aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Fix broken make install ruleLibravatarLibravatar daurnimator 2017-08-311-3/+3
| |
* | openssl >=1.1.0 doesn't need to have locking initialised, nor config ↵LibravatarLibravatar daurnimator 2017-08-311-2/+10
| | | | | | | | | | | | manually loaded Part of #96
* | Merge remote-tracking branch 'daurnimator/less-locks'LibravatarLibravatar daurnimator 2017-08-311-32/+14
|\ \
| * | Remove mutex from dl_anchorLibravatarLibravatar daurnimator 2017-08-101-6/+1
| | | | | | | | | | | | All call sites already hold a single mutex
| * | Use a single lock across multiple init functionsLibravatarLibravatar daurnimator 2017-08-101-26/+13
| | |
* | | In compat_init we only need to anchor if we use CRYPTO_get_ex_new_indexLibravatarLibravatar daurnimator 2017-08-311-1/+1
| | |
* | | Move away from deprecated X509_CRL_get_* functions when setting valuesLibravatarLibravatar daurnimator 2017-08-311-21/+44
| | | | | | | | | | | | | | | | | | Use X509_CRL_set1_* instead which perform a copy (which means we have to allocate and destroy an ASN1_TIME) Part of #96
* | | Move to key generation *_ex functions.LibravatarLibravatar daurnimator 2017-08-311-8/+29
| | | | | | | | | | | | | | | | | | The old functions were deprecated in OpenSSL 1.1.0. Part of #96
* | | Use 'generator' parameter for picking generator for DH keys (rather than ↵LibravatarLibravatar daurnimator 2017-08-313-5/+9
| | | | | | | | | | | | | | | | | | 'exp'). Change default value to 2. 2 is the default generator for openssl; the number is a mostly arbitrary choice, and smaller values are faster.
* | | Add branch for each key type in pk_new field marshallingLibravatarLibravatar daurnimator 2017-08-311-14/+32
| | |
* | | Use X509_CRL_get0_*Update when not modifying ASN1_TIMELibravatarLibravatar daurnimator 2017-08-311-9/+25
| | |
* | | Fix most 'expansion-to-defined' warningsLibravatarLibravatar daurnimator 2017-08-311-12/+29
| | |
* | | Use single method constructor and disable unwanted protocols via optionsLibravatarLibravatar daurnimator 2017-08-311-31/+61
| | | | | | | | | | | | | | | - In OpenSSL 1.1.0 the individual constructors are deprecated - The removal of __typeof__ fixes an issue with MSVC
* | | Fix openssl 0.9.8 compat (missing sk_OPENSSL_STRING_* functions)LibravatarLibravatar daurnimator 2017-08-311-0/+10
| | |
* | | Merge branch 'curves_list'LibravatarLibravatar daurnimator 2017-08-305-3/+102
|\ \ \
| * | | openssl.ssl: Bind SSL_set1_curves_list as ssl:setCurvesList()LibravatarLibravatar daurnimator 2017-04-123-2/+46
| | | |
| * | | openssl.ssl.context.new: Turn on ecdh_auto in OpenSSL 1.0.2LibravatarLibravatar daurnimator 2017-04-031-0/+13
| | | | | | | | | | | | | | | | | | | | It's on by default in 1.1.0, and supported in < 1.0.2. Suggestion taken from ruby openssl implementation: https://github.com/ruby/openssl/blob/a7bbd590c66d40bd662502df9c65474e85b5f03f/ext/openssl/ossl_ssl.c#L135
| * | | doc/: Mention that OpenSSL < 1.0.2 only supports a single curve at a timeLibravatarLibravatar daurnimator 2017-04-031-1/+1
| | | |
| * | | openssl.ssl.context: Add ctx:setCurvesListLibravatarLibravatar daurnimator 2017-04-033-0/+42
| | | |
* | | | Move over to using lua-compat-5.3LibravatarLibravatar daurnimator 2017-08-303-182/+4
| | | |
* | | | Merge commit '7333333568b13db56136e2354c55556adc7714ed' as 'vendor/compat53'LibravatarLibravatar daurnimator 2017-08-3019-0/+6227
