![[BACK]](/icons/back.gif){kind=icon}
Up to [local] / src / lib / libssl
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.44 / (download) - annotate - [select for diffs], Mon Apr 15 16:00:05 2024 UTC (8 weeks ago) by tb
Branch: MAIN
CVS Tags: HEAD
Changes since 1.43: +0 -1 lines
Diff to previous 1.43 (colored)
Unexport SSL_version_str ok jsing
Revision 1.43 / (download) - annotate - [select for diffs], Sat Mar 2 11:48:55 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE,
OPENBSD_7_5
Changes since 1.42: +0 -1 lines
Diff to previous 1.42 (colored)
Remove SSL_debug The garbage truck is quite full by now. Collect the last symbol straggler for this bump. ok jsing
Revision 1.42 / (download) - annotate - [select for diffs], Sat Mar 2 11:45:51 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.41: +0 -2 lines
Diff to previous 1.41 (colored)
Remove SSL_CIPHER_get_by_{id,value}()
While this undocumented API would have been much nicer and saner than
SSL_CIPHER_find(), nothing used this except for the exporter test.
Let's get rid of it again. libssl uses ssl3_get_cipher_by_{id,value}()
directly.
ok jsing
Revision 1.41 / (download) - annotate - [select for diffs], Sat Mar 2 11:44:47 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.40: +2 -0 lines
Diff to previous 1.40 (colored)
Export SSL_get_{peer_,}signature_type_nid()
Also move the prototypes to the correct header.
Oversight reported by Frank Lichtenheld, thanks!
Fixes https://github.com/libressl/openbsd/issues/147
ok jsing
Revision 1.40 / (download) - annotate - [select for diffs], Fri Jul 28 09:53:55 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE,
OPENBSD_7_4
Changes since 1.39: +0 -1 lines
Diff to previous 1.39 (colored)
Set OPENSSL_NO_ENGINE, remove engine code ENGINE was special. It's horrible code even by the low standards of this library. Some ports may now try to use the stubs which will fail, but the fallout from this should be minimal. Of course there are various language bindings that expose the ENGINE API. OpenSSL 3 disabling ENGINE by default will likely help fixing this at some point. ok jsing
Revision 1.39 / (download) - annotate - [select for diffs], Fri Nov 11 13:08:29 2022 UTC (18 months, 4 weeks ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE,
OPENBSD_7_3
Changes since 1.38: +22 -33 lines
Diff to previous 1.38 (colored)
Symbols.list: Drop comments and sort. While grouping the API by its purpose is nice, it doesn't help much if >90% is "general API". ok jsing
Revision 1.38 / (download) - annotate - [select for diffs], Sun Sep 11 17:42:09 2022 UTC (20 months, 4 weeks ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE,
OPENBSD_7_2
Changes since 1.37: +11 -0 lines
Diff to previous 1.37 (colored)
Update Symbols.list ok jsing
Revision 1.37 / (download) - annotate - [select for diffs], Thu Jul 7 19:43:37 2022 UTC (23 months ago) by tb
Branch: MAIN
Changes since 1.36: +1 -1 lines
Diff to previous 1.36 (colored)
sort
Revision 1.36 / (download) - annotate - [select for diffs], Thu Jul 7 13:03:20 2022 UTC (23 months ago) by tb
Branch: MAIN
Changes since 1.35: +4 -0 lines
Diff to previous 1.35 (colored)
Update Symbols.list ok jsing
Revision 1.35 / (download) - annotate - [select for diffs], Sun Oct 31 16:38:36 2021 UTC (2 years, 7 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE,
OPENBSD_7_1
Changes since 1.34: +10 -0 lines
Diff to previous 1.34 (colored)
Update Symbols.list to include API additions
