summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2022-02-10introduce support for storing capability databases in /etc/login.conf.d;Robert Nagy
2022-02-08Plug a long standing leak in libtls CRL handlingTheo Buehler
2022-02-08Change second argument of x25519_ge_scalarmult_base() fromTheo Buehler
2022-02-08Using FILL_KPROC() from sysctl.h after rev 1.223 requires a definitionJonathan Gray
2022-02-07Avoid a NULL dereference in BN_mod_exp2_mont()Theo Buehler
2022-02-07Check for zero modulus in BN_MONT_CTX_set().Theo Buehler
2022-02-06Remove i <= 0 checks from SSL_get_error()Joel Sing
2022-02-06Handle zero byte reads/writes that trigger handshakes in the TLSv1.3 stack.Joel Sing
2022-02-06remove please from manual pagesJonathan Gray
2022-02-05Switch TLSv1.3 cipher names from AEAD- to OpenSSL's TLS_Theo Buehler
2022-02-05Provide logbl(3) when long double is doubleGeorge Koehler
2022-02-05Bye bye S3I.Joel Sing
2022-02-04Bump libressl's version in pkgconfig to 2.0.0Theo Buehler
2022-02-04Remove a strange inheritance check from addr_validate_path_internal()Theo Buehler
2022-02-04Fix capitalization of ChaCha20Theo Buehler
2022-02-03Fix copy-paste error: X509_V_ERR_CRL_SIGNATURE_FAILURE means that theTheo Buehler
2022-02-03Cleanup/simplify ssl_cert_type()Joel Sing
2022-02-01Provide our own signature padding defines.Joel Sing
2022-02-01Revise signer callback interface.Joel Sing
2022-01-31Inline RELOC_* into boot_md.c and simplify the code based on whatPhilip Guenther
2022-01-31Update libexpat to 2.4.4. This fixes CVE-2022-23852 and CVE-2022-23990.Alexander Bluhm
2022-01-29Add limits.h for INT_MAX in tls_signer.cKinichiro Inoguchi
2022-01-28Error check for sk_push in libsslKinichiro Inoguchi
2022-01-28Error check for sk_push in libsslKinichiro Inoguchi
2022-01-28Only memcpy() into imsg->data if datalen is not 0. Passing a NULL pointerClaudio Jeker
2022-01-28When it's the possessive of 'it', it's spelled "its", without thePhilip Guenther
2022-01-28Expose tls_signer_error()Joel Sing
2022-01-27sort includes as usualTheo Buehler
2022-01-27Do not depend on engine.h pulling in err.h and evp.hTheo Buehler
2022-01-26whitespaceTheo Buehler
2022-01-25minor bump after api additiomEric Faurot
2022-01-25Introduce a signer interface intented to make TLS privsep simplerEric Faurot
2022-01-25Rewrite paragraph to refer to EVP_CIPHER_CTX_new() and HMAC_CTX_new()Theo Buehler
2022-01-25Remove some HMAC_CTX_init() remnants in HMAC(3).Theo Buehler
2022-01-25Fix another return 0 bug in SSL_shutdown()Theo Buehler
2022-01-25Avoid an infinite loop in SSL_shutdown()Theo Buehler
2022-01-24Document X509_V_ERR_UNNESTED_RESOURCE. Previous version looked goodTheo Buehler
2022-01-24Garbage collect unused ret in ssl3_get_new_session_ticket()Theo Buehler
2022-01-24In ssl3_get_server_key_exchange() switch a 'goto err' toTheo Buehler
2022-01-24Avoid use of uninitialized in tlsext_sni_server_parse()Theo Buehler
2022-01-24Garbage collect the unused rv in tls1_check_ec_server_key() andTheo Buehler
2022-01-22Use memmove instead of memcpy for overlapping memoryKinichiro Inoguchi
2022-01-22Use memmove instead of memcpy for overlapping memoryKinichiro Inoguchi
2022-01-22X509_GET_PUBKEY(3) return value check in libcryptoKinichiro Inoguchi
2022-01-22X509_GET_PUBKEY(3) return value check in libcryptoKinichiro Inoguchi
2022-01-22X509_GET_PUBKEY(3) return value check in libcryptoKinichiro Inoguchi
2022-01-22X509_GET_PUBKEY(3) return value check in libcryptoKinichiro Inoguchi
2022-01-22X509_GET_PUBKEY(3) return value check in libcryptoKinichiro Inoguchi
2022-01-21In 1999 fd_set overflowing beyond FD_SETSIZE became enough of a problem that ITheo de Raadt
2022-01-21Document EAGAIN error return, as specified by POSIX.Todd C. Miller