aboutsummaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
...
* add documentationDr. Stephen Henson2016-08-132-0/+12
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* GH1446: Add SSL_SESSION_get0_cipherRich Salz2016-08-121-0/+42
| | | | Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1451)
* Update documentation for DSA_SIG and ECDSA_SIG.Dr. Stephen Henson2016-08-122-3/+3
| | | | | | RT#4590 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix doc and help about ca -valid optionFdaSilvaYY2016-08-111-0/+5
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Fixed typojamercee2016-08-101-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1386)
* Documented BIO_set_accept_port()/BIO_get_accept_port()JimC2016-08-101-4/+11
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1386)
* Adapt BIO_new_accept() to call BIO_set_accept_name()jamercee2016-08-101-13/+18
| | | | | | | | | | | | Commit 417be66 broken BIO_new_accept() by changing the definition of the macro BIO_set_accept_port() which stopped acpt_ctrl() from calling BIO_parse_hostserv(). This commit completes the series of changes initiated in 417be66. Updated pods to reflect new definition introduced by 417be66. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1386)
* Add #defines for magic numbers in API.Rich Salz2016-08-101-6/+11
| | | | | | Binary- and backward-compatible. Just better. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1429)
* Add some const castsRich Salz2016-08-101-3/+3
| | | | Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1397)
* CT: fix documentationEmilia Kasper2016-08-101-9/+9
| | | | | | Make method names match reality Reviewed-by: Rich Salz <rsalz@openssl.org>
* spelling fixes, just comments and readme.klemens2016-08-0510-10/+10
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1413)
* Constify some ASN1_OBJECT *obj input parametersFdaSilvaYY2016-08-044-9/+9
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Constify input bufferFdaSilvaYY2016-08-042-3/+3
| | | | | | | of X509_NAME_add_entry_by_OBJ, X509_NAME_add_entry_by_NID, X509_NAME_ENTRY_create_by_NID Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Constify ASN1_INTEGER_get, ASN1_ENUMERATED_getFdaSilvaYY2016-08-041-2/+2
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix some style issues...FdaSilvaYY2016-08-022-2/+2
| | | | | | | extra spacing and 80 cols Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1366)
* Document certificate and CRL time functions.Dr. Stephen Henson2016-08-011-0/+92
| | | | | | RT#4639 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Constify some X509_CRL, X509_REQ functions.Dr. Stephen Henson2016-08-012-4/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add DSA_bits() function.Dr. Stephen Henson2016-08-011-5/+11
| | | | | | RT#4637 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix typo of BN_zero()Kurt Roeckx2016-08-011-1/+1
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Const the ex data stuff too to fix warningsRichard J. Moore2016-08-011-1/+1
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix the docs tooRichard J. Moore2016-07-302-3/+3
| | | | | Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1367)
* Update the SSL_set_bio()/SSL_set0_rbio()/SSL_set0_wbio() docsMatt Caswell2016-07-291-14/+68
| | | | | | | | Update the documentation for the newly renamed and modified SSL_set0_rbio() and SSL_set0_wbio() functions. State that they should be preferred over SSL_set_bio(). Attempt to document the ownership rules for SSL_set_bio(). Reviewed-by: Rich Salz <rsalz@openssl.org>
* Various doc fixes.Rich Salz2016-07-289-32/+134
| | | | | | | | Cannot nest B<> tags Document "openssl speed" command. Fix doc nits: missing NAME/SYNOPSIS stuff Reviewed-by: Tim Hudson <tjh@openssl.org>
* Update the example in proxy_certificates.txtRichard Levitte2016-07-261-105/+118
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Discard BIO_set(BIO* bio) methodFdaSilvaYY2016-07-252-4/+7
| | | | | | | Simplify BIO init using OPENSSL_zalloc(). Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1261)
* Make it possible for external code to set the certiciate proxy path lengthRichard Levitte2016-07-251-3/+20
| | | | | | | | | | | | | This adds the functions X509_set_proxy_pathlen(), which sets the internal pc path length cache for a given X509 structure, along with X509_get_proxy_pathlen(), which retrieves it. Along with the previously added X509_set_proxy_flag(), this provides the tools needed to manipulate all the information cached on proxy certificates, allowing external code to do what's necessary to have them verified correctly by the libcrypto code. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add X509_STORE lock and unlock functionsRichard Levitte2016-07-251-3/+11