Revision 1.34 / (download) - annotate - [select for diffs], Fri Sep 10 15:05:35 2021 UTC (2 years, 9 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE,
OPENBSD_7_0
Changes since 1.33: +18 -0 lines
Diff to previous 1.33 (colored)
Update Symbols.list after API additions
Revision 1.33 / (download) - annotate - [select for diffs], Mon May 10 17:07:23 2021 UTC (3 years, 1 month ago) by tb
Branch: MAIN
Changes since 1.32: +1 -0 lines
Diff to previous 1.32 (colored)
Provide SSL_SESSION_get0_cipher(3) ok jsing
Revision 1.32 / (download) - annotate - [select for diffs], Mon May 10 17:05:26 2021 UTC (3 years, 1 month ago) by tb
Branch: MAIN
Changes since 1.31: +1 -0 lines
Diff to previous 1.31 (colored)
Provide SSL_CTX_get_ssl_method(3) ok jsing
Revision 1.31 / (download) - annotate - [select for diffs], Mon May 10 17:03:57 2021 UTC (3 years, 1 month ago) by tb
Branch: MAIN
Changes since 1.30: +1 -0 lines
Diff to previous 1.30 (colored)
Provide SSL_CIPHER_find(3) ok jsing
Revision 1.30 / (download) - annotate - [select for diffs], Wed Mar 31 16:59:32 2021 UTC (3 years, 2 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE,
OPENBSD_6_9
Changes since 1.29: +4 -0 lines
Diff to previous 1.29 (colored)
Expose various DTLSv1.2 specific functions and defines ok bcook inoguchi jsing
Revision 1.29 / (download) - annotate - [select for diffs], Wed Mar 31 16:55:04 2021 UTC (3 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.28: +2 -0 lines
Diff to previous 1.28 (colored)
Expose SSL_set_hostflags(3) and SSL_get0_peername(3) ok bcook inoguchi jsing
Revision 1.28 / (download) - annotate - [select for diffs], Wed Mar 31 16:52:15 2021 UTC (3 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.27: +1 -0 lines
Diff to previous 1.27 (colored)
Expose SSL_use_certificate_chain_file(3) ok bcook inoguchi jsing
Revision 1.27 / (download) - annotate - [select for diffs], Thu Apr 4 15:03:21 2019 UTC (5 years, 2 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE,
OPENBSD_6_8,
OPENBSD_6_7_BASE,
OPENBSD_6_7,
OPENBSD_6_6_BASE,
OPENBSD_6_6,
OPENBSD_6_5_BASE,
OPENBSD_6_5
Changes since 1.26: +12 -0 lines
Diff to previous 1.26 (colored)
Provide SSL chain/cert chain APIs.
These allow for chains to be managed on a per-certificate basis rather than
as a single "extra certificates" list. Note that "chain" in this context
does not actually include the leaf certificate however, unlike
SSL_CTX_use_certificate_chain_{file,mem}().
Thanks to sthen@ for running this through a bulk ports build.
ok beck@ tb@
Revision 1.26 / (download) - annotate - [select for diffs], Sun Mar 17 17:28:08 2019 UTC (5 years, 2 months ago) by jsing
Branch: MAIN
Changes since 1.25: +3 -0 lines
Diff to previous 1.25 (colored)
Provide version agnostic DTLS methods. ok tb@
Revision 1.25 / (download) - annotate - [select for diffs], Tue Jan 22 01:15:37 2019 UTC (5 years, 4 months ago) by tb
Branch: MAIN
Changes since 1.24: +1 -0 lines
Diff to previous 1.24 (colored)
Add a re-implementation of SSL_get1_supported_ciphers(). Part of OpenSSL 1.1 API (pre-licence-change). input schwarze ok jsing
Revision 1.24 / (download) - annotate - [select for diffs], Tue Jan 22 01:12:18 2019 UTC (5 years, 4 months ago) by tb
Branch: MAIN
Changes since 1.23: +1 -0 lines
Diff to previous 1.23 (colored)
Provide SSL_get_client_ciphers(). Part of OpenSSL 1.1 API, pre-licence change. ok jsing
Revision 1.23 / (download) - annotate - [select for diffs], Sun Nov 11 06:58:14 2018 UTC (5 years, 7 months ago) by tb
