openbsd, branch tb_20210818A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=tb_202108182021-08-18T16:06:57+00:00This commit was manufactured by cvs2git to create tag 'tb_20210818'.2021-08-18T16:06:57+00:00cvs2svnadmin@example.com2021-08-18T16:06:57+00:00urn:sha1:d56c8fa8260d226f98b26f017b45b9c2b135f38dImport regress tests for SM2. Not yet linked to the build.2021-08-18T16:06:56+00:00tb2021-08-18T16:06:56+00:00urn:sha1:18b9c1bcab7c37d8c5bd05b8e0d14d0c59d96650
Part of Github PR #105
Import initial code for the SM2 cipher2021-08-18T16:04:32+00:00tb2021-08-18T16:04:32+00:00urn:sha1:a20accd2bfd8ef02b4b4e6d1e5e7cb57e0a536e4
This adds the SM2 algorithm defined in the Chinese standards
GB/T 32918.1-2016, GB/T 32918.2-2016, GB/T 32918.3-2016,
GB/T 32918.4-2016 and GB/T 32918.5-2017.
This is an ISC licensed implementation contributed by Ribose.inc, based
on the same code that was contributed to OpenSSL by Jack Lloyd. The port
to LibreSSL was done by Ronald Tse and Nickolay Olshevsky.
Github PR #105
I made quite a few cleanup passes on this, but more is needed, some
of which will happen in-tree before this is linked to the build.
ok deraadt inoguchi (a long time ago), jsing
Add a check_trust call to the legacy chain validation on chain add, remembering2021-08-18T15:32:38+00:00beck2021-08-18T15:32:38+00:00urn:sha1:3a5e633f2def93f8e8c43882018f2f5efb474848
the result in order to return the same errors as OpenSSL users expect to override
the generic "Untrusted cert" error.
This fixes the openssl-ruby timestamp test.
ok tb@
Refactor the legacy chain validation from the chain adding code into its2021-08-18T15:10:46+00:00beck2021-08-18T15:10:46+00:00urn:sha1:54eced1b0209560349d92f6b59f1ee964afb1dde
own function, in preparation for subesquent change. No functional change.
ok tb@
typo in comment2021-08-16T13:54:38+00:00tb2021-08-16T13:54:38+00:00urn:sha1:04e41504d4c620b934118a8ae9c2129f626a96c1add new (unsupported) eddsa in certificate verify tests2021-08-11T19:45:08+00:00tb2021-08-11T19:45:08+00:00urn:sha1:1075aa8c68a7a61effbf80ecfbc9fd6564109647link X509_STORE_get_by_subject(3) and X509_ocspid_print(3) to the build,2021-08-06T21:50:54+00:00schwarze2021-08-06T21:50:54+00:00urn:sha1:97c6e4ce5291e57bb264ab5855d94e78b09cf897
forgotten in earlier commits
new manual page X509_ocspid_print(3)2021-08-06T21:45:55+00:00schwarze2021-08-06T21:45:55+00:00urn:sha1:172327ff6e7395b57b84c156f9f430cee461e85a
using input from tb@, and OK tb@ on an earlier version
add a roff(7) comment marking the API function X509_get_default_private_dir()2021-08-06T19:09:56+00:00schwarze2021-08-06T19:09:56+00:00urn:sha1:11e33693517266d4557f25304a7ba8843d4535fe
as intentionally undocumented because it is trivial and unused in the wild;
OK tb@