OpenSSL: support OCSP stapling on multi-cert servers
[exim.git] / src / src / tls-openssl.c
2019-09-29 Jeremy HarrisOpenSSL: support OCSP stapling on multi-cert servers
2019-09-26 Jeremy HarrisGnuTLS: full-chain OCSP stapling. Bug 1466
2019-09-20 Jeremy HarrisGnuTLS: Move to more-modern stapling API
2019-09-05 Jeremy Harristidying
2019-08-19 Jeremy Harristaint SNI values supplied by client
2019-08-03 Jeremy Harriscompiler quietening
2019-07-28 Jeremy HarrisFix crash after TLS channel shutdown
2019-07-25 Jeremy HarrisTrack tainted data and refuse to expand it
2019-05-28 Jeremy HarrisPIPE_CONNECT: promote from experimental
2019-05-08 Jeremy HarrisOpenSSL: fix build under older library version
2019-05-07 Jeremy HarrisOpenSSL: fix tls_out_ocsp under resumption
2019-05-07 Jeremy HarrisOpenSSL: fix tls_try_verify_hosts under resumption
2019-05-07 Jeremy HarrisTLS: increase resumption ticket lifetime to 2 hours
2019-05-07 Jeremy HarrisOpenSSL: discard expired resumption session in client
2019-05-05 Jeremy HarrisOpenSSL: better handling of $tls_{in,out}_certificate_v...
2019-05-05 Jeremy HarrisOpenSSL: for older library (1.0.2) assume that a ticket...
2019-05-04 Jeremy HarrisOpenSSL: increase STEK strength to 256b
2019-05-02 Jeremy HarrisTLS: library version build-time checks for resumption...
2019-05-02 Jeremy HarrisFix build on older OpenSSL
2019-05-02 Jeremy HarrisTLS: Session resumption, under the EXPERIMENTAL_TLS_RES...
2019-04-23 Jeremy HarrisCompiler quietening
2019-04-03 Jeremy HarrisOpenSSL: tidy options debug output
2019-04-03 Jeremy HarrisOpenSSL: tidy coding of session keys debug
2019-03-19 Jeremy HarrisOpenSSL: Fix aggregation of messages.
2019-03-12 Jeremy HarrisFix debug output of TLS keying info, client-side with...
2019-02-19 Jeremy HarrisTLS: refactor client-start interface
2019-02-12 Jeremy HarrisMerge branch '4.next'
2019-02-11 Jeremy HarrisTLS: add variables for the IETF standard name for the...
2019-02-11 Jeremy Harristidying
2019-02-11 Jeremy HarrisGnuTLS: Debug output keying info. OpenSSL: TLS1.2...
2019-02-10 Jeremy HarrisOpenSSL: send no TLS1.3 session tickets
2019-02-10 Jeremy HarrisOpenSSL: Debug output TLS 1.3 keying
2019-02-10 Jeremy HarrisOpenSSSL: support write-with-more-intent in client
2019-02-10 Jeremy HarrisUse C99 initialisations for iterators
2019-02-04 Jeremy HarrisTLS: add variables for the IETF standard name for the...
2019-02-04 Jeremy Harristidying
2019-01-16 Jeremy HarrisFix build with older TLS library versions
2019-01-16 Jeremy HarrisGnuTLS: Debug output keying info. OpenSSL: TLS1.2...
2018-12-30 Jeremy HarrisOpenSSL: send no TLS1.3 session tickets
2018-12-30 Jeremy HarrisOpenSSL: Debug output TLS 1.3 keying
2018-12-29 Jeremy HarrisOpenSSSL: support write-with-more-intent in client
2018-12-23 Jeremy HarrisUse C99 initialisations for iterators
2018-12-21 Jeremy HarrisOpenSSL: clear any leftover errors from the stack after...
2018-11-28 Jeremy HarrisOpenSSL: fail the handshake when SNI processing hits...
2018-11-28 Jeremy HarrisTLS: Increase RSA keysize of autogen selfsign cert
2018-11-06 Jeremy Harristidying
2018-11-05 Jeremy HarrisSquashed commit of PIPE_CONNECT
2018-10-23 Jeremy HarrisTidying: char signedness
2018-10-21 Jeremy HarrisDebug: provide for SIGALRM tracking
2018-10-14 Jeremy HarrisOpenSSL: Enhance connect/accept-time debug
2018-09-21 Jeremy HarrisOpenSSL: Check return value from X509_NAME_oneline...
