summary refs log tree commit diff
Commit message (Collapse)AuthorAge
* Merge LibreSSL 3.5.0June McEnroe2022-02-27
|\
| * Import LibreSSL 3.5.0June McEnroe2022-02-27
| |
* | tls: Revert accidentally(?) reverted upstream 3.4.2June McEnroe2021-11-29
| |
* | Merge LibreSSL 3.4.2June McEnroe2021-11-29
|\|
| * Import LibreSSL 3.4.2June McEnroe2021-11-29
| |
* | Merge LibreSSL 3.4.1 3.4.1June McEnroe2021-10-14
|\|
| * Import LibreSSL 3.4.1June McEnroe2021-10-14
| |
| * Import LibreSSL 3.4.0June McEnroe2021-09-17
| |
* | Merge LibreSSL 3.3.4 3.3.4June McEnroe2021-08-24
|\|
| * Import LibreSSL 3.3.4June McEnroe2021-08-24
| |
* | Bump version to 3.3.3p1 3.3.3p1June McEnroe2021-05-25
| |
* | build: Add scripts to EXTRA_DISTJune McEnroe2021-05-25
| |
* | Merge branch 'upstream' with missing scriptJune McEnroe2021-05-25
|\|
| * import: Add missing scripts/wrap-compiler-for-flag-checkJune McEnroe2021-05-25
| |
* | Merge LibreSSL 3.3.3 into master 3.3.3June McEnroe2021-05-08
|\|
| * Import LibreSSL 3.3.3June McEnroe2021-05-08
| |
* | build: Remove added x509_verify.3 links 3.3.2June McEnroe2021-04-18
| |
* | tls: Use EC_KEY_set_ex_dataJune McEnroe2021-04-18
| |
* | Merge LibreSSL 3.3.2 into masterJune McEnroe2021-04-18
|\|
| * Import LibreSSL 3.3.2June McEnroe2021-04-18
| |
* | Bump version to 3.3.1p1 3.3.1p1June McEnroe2021-03-05
| |
* | build: Add OpenSSL includes to libcompatJune McEnroe2021-03-05
| | | | | | | | | | | | Some compat sources (getentropy_linux.c for example) require OpenSSL. Reported by Robert Scheck.
* | Merge LibreSSL 3.3.1 into master 3.3.1June McEnroe2020-12-15
|\|
| * Import LibreSSL 3.3.1June McEnroe2020-12-15
| |
* | Merge LibreSSL 3.3.0 into master 3.3.0June McEnroe2020-11-24
|\|
| * Import LibreSSL 3.3.0June McEnroe2020-11-24
| |
* | Merge LibreSSL 3.2.2 into master 3.2.2June McEnroe2020-10-22
|\| | | | | | | No changes in libtls.
| * Import LibreSSL 3.2.2June McEnroe2020-10-22
| |
* | Merge LibreSSL 3.2.1 into master 3.2.1June McEnroe2020-09-29
|\| | | | | | | No changes in libtls.
| * Import LibreSSL 3.2.1June McEnroe2020-09-29
| |
| * import: Add m4/ax_add_fortify_source.m4June McEnroe2020-09-29
| |
* | build: Add README.7 to EXTRA_DIST 3.2.0June McEnroe2020-08-05
| |
* | doc: Indicate that only OpenSSL 1.1.1b and newer workJune McEnroe2020-08-03
| |
* | doc: Add READMEJune McEnroe2020-08-03
| |
* | build: Ignore generated filesJune McEnroe2020-08-02
| |
* | build: Add compat sourcesJune McEnroe2020-08-02
| | | | | | | | | | Copied from crypto/Makefile.am for the ones that are actually used by libtls.
* | build: Strip down buildJune McEnroe2020-08-02
| |
* | build: Add ax_check_opensslJune McEnroe2020-07-31
| |
* | tls: Call SSL_CTX_set_default_verify_paths by defaultJune McEnroe2020-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes the hard dependency on a CA bundle file existing in the default path (which seems to not be the case on Debian, for example), but results in a subtle behaviour change: if the CA bundle file does not exist, the CA directory will be used instead, rather than failing hard. I believe the only reason libtls insists on loading a CA bundle file itself is so that it can be sandboxed afterwards, given that a file is loaded all at once while a directory is only loaded as needed. If the default CA bundle file exists, SSL_CTX_set_default_verify_paths will still immediately load it, so sandboxing will still work. If it doesn't exist, then the CA directory will be used, which will work well for unsandboxed applications, but will likely fail during verification as it tries to search the directory. Either way, if the CA bundle file does not exist, a sandboxed application will not work. Enabling the use of the CA directory, however, will allow more unsandboxed applications to work. Finally, to restore the original behaviour, an application can call tls_config_set_ca_file(3) with the path returned by tls_default_ca_cert_file(3).
* | tls_config: Replace constant with X509_get_default_cert_file()June McEnroe2020-07-31
| |
* | tls_internal: Replace default ciphers with compatJune McEnroe2020-07-31
| |
* | tls: Implement load_verify_memJune McEnroe2020-07-31
| | | | | | | | Based on crypto/x509/by_mem.c
* | tls: Implement use_certificate_chain_memJune McEnroe2020-07-31
| | | | | | | | Based on ssl/ssl_rsa.c.
* | tls: Use SSL_CTX_get0_param and X509_STORE_get0_paramJune McEnroe2020-07-31
| |
* | tls_server: Remove SSL_OP_NO_CLIENT_RENEGOTIATIONJune McEnroe2020-07-31
| | | | | | | | This is a LibreSSL-specific option.
* | tls_ocsp: Use X509_STORE_CTX_new and X509_OBJECT_newJune McEnroe2020-07-31
| |
* | tls_ocsp: Use ASN1_TIME_to_tmJune McEnroe2020-07-31
| |
* | tls_conninfo: Implement time_tm_clamp_notafterJune McEnroe2020-07-31
| | | | | | | | From crypto/asn1/a_time_tm.c
* | tls_conninfo: Use ASN1_TIME_to_tmJune McEnroe2020-07-31
| |
* | tls_verify: Use ASN1_STRING_get0_dataJune McEnroe2020-07-31
| |