Branch: MAIN
Changes since 1.22: +1 -0 lines
Diff to previous 1.22 (colored)
Add SSL_set1_host(), a thin wrapper around X509_VERIFY_PARAM_set1_host(). Used by unbound's DNS over TLS implementation to do server name verification. ok jsing
Revision 1.22 / (download) - annotate - [select for diffs], Tue Mar 20 15:28:12 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE,
OPENBSD_6_4,
OPENBSD_6_3_BASE,
OPENBSD_6_3
Changes since 1.21: +1 -0 lines
Diff to previous 1.21 (colored)
Provide SSL_SESSION_set1_id() ok jsing
Revision 1.21 / (download) - annotate - [select for diffs], Sat Mar 17 16:20:01 2018 UTC (6 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.20: +3 -0 lines
Diff to previous 1.20 (colored)
Bring in compatibility for OpenSSL 1.1 style init functions. This adds OPENSSL_init_crypto and OPENSSL_init_ssl, as well thread safety modifications for the existing LibreSSL init functions. The initialization routines are called automatically by the normal entry points into the library, as in newer OpenSSL ok jsing@, nits by tb@ and deraadt@
Revision 1.20 / (download) - annotate - [select for diffs], Sat Mar 17 15:55:52 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.19: +2 -0 lines
Diff to previous 1.19 (colored)
Provide SSL_SESSION_get_ticket_lifetime_hint() and SSL_SESSION_has_ticket() ok jsing
Revision 1.19 / (download) - annotate - [select for diffs], Sat Mar 17 15:48:31 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.18: +2 -0 lines
Diff to previous 1.18 (colored)
Provide SSL_CTX_get_default_passwd_cb{,_userdata}()
ok jsing
Revision 1.18 / (download) - annotate - [select for diffs], Sat Mar 17 14:40:45 2018 UTC (6 years, 2 months ago) by jsing
Branch: MAIN
Changes since 1.17: +5 -0 lines
Diff to previous 1.17 (colored)
Provide SSL_CIPHER_get_auth_nid(), SSL_CIPHER_get_cipher_nid(), SSL_CIPHER_get_digest_nid(), SSL_CIPHER_get_kx_nid() and SSL_CIPHER_is_aead().
Revision 1.17 / (download) - annotate - [select for diffs], Sat Mar 17 14:26:13 2018 UTC (6 years, 2 months ago) by jsing
Branch: MAIN
Changes since 1.16: +3 -2 lines
Diff to previous 1.16 (colored)
Provide SSL_SESSION_get0_id_context().
Revision 1.16 / (download) - annotate - [select for diffs], Thu Mar 15 12:27:00 2018 UTC (6 years, 2 months ago) by jca
Branch: MAIN
Changes since 1.15: +4 -0 lines
Diff to previous 1.15 (colored)
Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_version We already provided the setters, so also provide the getters like OpenSSL does. Addition prompted by the use of those functions in recent openvpn releases. manpage diff from schwarze@ (thanks!) with input from jsing@, ok tb@ jsing@
Revision 1.15 / (download) - annotate - [select for diffs], Thu Feb 22 17:30:25 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.14: +1 -0 lines
Diff to previous 1.14 (colored)
Provide SSL_is_server().
Revision 1.14 / (download) - annotate - [select for diffs], Thu Feb 22 17:29:24 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.13: +1 -0 lines
Diff to previous 1.13 (colored)
Provide SSL_up_ref().
Revision 1.13 / (download) - annotate - [select for diffs], Thu Feb 22 17:27:06 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.12: +1 -0 lines
Diff to previous 1.12 (colored)
Provide SSL_CTX_get_ciphers().
Revision 1.12 / (download) - annotate - [select for diffs], Thu Feb 22 17:25:18 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.11: +1 -0 lines
Diff to previous 1.11 (colored)
Provide SSL_SESSION_up_ref().
