kaduk

Improve post-2038 compatibility of time_t usage

41

The Unix epoch will overflow a signed 32-bit integer in the year 2038, and many systems are updating time_t to be 64-bits or to treat the time as an unsigned...

On a fairly minimal debian sid system, my builds fail in libotp trying to link otptest due to missing symbols (e.g., __roken_dbm_open); it turns out that this is not due...

Forwarding a report from FreeBSD: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=245623 The heimdal in the FreeBSD base system is pretty ancient, identifying as 1.5.2, so mostly I'm interested in whether anyone remembers an issue like...

Once a draft is published as an RFC, we should probably update the notices about how to submit pull requests, etc. Leaving issue-filing open may still be useful as a...

define SSL_OP_NO_ANTI_REPLAY for clients

26

Currently, `SSL_OP_NO_ANTI_REPLAY` is only defined for server use (and only for TLS 1.3 at that), for removing the in-openssl checks that enforce single-use tickets [for early data]. (It's documented that...

Add X509_STORE_CTX_set0_store()

16

The existing function X509_STORE_CTX_set0_trusted_stack() allows the application to swap out the set of trusted certificates, setting the other_ctx field of the X509_STORE_CTX to a stack holding the certificates in question....