| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | Merge LibreSSL 3.8.1 HEAD 3.8.1 master | June McEnroe | 2023-10-11 |
| |\ | |||
| | * | Import LibreSSL 3.8.1 upstream | June McEnroe | 2023-10-11 |
| | | | |||
| * | | Merge LibreSSL 3.8.0 | June McEnroe | 2023-10-11 |
| |\| | |||
| | * | Import LibreSSL 3.8.0 | June McEnroe | 2023-10-11 |
| | | | |||
| * | | tls: Replace ECDSA_METHOD with EC_KEY_METHOD | June McEnroe | 2022-02-27 |
| | | | |||
| * | | Merge LibreSSL 3.5.0 | June McEnroe | 2022-02-27 |
| |\| | |||
| | * | Import LibreSSL 3.5.0 | June McEnroe | 2022-02-27 |
| | | | |||
| * | | tls: Revert accidentally(?) reverted upstream 3.4.2 | June McEnroe | 2021-11-29 |
| | | | |||
| * | | Merge LibreSSL 3.4.2 | June McEnroe | 2021-11-29 |
| |\| | |||
| | * | Import LibreSSL 3.4.2 | June McEnroe | 2021-11-29 |
| | | | |||
| * | | Merge LibreSSL 3.4.1 3.4.1 | June McEnroe | 2021-10-14 |
| |\| | |||
| | * | Import LibreSSL 3.4.1 | June McEnroe | 2021-10-14 |
| | | | |||
| * | | tls: Use EC_KEY_set_ex_data | June McEnroe | 2021-04-18 |
| | | | |||
| * | | Merge LibreSSL 3.3.2 into master | June McEnroe | 2021-04-18 |
| |\| | |||
| | * | Import LibreSSL 3.3.2 | June McEnroe | 2021-04-18 |
| | | | |||
| * | | tls: Call SSL_CTX_set_default_verify_paths by default | June McEnroe | 2020-07-31 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes the hard dependency on a CA bundle file existing in the default path (which seems to not be the case on Debian, for example), but results in a subtle behaviour change: if the CA bundle file does not exist, the CA directory will be used instead, rather than failing hard. I believe the only reason libtls insists on loading a CA bundle file itself is so that it can be sandboxed afterwards, given that a file is loaded all at once while a directory is only loaded as needed. If the default CA bundle file exists, SSL_CTX_set_default_verify_paths will still immediately load it, so sandboxing will still work. If it doesn't exist, then the CA directory will be used, which will work well for unsandboxed applications, but will likely fail during verification as it tries to search the directory. Either way, if the CA bundle file does not exist, a sandboxed application will not work. Enabling the use of the CA directory, however, will allow more unsandboxed applications to work. Finally, to restore the original behaviour, an application can call tls_config_set_ca_file(3) with the path returned by tls_default_ca_cert_file(3). | ||
| * | | tls: Implement load_verify_mem | June McEnroe | 2020-07-31 |
| | | | | | | | | | Based on crypto/x509/by_mem.c | ||
| * | | tls: Implement use_certificate_chain_mem | June McEnroe | 2020-07-31 |
| | | | | | | | | | Based on ssl/ssl_rsa.c. | ||
| * | | tls: Use SSL_CTX_get0_param and X509_STORE_get0_param | June McEnroe | 2020-07-31 |
| | | | |||
| * | | tls: #include <string.h> | June McEnroe | 2020-07-30 |
| |/ | |||
| * | Import LibreSSL 3.2.0 | June McEnroe | 2020-07-30 |