summaryrefslogtreecommitdiffstats
path: root/apps
AgeCommit message (Expand)Author
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26New -valid option to add a certificate to the ca index.txt that is valid and ...Dr. Stephen Henson
2012-12-26Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26cert_flags is unsignedDr. Stephen Henson
2012-12-26add support for client certificate callbak, fix memory leakDr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-12-23add missing \nDr. Stephen Henson
2012-12-20Backport enhancements to OCSP utility from HEAD:Dr. Stephen Henson
2012-12-20revert, missing commit messageDr. Stephen Henson
2012-12-20apps/ocsp.cDr. Stephen Henson
2012-12-19Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-19Return success when the responder is active.Dr. Stephen Henson
2012-12-19Backport X509 hostname, IP address and email checking code from HEAD.Dr. Stephen Henson
2012-12-14New verify flag to return success if we have any certificate in the trustedDr. Stephen Henson
2012-12-14Backport OCSP fixes.Ben Laurie
2012-12-13Make verify return errors.Ben Laurie
2012-12-04check mval for NULL tooDr. Stephen Henson
2012-12-03fix leakDr. Stephen Henson
2012-11-21PR: 2908Dr. Stephen Henson
2012-11-20fix leaksDr. Stephen Henson
2012-09-26add -trusted_first option and verify flag (backport from HEAD)Dr. Stephen Henson
2012-09-11fix memory leakDr. Stephen Henson
2012-08-16Enable message names for TLS 1.1, 1.2 with -msg.Bodo Möller
2012-07-03Fix memory leak.Dr. Stephen Henson
2012-06-19oops, add -debug_decrypt option which was accidenatally left outDr. Stephen Henson
2012-06-07Rearrange and test authz extension.Ben Laurie
2012-06-03Reduce version skew: trivia (I hope).Ben Laurie
2012-05-29RFC 5878 support.Ben Laurie
2012-04-11Add options to set additional type specific certificate chains toDr. Stephen Henson
2012-04-07transparently handle X9.42 DH parametersDr. Stephen Henson
2012-04-06Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson
2012-04-06Initial revision of ECC extension handling.Dr. Stephen Henson
2012-04-06New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson
2012-04-06Add new APIs EC_curve_nist2nid and EC_curve_nid2nist which convertDr. Stephen Henson
2012-03-18Always use SSLv23_{client,server}_method in s_client.c and s_server.c,Dr. Stephen Henson
2012-03-14cipher should only be set to PSK if JPAKE is used.OpenSSL_1_0_1Richard Levitte
2012-03-09Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson
2012-02-11PR: 2717Dr. Stephen Henson
2012-02-11PR: 2716Dr. Stephen Henson
2012-02-11apps/s_cb.c: recognize latest TLS versions [from HEAD].Andy Polyakov
2012-02-10PR: 2710Dr. Stephen Henson
2012-02-10PR: 2714Dr. Stephen Henson
2012-02-10add fips hmac option and fips blocking overrides to command line utilitiesDr. Stephen Henson
2012-01-12Sanitize usage of <ctype.h> functions. It's important that charactersAndy Polyakov