- Aug 15, 2016
-
-
Rob Percival authored
They may fail if they cannot increment the reference count of the certificate they are storing a pointer for. They should return 0 if this occurs. Reviewed-by:
Emilia Käsper <emilia@openssl.org> Reviewed-by:
Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1408)
-
Rob Percival authored
Changes them to have clearer ownership semantics, as suggested in https://github.com/openssl/openssl/pull/1372#discussion_r73232196 . Reviewed-by:
-
Richard Levitte authored
Reviewed-by: -
Dr. Stephen Henson authored
Fix no-ec builds by having separate functions to create keys based on an existing EVP_PKEY and a curve id. Reviewed-by:
-
- Aug 14, 2016
-
-
Jakub Zelenka authored
Reviewed-by:
Tim Hudson <tjh@openssl.org> Reviewed-by:
-
- Aug 13, 2016
-
-
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
When handling ECDH check to see if the curve is "custom" (X25519 is currently the only curve of this type) and instead of setting a curve NID just allocate a key of appropriate type. Reviewed-by: -
Dr. Stephen Henson authored
Add encoded point ctrl support for other curves: this makes it possible to handle X25519 and other EC curve point encoding in a similar way for TLS. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Add ctrl operations to set or retrieve encoded point in EVP_PKEY structures containing X25519 keys. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Add X25519 methods to match current key format defined in draft-ietf-curdle-pkix-02 Reviewed-by: -
Dr. Stephen Henson authored
Since "ptr" is used to handle arbitrary other types it should be void *. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by:
-
- Aug 12, 2016
-
-
Rich Salz authored
Reviewed-by:
Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1451)
-
Rich Salz authored
Thanks to Brian Carpter for reporting this. Reviewed-by:Dr. Stephen Henson <steve@openssl.org>
-
Dr. Stephen Henson authored
RT#4590 Reviewed-by: -
Andy Polyakov authored
Reviewed-by:
-
- Aug 11, 2016
-
-
Andy Polyakov authored
Originally new-line was suppressed, because double new-line was observed under wine. But it appears rather to be a wine bug, because on real Windows new-line is much needed. Reviewed-by:Richard Levitte <levitte@openssl.org>
-
Andy Polyakov authored
Problem was introduced in 299ccadc as future extension, i.e. at this point it wasn't an actual problem, because uninitialized capability bit was not actually used. Reviewed-by:
-
Andy Polyakov authored
RT#4530 Reviewed-by: -
FdaSilvaYY authored
Reviewed-by:
-
- Aug 10, 2016
-
-
Emilia Kasper authored
In practice, CT isn't really functional without EC anyway, as most logs use EC keys. So, skip loading the log list with no-ec, and skip CT tests completely in that conf. Reviewed-by: -
jamercee authored
Reviewed-by:
-
JimC authored
Reviewed-by:
-
jamercee authored
Commit 417be660 broken BIO_new_accept() by changing the definition of the macro BIO_set_accept_port() which stopped acpt_ctrl() from calling BIO_parse_hostserv(). This commit completes the series of changes initiated in 417be660. Updated pods to reflect new definition introduced by 417be660 . Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Rich Salz authored
Binary- and backward-compatible. Just better. Reviewed-by:
-
Kurt Roeckx authored
Reviewed-by:
Kurt Roeckx <kurt@openssl.org> Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Emilia Kasper authored
Reviewed-by: -
Emilia Kasper authored
Like OPENSSL_assert, but also prints the error stack before exiting. Reviewed-by: -
Emilia Kasper authored
This commit only ports existing tests, and adds some coverage for resumption. We don't appear to have any handshake tests that cover SCT validation success, and this commit doesn't change that. Reviewed-by:
-