Revision 1.11 / (download) - annotate - [select for diffs], Tue Feb 20 18:07:11 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.10: +1 -0 lines
Diff to previous 1.10 (colored)
Provide SSL_SESSION_get_protocol_version() ok jsing
Revision 1.10 / (download) - annotate - [select for diffs], Sat Feb 17 15:32:20 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.9: +1 -0 lines
Diff to previous 1.9 (colored)
Provide SSL_SESSION_get_master_key()
Revision 1.9 / (download) - annotate - [select for diffs], Sat Feb 17 15:19:43 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.8: +2 -0 lines
Diff to previous 1.8 (colored)
Provide SSL_get_client_random() and SSL_get_server_random()
Revision 1.8 / (download) - annotate - [select for diffs], Sat Feb 17 15:13:12 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.7: +1 -0 lines
Diff to previous 1.7 (colored)
Provide SSL_CTX_get0_certificate()
Revision 1.7 / (download) - annotate - [select for diffs], Wed Feb 14 17:08:44 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.6: +1 -0 lines
Diff to previous 1.6 (colored)
Provide SSL_CTX_up_ref().
Revision 1.6 / (download) - annotate - [select for diffs], Wed Feb 14 16:16:10 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.5: +4 -2 lines
Diff to previous 1.5 (colored)
Provide SSL_CTX_get0_param() and SSL_get0_param(). Some applications that use X509_VERIFY_PARAM expect these to exist, since they're also part of the OpenSSL 1.0.2 API.
Revision 1.5 / (download) - annotate - [select for diffs], Wed Aug 30 16:24:21 2017 UTC (6 years, 9 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE,
OPENBSD_6_2
Changes since 1.4: +3 -0 lines
Diff to previous 1.4 (colored)
Bring back the NPN related symbols. Several pieces of software make use of these based on a conditional around OPENSSL_NPN_NEGOTIATED, rather than using the presence of the symbols, the non-existence of a OPENSSL_NO_NEXTPROTONEG define or even the existence of the TLS extension type. Unfortunately we cannot remove OPENSSL_NPN_NEGOTIATED since the API for ALPN was effectively botched and reuses two parts from the NPN implementation, rather than providing ALPN specific or generic versions.
Revision 1.4 / (download) - annotate - [select for diffs], Mon Aug 28 17:36:58 2017 UTC (6 years, 9 months ago) by jsing
Branch: MAIN
Changes since 1.3: +0 -3 lines
Diff to previous 1.3 (colored)
Completely remove NPN remnants. Based on a diff from doug@, similar diff from inoguchi@
Revision 1.3 / (download) - annotate - [select for diffs], Sat May 6 20:37:24 2017 UTC (7 years, 1 month ago) by jsing
Branch: MAIN
Changes since 1.2: +4 -0 lines
Diff to previous 1.2 (colored)
Provide SSL{,_CTX}_set_{min,max}_proto_version() functions.
Rides minor bump.
ok beck@
Revision 1.2 / (download) - annotate - [select for diffs], Tue Jan 24 09:03:21 2017 UTC (7 years, 4 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE,
OPENBSD_6_1
Changes since 1.1: +4 -0 lines
Diff to previous 1.1 (colored)
Add support for setting the supported EC curves via
SSL{_CTX}_set1_groups{_list}() - also provide defines for the previous
SSL{_CTX}_set1_curves{_list} names.
This also changes the default list of EC curves to be X25519, P-256 and
P-384. If you want others (such a brainpool) you need to configure this
yourself.
Inspired by parts of BoringSSL and OpenSSL.
ok beck@
Revision 1.1 / (download) - annotate - [select for diffs], Fri Nov 4 18:28:57 2016 UTC (7 years, 7 months ago) by guenther
Branch: MAIN
Add an explict list of exported symbols with just the functions
declared in the public headers, and use __{BEGIN,END}_HIDDEN_DECLS
in the internal headers to optimize internal functions
ok jsing@