Commits

Breadcrumbs

History for

on6487ee8

User selector

All users

All time

Commit History

Commits on Dec 21, 2018

• More free_pass() for TPMv1 passwords

  dwmw2

  committedDec 21, 2018
  442f911

• Use free_pass() for freeing certificate passwords

  dwmw2

  committedDec 21, 2018
  5f6e428

Commits on Oct 13, 2018

• Fall back to tpm2tss engine

  dwmw2

  committedOct 13, 2018
  3453c36

Commits on Oct 12, 2018

• Remove legacy tpm2tss PEM support

  dwmw2

  committedOct 12, 2018
  9f93019

• Remove static ui_vpninfo hack for ENGINE callbacks

  dwmw2

  committedOct 12, 2018
  810ea00

• Switch to standard TSS2 PEM format

  dwmw2

  committedOct 12, 2018
  79bb454

Commits on Oct 3, 2018

• Add support for files from the *other* OpenSSL TPM2 engine. FFS.

  dwmw2

  committedOct 3, 2018
  ce6158f

Commits on Sep 27, 2018

• Use OpenSSL TPM2 engine

  dwmw2

  committedSep 27, 2018
  7edab6c

Commits on May 15, 2017

• Store only the SHA1 and SHA256 of the public key internally

  

  nmav

  authored and

  dwmw2

  committedMay 15, 2017
  b3e5f00

Commits on Dec 13, 2016

• Introduce SHA2-256 as a peer certificate hash and make it the default

  

  Nikos Mavrogiannopoulos

  authored and

  dwmw2

  committedDec 13, 2016
  bb8e67d

Commits on Sep 13, 2016

• Set SSL_OP_TLSEXT_PADDING to work around F5 firewall bugs

  

  David Woodhouse

  authored and

  David Woodhouse

  committedSep 13, 2016
  4224a82

• Allow OpenSSL to use TLSv1.2

  

  David Woodhouse

  authored and

  David Woodhouse

  committedSep 13, 2016
  2a4673b

Commits on Sep 10, 2016

• Extended MTU discovery to work even when compiled with openssl

  

  Nikos Mavrogiannopoulos

  authored and

  David Woodhouse

  committedSep 10, 2016
  ec9b7bf

Commits on Sep 8, 2016

• Fix Windows inet_pton() build warning

  

  David Woodhouse

  authored and

  David Woodhouse

  committedSep 8, 2016
  a06ed5d

Commits on Sep 7, 2016

• Call SSL_CTX_check_private_key() to validate cert+key match

  

  David Woodhouse

  authored and

  David Woodhouse

  committedSep 7, 2016
  4a991d3

Commits on Sep 6, 2016

• Check for errors from SSL_CTX_use_PrivateKey()

  

  David Woodhouse

  authored and

  David Woodhouse

  committedSep 6, 2016
  98017e8

Commits on Aug 31, 2016

• Fix build with LibreSSL.

  

  pkubaj

  authored and

  David Woodhouse

  committedAug 31, 2016
  9c36560

• Add support for EC PKCS#1 certs

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 31, 2016
  f7e0c05

Commits on Aug 27, 2016

• Add newlines to PKCS#12 error messages

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 27, 2016
  ce97549

• Fix crash in install_extra_certs() on PKCS#12 file containing no cert

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 27, 2016
  21867dc

Commits on Aug 24, 2016

• Add support for DER-encoded PKCS#1 and PKCS#8 files with OpenSSL

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 24, 2016
  f5487e0

Commits on Aug 23, 2016

• Print correct filename when key not found

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 23, 2016
  af903b0

Commits on Aug 19, 2016

• More OpenSSL 1.1 API breakage...

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 19, 2016
  189fccc

Commits on Aug 9, 2016

• Use X509_V_FLAG_PARTIAL_CHAIN for OpenSSL >= 1.0.2

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 9, 2016
  e7266bd

Commits on Aug 4, 2016

• Use DTLS_client_method() and TLS_client_method() for OpenSSL 1.1+

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 4, 2016
  2b6c774

Commits on Jul 25, 2016

• Revert to original OpenSSL workaround now we can access get_issuer()

  

  David Woodhouse

  authored and

  David Woodhouse

  committedJul 25, 2016
  fc5521f

Commits on Jul 8, 2016

• Fix build against OpenSSL 1.1 HEAD

  

  David Woodhouse

  authored and

  David Woodhouse

  committedJul 8, 2016
  0d635a0

Commits on May 6, 2016

• library: Add openconnect_get_peer_cert_chain()

  

  cernekee

  authored and

  David Woodhouse

  committedMay 6, 2016
  1da6649

Commits on Dec 2, 2015

• Revamp OpenSSL certificate validation

  

  David Woodhouse

  authored and

  David Woodhouse

  committedDec 2, 2015
  8b041c7

• For OpenSSL, also require that server cert on rehandshake be identical

  

  David Woodhouse

  authored and

  David Woodhouse

  committedDec 2, 2015
  7ec9c8e

• Use X509_up_ref() for OpenSSL 1.1.0+

  

  David Woodhouse

  authored and

  David Woodhouse

  committedDec 2, 2015
  cba203c

Commits on Oct 23, 2015

• Eliminate create_openssl_ui() in !HAVE_ENGINE build

  

  David Woodhouse

  authored and

  David Woodhouse

  committedOct 23, 2015
  8340eb9

• Fix use of X509_check_host

  

  nuxi

  authored and

  David Woodhouse

  committedOct 23, 2015
  43ceff4

Commits on Aug 5, 2015

• Let OpenSSL 1.0.2 or later do the certificate vs. hostname/IP checks for us

  

  David Woodhouse

  authored and

  David Woodhouse

  committedAug 5, 2015
  674881c

Commits on Apr 24, 2015

• Enable SNI extension with OpenSSL when version is 1.0.1g or above.

  

  David Dindorp

  authored and

  David Woodhouse

  committedApr 24, 2015
  a823e33

Pagination

PreviousNext