summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2022-07-26Do not pass input length <= 0 to the cipher handlersTheo Buehler
2022-07-26Only allow changing the domainname (from empty) before securelevel increase.Theo de Raadt
2022-07-26moncontrol(3): remove hertz() fallback functionScott Soule Cheloha
2022-07-25Simplify wctype() and wctype_l(): we have one set of classificationPhilip Guenther
2022-07-25fix indentTheo Buehler
2022-07-25If a command or interface first appeared in PWB/UNIX, UNIX System III orJonathan Gray
2022-07-24Plug leak in X509V3_add1_i2d()Theo Buehler
2022-07-24Prepare to resurrect TS_RESP_CTX_set_time_cb()Theo Buehler
2022-07-24Prepare to provide TS_VERIFY_CTX accessorsTheo Buehler
2022-07-24Prepare to provide various TS_STATUS_INFO accessorsTheo Buehler
2022-07-24Align PKCS12_key_gen_uni() with OpenSSLTheo Buehler
2022-07-24Minor fixes in PKCS12_parse()Theo Buehler
2022-07-24Per RFC 7292, safeContentsBag is a SEQUENCE OF, not a SET OFTheo Buehler
2022-07-24Clear key on exit in PKCS12_gen_mac()Theo Buehler
2022-07-24Plug a leak in PKCS12_setup_mac()Theo Buehler
2022-07-24Move cipher_id bsearch functions back to the bottom of the file.Joel Sing
2022-07-24Set NULL BIOs for QUIC.Joel Sing
2022-07-24Provide record layer callbacks for QUIC.Joel Sing
2022-07-24Move tls13_phh_done_cb() after tl13_phh_received_cb().Joel Sing
2022-07-24Provide QUIC encryption levels.Joel Sing
2022-07-24Rely on tlsext_parse() to set a decode_error alertTheo Buehler
2022-07-24Start making ts opaqueTheo Buehler
2022-07-23timecounting: use full 96-bit product when computing elapsed timeScott Soule Cheloha
2022-07-23Fix file names in comments.Theo Buehler
2022-07-22Convert TLS transcript from BUF_MEM to tls_buffer.Joel Sing
2022-07-22Add read and write support to tls_buffer.Joel Sing
2022-07-22Simplify tls13_server_encrypted_extensions_recvTheo Buehler
2022-07-22Remove redundant length checks in parse functionsTheo Buehler
2022-07-22avoid use after freeJonathan Gray
2022-07-21repair error section; Martin VahlensieckTheo de Raadt
2022-07-20Simplify tlsext_supported_groups_server_parseTheo Buehler
2022-07-20Drop some unnecessary parentheses.Theo Buehler
2022-07-20Copy alpn_selected using CBSTheo Buehler
2022-07-20Copy alpn_client_proto_list using CBS in SSL_new()Theo Buehler
2022-07-20Validate protocols in SSL{_CTX,}_set_alpn_protos()Theo Buehler
2022-07-20Rewrite SSL{_CTX,}_set_alpn_protos() using CBSTheo Buehler
2022-07-20Change various ALPN related internal struct membersTheo Buehler
2022-07-20Factor out ALPN extension format checkTheo Buehler
2022-07-20bump major due to struct size change on ILP32 architecturesTheo Buehler
2022-07-20Revert zlib.h r1.7Theo Buehler
2022-07-20Remove tls_buffer_set_data() and remove/revise callers.Joel Sing
2022-07-20Correct server-side handling of TLSv1.3 key updates.Joel Sing
2022-07-19Objects are only set to ready if both their parent region and theirMartijn van Duren
2022-07-19Disallow MD5 and SHA-1 HMACs depending on the security levelTheo Buehler
2022-07-19Avoid unnecessary loops in BN_generate_prime_ex()Theo Buehler
2022-07-19Use sysctl CTL_NET.PF_INET6 to check if IPv6 is available or not.Claudio Jeker
2022-07-18ypbinding should not be intrude to application namespace.Theo de Raadt
2022-07-18use same way of reporting error as yp_bind.cTheo de Raadt
2022-07-17Handle X509_check_purpose(3) and EVP_get_digestbyobj(3)Klemens Nanni
2022-07-17Add initial support for ESSCertIDv2 verificationKlemens Nanni