aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2022-12-08Fix timebomb by disabling time check in this testchromium-5414chromium-5359Bob Beck1-0/+2
2022-10-06Add CBB_add_asn1_[u]int64_with_tag.David Benjamin3-17/+68
2022-10-04Make DH opaque.David Benjamin8-65/+40
2022-10-03Default SSL_set_enforce_rsa_key_usage to enabled.David Benjamin4-19/+11
2022-10-03Test i2d_re_* for CRLs and CSRs too.David Benjamin1-1/+202
2022-09-30Add EVP_HPKE_KEM_public_key_len and EVP_HPKE_KEM_private_key_len.David Benjamin2-11/+29
2022-09-28Remove the experimental in-place record APIs.David Benjamin3-287/+0
2022-09-28Maintain the sequence number as a uint64_t.David Benjamin8-94/+79
2022-09-23Add int64 ASN1_INTEGER setters too.David Benjamin8-30/+55
2022-09-23Also check for V_ASN1_NEG_INTEGER when checking types.David Benjamin5-8/+19
2022-09-14Write a test for CONF_parse_list.David Benjamin2-3/+59
2022-09-14Make CONF_parse_list size_t-clean.David Benjamin4-108/+95
2022-09-14Unexport CONF_parse_list.David Benjamin3-13/+13
2022-09-14Use Array<uint8_t> in DTLS1_OUTGOING_MESSAGE.David Benjamin2-11/+4
2022-09-14Move the DTLS cookie to SSL_HANDSHAKE.David Benjamin7-18/+57
2022-09-13Use the new macOS sysctl names when availableDavid Benjamin1-7/+9
2022-09-09Various -Wshorten-64-to-32 fixes.David Benjamin18-52/+85
2022-09-09Document and tidy up X509_find_by_*.David Benjamin2-45/+21
2022-09-09Remove unused X509_LOOKUP_by_* functions.David Benjamin5-48/+0
2022-09-09Check some ASN1_STRING types in crypto/x509Emily Stark7-1/+42
2022-09-08Replace even more ad-hoc bytes/integer conversions.David Benjamin2-40/+23
2022-09-07Specify all library install destinationsDon2-2/+10
2022-09-07Add a poisoned field to EVP_CIPHER_CTX.Bob Beck2-1/+44
2022-09-06Stub out DSA paramgen functions.David Benjamin2-0/+20
2022-09-06Stub out the OpenSSL secure heap.David Benjamin4-0/+32
2022-09-06Define OPENSSL_NO_SSL_TRACE.David Benjamin1-0/+1
2022-09-06Add ASN1_INTEGER_get_int64 and ASN1_ENUMERATED_get_int64.David Benjamin3-23/+65
2022-09-06Add the "groups" variants of SSL_CTX_set1_curves_list.David Benjamin2-0/+30
2022-09-06Provide the other primes from RFC 3526.David Benjamin2-19/+259
2022-09-01Silence a GCC 12 -Warray-bounds false positive warning.David Benjamin1-19/+16
2022-09-01Rework truncated SHA-2 to silence GCC 12 false positive warning.David Benjamin2-19/+19
2022-08-31Require getrandom in all FIPS builds.David Benjamin2-110/+19
2022-08-31Incorporate OS entropy on FIPS CTR-DRBG reseed, not just init.David Benjamin1-25/+29
2022-08-31Add RAND_get_system_entropy_for_custom_prngBob Beck2-1/+19
2022-08-31Rewrite RSA_verify_PKCS1_PSS_mgf1 with size_t.David Benjamin1-28/+30
2022-08-31Check set_encrypt_key return value in AESTest.ABI.David Benjamin1-6/+6
2022-08-30Prefer established session properties mid renegotiation.David Benjamin4-44/+131
2022-08-29Add EVP_HPKE_KDF_hkdf_md.David Benjamin2-0/+9
2022-08-29Find threading libraryDon1-2/+3
2022-08-29Use O_CLOEXEC instead of fcntl(FD_CLOEXEC)David Benjamin1-15/+1
2022-08-26Add an EVP_HPKE_KEM_enc_len API.David Benjamin2-9/+29
2022-08-25Track SSL_ERROR_ZERO_RETURN explicitly.David Benjamin3-2/+30
2022-08-24Clean up header to reuse __riscv definitionRebecca Chang Swee Fun1-3/+1
2022-08-15Tighten up supported PSS combinations in X.509.David Benjamin18-116/+445
2022-08-13Add HMAC_CTX_get_md.David Benjamin2-3/+6
2022-08-12Add a test for SSL_CTX_set_quiet_shutdown.David Benjamin1-0/+35
2022-08-12Add X509_STORE_CTX_set0_trusted_stack.David Benjamin3-2/+20
2022-08-12Add X509_V_FLAG_NO_CHECK_TIME.David Benjamin3-6/+121
2022-08-05Add DSA_bits and DH_bits.David Benjamin4-0/+10
2022-08-03Add handshake hints for TLS 1.2 session tickets.David Benjamin5-28/+139