2018-09-21 Jeremy HarrisDANE: ignore undersized TLSA records
2018-09-20 Jeremy HarrisBuiltin macros for OpenSSL options
2018-09-19 Jeremy HarrisConstification
2018-09-13 Jeremy HarrisCheck returncode from SSL_CTX_set_cipher_list()
2018-08-22 Jeremy HarrisUse single-bit fields for global flags
2018-07-27 Jeremy HarrisSupport REQUIRETLS
2018-06-25 Jeremy HarrisExpansions: A tls option on ${readsocket }. Bug 2282
2018-06-24 Jeremy HarrisTLS: rework client-side use with an explicit context...
2018-06-20 Jeremy HarrisOpenSSL: TLSv1.3 notes
2018-06-14 Jeremy HarrisOpenSSL: enable use of TLS 1.3 (with OpenSSL 1.1.0...
2018-05-24 Jeremy HarrisUse serial number 1 for self-generated selfsigned certi...
2018-04-16 Jeremy Harristidying
2018-04-16 Jeremy HarrisFix OpenSSL non-OCSP build
2018-04-15 Jeremy HarrisMerge branch '4.next'
2018-04-15 Jeremy HarrisAvoid doing logging in signal-handlers. Bug 1007
2018-04-08 Jeremy HarrisOpenSSL: Revert the disabling of the session-cache...
2018-03-31 Phil PennockMerge branch 'dane_require_tls_ciphers'
2018-03-30 Jeremy HarrisAvoid doing logging in signal-handlers. Bug 1007
2018-03-30 Jeremy HarrisDANE: smtp transport option dane_require_tls_ciphers
2018-03-29 Phil PennockImplement dane_require_tls_ciphers (theoretically)
2018-03-13 Jeremy HarrisCompiler quietening
2018-03-10 Jeremy HarrisExtra checks on inbound SMTP stream buffer refill
2018-02-22 Jeremy HarrisOpenSSL: revert needless free of certificate list....
2018-02-22 Jeremy HarrisWIP
2018-02-20 Wolfgang BreyhaOpenSSL: Fix memory leak during multi-message connectio...
2018-02-17 Jeremy HarrisFix memory leak during multi-message reception using...
2018-02-15 Jeremy HarrisDANE: move to mainline
2018-02-10 Heiko Schlitterman... Update copyright year to 2018
2018-02-09 Jeremy HarrisBuiltin macros for sha3-hash and ed25519-signing support
2018-01-07 Jeremy HarrisOpenSSL: fix OCSP stapling under DANE
2018-01-07 Jeremy HarrisOpenSSL: better debug info for OCSP
2017-12-19 Jeremy HarrisMerge branch '4.next'
2017-12-04 Jeremy HarrisFix non-OCSP OpenSSL build
2017-12-03 Jeremy HarrisGnuTLS: multiple server certs, OCSP stapling. Bug...
2017-11-25 Jeremy HarrisMerge branch 'master' into 4.next
2017-11-16 Jeremy HarrisOpenSSL: avoid using now-deprecated routines on newer...
2017-11-11 Jeremy HarrisMerge branch 'master' into 4.next
2017-11-07 Jeremy HarrisTLS: support multiple certificate files in server....
2017-10-28 Jeremy HarrisMerge branch 'master' into 4.next
2017-10-26 Jeremy HarrisDebug: add trace in the inlist expansion condition
2017-10-14 Jeremy HarrisString handling: refactor the expanding-string routines...
2017-10-03 Jeremy HarrisString handling: refactor the expanding-string routines...
2017-10-01 Jeremy HarrisMerge branch 'master' into 4.next
2017-08-14 Jeremy Harristidying
2017-07-15 Jeremy Harristidying
2017-07-09 Jeremy Harristidying
2017-05-25 Jeremy Harristypo
2017-05-21 Jeremy HarrisTLS: do not use DH_bits for LibreSSL; it is not support...
2017-05-21 Jeremy HarrisOpenSSL: add sender_host_address info to certificate...
next