summaryrefslogtreecommitdiff
path: root/src/src/tls-openssl.c
Commit message (Expand)AuthorAgeFilesLines
* DANE: force SNI to use $domain. Bug 2265Jeremy Harris2020-08-261-0/+1
* TLS: use RFC 6125 rules for certifucate name checks when CNAMES are prese...Jeremy Harris2020-06-111-10/+10
* OpenSSL: clear error stack before avery I/O operationJeremy Harris2020-05-201-0/+3
* Copyright updates:exim-4_94_RC0Jeremy Harris2020-04-301-0/+1
* OpenSSL: fix bulid on older library versionsJeremy Harris2020-04-201-1/+4
* OpenSSL: More info on accept "version too low"Jeremy Harris2020-04-191-1/+1
* OpenSSL: More info on accept "unsupported protocol"Jeremy Harris2020-04-121-2/+3
* OpenSSL: under resumption open ticket DB writable, for record deleteJeremy Harris2020-03-291-1/+1
* OpenSSL: avoid loading server's CA-list-for-client-notification on clientJeremy Harris2020-03-271-5/+5
* Update openssl_options values to 1.1.1cPhil Pennock2020-01-171-7/+25
* Fix build with older TLS library versionsJeremy Harris2019-12-281-0/+4
* GSASL channel-binding: TLS resumption checksJeremy Harris2019-12-281-0/+2
* Authenticator gsasl: client support. Bug 2349Jeremy Harris2019-12-271-2/+2
* Merge branch '4.next'Jeremy Harris2019-12-081-9/+40
|\
| * Make smtp_flush() work for TLS channelJeremy Harris2019-11-301-7/+10
| * OpenSSL: support authenticator channel-binding. Bug 2467Jeremy Harris2019-11-171-0/+28
| * TLS: variables $tls_(in,out)_tlsverJeremy Harris2019-11-141-6/+22
| * Build: include early-pipelining unless disabledJeremy Harris2019-10-201-2/+2
* | TLS: restore TLS protocol version to default Received: headerJeremy Harris2019-11-181-6/+22
* | fix build on older OpenSSLJeremy Harris2019-11-131-1/+1
* | OpenSSL: when supported by the library version, disable renegotiation for pre...Jeremy Harris2019-11-131-1/+12
* | Fix logging of DANE, client-side under LibreSSLJeremy Harris2019-10-211-2/+6
* | TLS: Feature macrosJeremy Harris2019-10-201-0/+12
* | OpenSSL: clarify log line for nonreceived required staplingJeremy Harris2019-10-201-2/+2
* | OpenSSL: emit actual version on "wrong version number" error for SSL_acceptJeremy Harris2019-10-191-1/+7
* | OpenSSL: full-chain OCSP stapling. Bug 1466Jeremy Harris2019-10-171-52/+98
* | OpenSSL: SSLKEYLOGFILE supportJeremy Harris2019-10-151-0/+6
|/
* OpenSSL: explicit add for sha256 digest method no longer needed for recent li...Jeremy Harris2019-10-061-22/+20
* OpenSSL: clearer log message for TCP conn close at SSL_acceptJeremy Harris2019-10-011-2/+35
* OpenSSL: fix build on earlier library versionsJeremy Harris2019-09-291-0/+9
* OpenSSL: support OCSP stapling on multi-cert serversJeremy Harris2019-09-291-61/+150
* GnuTLS: full-chain OCSP stapling. Bug 1466Jeremy Harris2019-09-261-0/+3
* GnuTLS: Move to more-modern stapling APIJeremy Harris2019-09-201-1/+2
* tidyingJeremy Harris2019-09-051-3/+3
* taint SNI values supplied by clientJeremy Harris2019-08-191-1/+1
* compiler quieteningJeremy Harris2019-08-031-1/+1
* Fix crash after TLS channel shutdownJeremy Harris2019-07-281-25/+14
* Track tainted data and refuse to expand itJeremy Harris2019-07-251-2/+2
* PIPE_CONNECT: promote from experimentalJeremy Harris2019-05-281-2/+2
* OpenSSL: fix build under older library versionJeremy Harris2019-05-081-0/+2
* OpenSSL: fix tls_out_ocsp under resumptionJeremy Harris2019-05-071-11/+13
* OpenSSL: fix tls_try_verify_hosts under resumptionJeremy Harris2019-05-071-2/+6
* TLS: increase resumption ticket lifetime to 2 hoursJeremy Harris2019-05-071-1/+7
* OpenSSL: discard expired resumption session in clientJeremy Harris2019-05-071-0/+6
* OpenSSL: better handling of $tls_{in,out}_certificate_verified under resumptionJeremy Harris2019-05-051-5/+22
* OpenSSL: for older library (1.0.2) assume that a ticket callback in client onlyJeremy Harris2019-05-051-5/+4
* OpenSSL: increase STEK strength to 256bJeremy Harris2019-05-041-11/+10
* TLS: library version build-time checks for resumption supportJeremy Harris2019-05-021-0/+6
* Fix build on older OpenSSLJeremy Harris2019-05-021-1/+3
* TLS: Session resumption, under the EXPERIMENTAL_TLS_RESUME build option.Jeremy Harris2019-05-021-17/+382
View Lorry Controller Status