aboutsummaryrefslogtreecommitdiff
path: root/ssl/ssl_cert.c
AgeCommit message (Expand)AuthorFilesLines
2016-04-04Revert "various spelling fixes"Rich Salz1-1/+1
2016-04-04various spelling fixesFdaSilvaYY1-1/+1
2016-04-03Move peer chain security checks into x509_vfy.cViktor Dukhovni1-11/+14
2016-03-20Remove #error from include files.Rich Salz1-3/+1
2016-03-09Constify security callbacksKurt Roeckx1-4/+4
2016-03-09Fix locking in ssl_cert_dup()Todd Short1-1/+1
2016-03-08Convert CRYPTO_LOCK_SSL_* to new multi-threading APIAlessandro Ghedini1-28/+31
2016-03-08Convert CRYPTO_LOCK_X509_* to new multi-threading APIAlessandro Ghedini1-4/+3
2016-02-11Fix MacOS/X build warningsViktor Dukhovni1-2/+0
2016-02-11Move to REF_DEBUG, for consistency.Rich Salz1-9/+2
2016-02-11RT3495: Add a hash for faster dup detection.Toshikuni Fukaya1-17/+25
2016-02-06Add SSL_get0_verified_chain() to return verified chain of peerDr. Stephen Henson1-0/+9
2016-01-20make EVP_PKEY opaqueDr. Stephen Henson1-1/+1
2016-01-14EDH >= 1024 bits even at security level 0Viktor Dukhovni1-2/+9
2016-01-05DANE support structures, constructructors and accessorsViktor Dukhovni1-2/+13
2016-01-02Protocol version selection and negotiation rewriteViktor Dukhovni1-9/+15
2015-12-23Server side EVP_PKEY DH supportDr. Stephen Henson1-22/+3
2015-12-16Rename some BUF_xxx to OPENSSL_xxxRich Salz1-1/+1
2015-12-05Remove support for all 40 and 56 bit ciphers.Kurt Roeckx1-11/+0
2015-12-04Remove SSL_{CTX_}set_ecdh_auto() and always enable ECDHKurt Roeckx1-4/+0
2015-12-04Make SSL_{CTX}_set_tmp_ecdh() call SSL_{CTX_}set1_curves()Kurt Roeckx1-10/+0
2015-12-04Remove support for SSL_{CTX_}set_tmp_ecdh_callback().Kurt Roeckx1-1/+0
2015-11-17Add comment explaining why we don't check a return valueMatt Caswell1-0/+6
2015-11-09Standardise our style for checking malloc failuresMatt Caswell1-4/+4
2015-10-30Remove the type variableMatt Caswell1-1/+1
2015-10-11Make no-psk compile without warnings.Dr. Stephen Henson1-2/+2
2015-10-02Remove BIO_s_file_internal macro.Rich Salz1-2/+2
2015-09-29Fix no-stdio buildDavid Woodhouse1-2/+0
2015-09-17RT4047: Set reference count earlierFilipe DA SILVA1-1/+1
2015-09-14Fix PSK identity hint handling.Dr. Stephen Henson1-0/+9
2015-09-06Avoid direct X509 structure accessDr. Stephen Henson1-2/+1
2015-09-02Add and use OPENSSL_zallocRich Salz1-5/+2
2015-08-31Add X509_up_ref function.Dr. Stephen Henson1-2/+2
2015-06-22Remove SESS_CERT entirely.Dr. Stephen Henson1-40/+0
2015-06-22Move peer chain to SSL_SESSION structure.Dr. Stephen Henson1-1/+0
2015-06-22Remove certificates from sess_certDr. Stephen Henson1-19/+0
2015-06-22Remove peer temp keys from SESS_CERTDr. Stephen Henson1-10/+0
2015-05-22Add CHANGES entry for OPENSSL_NO_TLSEXT removalMatt Caswell1-1/+0
2015-05-22Remove support for OPENSSL_NO_TLSEXTMatt Caswell1-8/+1
2015-05-19move masks out of CERT structureDr. Stephen Henson1-5/+0
2015-05-18Move certificate validity flags out of CERT.Dr. Stephen Henson1-3/+0
2015-05-18Move signing digest out of CERT.Dr. Stephen Henson1-21/+0
2015-05-18CERT tidyDr. Stephen Henson1-11/+1
2015-05-14Identify and move OpenSSL internal header filesRichard Levitte1-1/+1
2015-05-05memset, memcpy, sizeof consistency fixesRich Salz1-8/+3
2015-05-04Use safer sizeof variant in mallocRich Salz1-6/+4
2015-05-01free NULL cleanup -- codaRich Salz1-22/+12
2015-05-01Remove goto inside an if(0) blockRich Salz1-8/+6
2015-04-30free cleanup almost the finaleRich Salz1-5/+2
2015-04-30free NULL cleanup 5aRich Salz1-31/+15