Inoguchi
2020-09-11	Add x509_constraints.c - a new implementation of x509 name constraints, with	Bob Beck
2020-09-11	Remove cipher_list_by_id.	Joel Sing
2020-09-11	Simplify SSL_get_ciphers().	Joel Sing
2020-09-11	Rename ssl_cipher_is_permitted()	Joel Sing
2020-09-11	Some SSL_AD_* defines snuck into the TLSv1.3 code - replace them with	Joel Sing
2020-09-11	Add issuer cache, to be used by upcoming changes to validation code.	Bob Beck
2020-09-11	Various ciphers related clean up.	Joel Sing
2020-09-09	Set alpn_selected_len = 0 when alpn_selected is NULL	Kinichiro Inoguchi
2020-09-09	Import latest OPENSSL_NO_* flags from OpenSSL 1.1.1g	Kinichiro Inoguchi
2020-09-08	Mention that EC_KEY_get0_public_key returns a public key.	Theo Buehler
2020-09-07	Garbage collect renew_ticket in tls_decrypt_ticket	Theo Buehler
2020-09-07	sync a couple of minor fixes (no API/ABI change) to bring libfido2	Damien Miller
2020-09-06	For page-sized and larger allocations do not put the pages we're	Otto Moerbeek
2020-09-04	Create ERRORS section for ober_read_elements.	Martijn van Duren
2020-09-03	Missed one case of errno not being set in previous.	Martijn van Duren