summaryrefslogtreecommitdiff
path: root/usr.sbin/smtpd/ssl.h
AgeCommit message (Expand)Author
2022-02-18Revert changes to use the new libtls signer apiTodd C. Miller
2022-02-12use new libtls signer apiEric Faurot
2021-05-26remove unused codeEric Faurot
2021-04-11do not build unused code and remove uneeded dependency on libm.Eric Faurot
2021-03-05Start porting smtpd to libtls.Eric Faurot
2019-09-18Implement server certificate validation in smtp(1).Eric Faurot
2016-04-21Use automatic DH parameters, instead of fixed ones. Also disable DHE byJoel Sing
2015-12-13refactor a bit to move the SNI handling away from smtp_session into smtpGilles Chehade
2015-12-12remove CA from pki and no longer allow specifying a CA with 'pki' keyword.Gilles Chehade
2015-12-12allow overriding the default cipher-suiteGilles Chehade
2015-12-12bump DH params to 2048, it's been part of smtpd releases for a long timeGilles Chehade
2015-12-12pki name is a hostname not a pathGilles Chehade
2015-12-12whitespacesGilles Chehade
2015-12-01prepare the ground for the CA certificate handling refactor, this commitGilles Chehade
2015-10-21Use SSL_CTX_set_ecdh_auto() instead of rolling our own version.Joel Sing
2015-01-22LibreSSL now supports loading of CA certificates from memory, replaceReyk Floeter
2015-01-16SSL_CTX_use_certificate_chain() has been added to LibreSSL and thereReyk Floeter
2014-05-20Unify the SSL privsep key loading functions.Reyk Floeter
2014-05-20Deep down inside OpenSSL, err... LibreSSL, RSA_set_ex_data attempts toReyk Floeter
2014-04-29Implement RSA privilege separation for OpenSMTPD, based on my previousReyk Floeter
2014-04-29It is only required to load the keys and certs into the same SSLReyk Floeter
2014-02-04pki code cleanupEric Faurot
2013-11-28fix loading of passphrase-protected keys.Eric Faurot
2013-11-06Much much improved config parser and related changes.Eric Faurot
2013-07-19tls perfect forward secrecy with ecdheEric Faurot
2013-01-26Sync with our smtpd repo:Gilles Chehade