| | | | | | | | Since there are a number of function pointers in X509_STORE that might lead to user code, it makes sense for them to be able to lock the store while they do their work. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Document the X509_STORE and X509_STORE_CTX setters and gettersRichard Levitte2016-07-252-16/+222
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* RT4627: Doc patch: fix constant namesSteffen Nurpmeso2016-07-251-2/+2
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Signed-off-by: Rich Salz <rsalz@openssl.org>
* Constify X509|X509_CRL|X509_REVOKED_get_extFdaSilvaYY2016-07-251-3/+3
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Constify ... X509|X509_CRL|X509_REVOKED|_get_ext*()FdaSilvaYY2016-07-252-13/+13
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Constify ...FdaSilvaYY2016-07-252-2/+2
| | | | | | | | X509_REVOKED_get0_extensions X509_check_private_key Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Constify (X509|X509V3|X509_CRL|X509_REVOKED)_get_ext_d2i ...FdaSilvaYY2016-07-251-4/+4
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Constify input parameters of methods :FdaSilvaYY2016-07-253-4/+4
| | | | | | | | - X509_NAME_entry_count, X509_ATTRIBUTE_count - X509_NAME_add_entry_by_OBJ, X509_NAME_ENTRY_create_by_OBJ, X509_NAME_ENTRY_set_object Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Constify i2t_ASN1_OBJECT, i2d_ASN1_OBJECT, i2a_ASN1_OBJECT.FdaSilvaYY2016-07-251-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Constify ASN1_TYPE_get, ASN1_STRING_type, ASN1_STRING_to_UTF8, ↵FdaSilvaYY2016-07-252-3/+3
| | | | | | | ASN1_TYPE_get_octetstring & co... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Constify EC_KEY_*_oct2priv() input bufferFdaSilvaYY2016-07-251-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Add EVP_ENCODE_CTX_copyJakub Zelenka2016-07-241-4/+8
| | | | | Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1344)
* Make it possible for external code to flag a certificate as a proxy one.Richard Levitte2016-07-231-3/+8
| | | | | | | This adds the function X509_set_proxy_flag(), which sets the internal flag EXFLAG_PROXY on a given X509 structure. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Clarify digest change in HMAC_Init_ex()Dr. Stephen Henson2016-07-221-7/+11
| | | | | | RT#4603 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix if/for/while( in docsFdaSilvaYY2016-07-209-33/+35
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1292)
* Resolve over command syntax error which causes 'make install' to failCoty Sutherland2016-07-191-0/+9
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1312)
* Document the slight change in CRYPTO_mem_ctrl()Richard Levitte2016-07-191-1/+2
| | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Document the slight change in ERR_get_next_error_library()Richard Levitte2016-07-191-1/+2
| | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* RT4593: Add space after comma (doc nits)Rich Salz2016-07-1938-88/+88
| | | | | | | Update find-doc-nits to find errors in SYNOPSIS (the most common place where they were missing). Reviewed-by: Matt Caswell <matt@openssl.org>
* SSL test framework: port NPN and ALPN testsEmilia Kasper2016-07-191-1/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Install applink.c with the public header files.Richard Levitte2016-07-141-1/+2
| | | | | | | | | This is only done for the platforms where 'OPENSSL_USE_APPLINK' is defined. Also, change the docs of OPENSSL_Applink to say where to find applink.c in the installation directory. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add OCSP accessors.Dr. Stephen Henson2016-07-131-0/+13
| | | | | | RT#4605 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Perform DANE-EE(3) name checks by defaultViktor Dukhovni2016-07-121-1/+46
| | | | | | | | | | In light of potential UKS (unknown key share) attacks on some applications, primarily browsers, despite RFC761, name checks are by default applied with DANE-EE(3) TLSA records. Applications for which UKS is not a problem can optionally disable DANE-EE(3) name checks via the new SSL_CTX_dane_set_flags() and friends. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Replace all #define's in pod pages.Rich Salz2016-07-0836-343/+279
| | | | | | | | | | | | Function-like macros are replaced with prototypes and a note that they are implemented as macros. Constants are just referenced in-line in the text. Tweak BIO_TYPE_... documentation. Also fix RT4592. Reviewed-by: Matt Caswell <matt@openssl.org>