|\ \ \ \ | | |_|/ | |/| |
| * | | Squashed 'vendor/compat53/' content from commit 6f3deeaLibravatarLibravatar daurnimator 2017-08-3019-0/+6227
| / / | | | | | | | | | | | | git-subtree-dir: vendor/compat53 git-subtree-split: 6f3deeaa6a4743e1f5148c613addb3f94a22d2df
* | | Pull in updated makefile structure from cqueuesLibravatarLibravatar daurnimator 2017-08-302-128/+210
| | |
* | | config.h.guess: Update to new autoguessLibravatarLibravatar daurnimator 2017-08-291-1/+31
| | |
* | | src/GNUmakefile: Remove duplicated ruleLibravatarLibravatar daurnimator 2017-08-291-5/+0
| | |
* | | src/GNUmakefile: Add missing uninstall rule for ocsp submoduleLibravatarLibravatar daurnimator 2017-08-291-0/+1
| | |
* | | src/GNUmakefile: Add missing ocsp ruleLibravatarLibravatar daurnimator 2017-05-311-0/+5
| | |
* | | Fix capitalisation (Hostname vs HostName)LibravatarLibravatar daurnimator 2017-05-311-7/+7
| | |
* | | Fix incorrect error prefixesLibravatarLibravatar daurnimator 2017-04-191-2/+2
| | |
* | | Reintroduce context:setTLSextStatusType() accidently removed in ↵LibravatarLibravatar daurnimator 2017-04-061-0/+3
| | | | | | | | | | | | 59766e63abfeb30342d413777b507940a739cc97
* | | Add ssl_pushsafe function to avoid panic on OOMLibravatarLibravatar daurnimator 2017-04-041-7/+41
| | |
* | | Bind SSL_CTX_set_tlsext_servername_callbackLibravatarLibravatar daurnimator 2017-04-042-4/+91
| | | | | | | | | | | | Closes #84
* | | Document ssl:getVerifyResult()LibravatarLibravatar daurnimator 2017-04-042-0/+4
| | |
* | | Add methods ssl:setVerify(), ssl:getVerify(), ssl:getCertificate() and ↵LibravatarLibravatar daurnimator 2017-04-043-0/+89
| |/ |/| | | | | | | | | ssl:setPrivateKey() Similar to same methods that already exist on ssl.context object
* | Remove need for LUA_COMPAT_APIINTCASTSLibravatarLibravatar daurnimator 2017-04-032-24/+16
| |
* | Fix warning about pointer signednessLibravatarLibravatar daurnimator 2017-04-031-1/+1
| |
* | Fix warning about pointer signednessLibravatarLibravatar daurnimator 2017-04-031-1/+1
| |
* | Bind SSL_set_SSL_CTXLibravatarLibravatar daurnimator 2017-04-033-0/+17
| | | | | | | | For #84
* | Document missing context methodsLibravatarLibravatar daurnimator 2017-04-032-0/+23
| | | | | | | | Closes #66
* | Don't leak ctx on errorLibravatarLibravatar daurnimator 2017-04-031-8/+5
| | | | | | | | Fixes #72
* | Bind SSL_get_client_randomLibravatarLibravatar daurnimator 2017-04-031-0/+42
| | | | | | | | For #86
* | Merge branch 'ocsp'LibravatarLibravatar daurnimator 2017-04-036-0/+427
|\ \
| * | Have (empty) openssl.ocsp.response moduleLibravatarLibravatar daurnimator 2017-04-033-2/+23
| | |
| * | Add docs for OCSP functionsLibravatarLibravatar daurnimator 2017-04-031-0/+72
| | |
| * | Export constants for openssl.ocsp.basic:verify() with via moduleLibravatarLibravatar daurnimator 2017-04-033-0/+29
| | |
| * | Allow unsetting ocsp responseLibravatarLibravatar daurnimator 2017-04-031-4/+8
| | |
| * | Add cert:getOCSP() to retreive OCSP URI from a certificateLibravatarLibravatar daurnimator 2016-12-201-0/+35
| | |
| * | Add ssl:setTLSextStatusOCSPResp()LibravatarLibravatar daurnimator 2016-12-201-0/+21
| | | | | | | | | | | | Currently useless without a way to set a callback for tlsext
| * | OCSP functions required for basic client validationLibravatarLibravatar daurnimator 2016-12-201-0/+245
| | |
* | | Remove trailing whitespaceLibravatarLibravatar daurnimator 2017-04-034-9/+9
| | |