openbsd/src/lib/libcrypto/Makefile, branch OPENBSD_7_2A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_22022-08-20T09:16:18+00:00Add an empty pkcs12_local.h and include it where it will soon be needed.2022-08-20T09:16:18+00:00tb2022-08-20T09:16:18+00:00urn:sha1:ecbb64fca8f7fc649376c65a0b2850eeb54efab1Prepare to provide PKCS12 accessors2022-08-03T20:16:06+00:00tb2022-08-03T20:16:06+00:00urn:sha1:a32a61a3aa20740d1ab3245e6e33400a7dcfd2ee
In order to be able to make pkcs12/ opaque, we need an entire family of
accessors. These are in a particularly nasty tangle since this was done
in about a dozen steps while sprinkling const, renaming functions, etc.
The public API also adds backward compat macros for functions that were
in the tree for half a day and then renamed. Of course some of them got
picked up by some ports.
Some of the gruesome hacks in here will go away with the next bump, but
that doesn't mean that the pkcs12 directory will be prettier afterward.
ok jsing
Start making ts opaque2022-07-24T08:16:47+00:00tb2022-07-24T08:16:47+00:00urn:sha1:2fafe1cde355b3cfbb3b49badb99d5597b3f3fa5
Move the not yet exposed EssCertIDv2 struct internals to ts_local.h and move
the ASN.1 function prototypes that we don't want to expose with them.
Include ts_local.h where necessary or where it will be needed soon.
ok jsing
Link bn_bpsw.c to build2022-07-13T06:32:54+00:00tb2022-07-13T06:32:54+00:00urn:sha1:2fa4bd3738dde96498ff47a9bb66c6847c0a0695
ok jsing
Link bn_isqrt.c to build2022-07-13T06:28:58+00:00tb2022-07-13T06:28:58+00:00urn:sha1:10f62c54fd5691cd09377d5cae11e191ccd1fa4d
ok jsing
Remove openssl/cterr.h and inline it in openssl/ct.h2022-05-08T20:59:32+00:00tb2022-05-08T20:59:32+00:00urn:sha1:8ce75307b6eeae36eef3a3458c5163787c3d2fb7
ok jsing
Link kdf/ to the build2022-05-05T08:50:35+00:00tb2022-05-05T08:50:35+00:00urn:sha1:61f87d6bab02ca142d42109ef2f1128a3a67831d
ok beck jsing
Start disentangling armv7 and aarch64 code2022-03-23T15:13:31+00:00tb2022-03-23T15:13:31+00:00urn:sha1:81e4a05dff593f3e62ed9485ebea2c4ea2415c6d
arm_arch.h and armcap.c are shared between armv7 and aarch64 which
results in an inscrutable #ifdef maze. Move copies of these files
into arch/{arm,aarch64}/ with appropriate names and some trivial
minor adjustments.
ok deraadt inoguchi kettenis
Remove legacy sign/verify from EVP_MD.2022-01-14T08:38:06+00:00tb2022-01-14T08:38:06+00:00urn:sha1:d5bd2d64a9d8dacaf683f88f953d25c96a7009ff
This removes m_dss.c, m_dss1.c, and m_ecdsa.c and the corresponding
public API EVP_{dss,dss1,ecdsa}().
This is basically the following OpenSSL commit. The mentioned change in
RSA is already present in rsa/rsa_pmeth.c.
ok inoguchi jsing
commit 7f572e958b13041056f377a62d3219633cfb1e8a
Author: Dr. Stephen Henson <steve@openssl.org>
Date: Wed Dec 2 13:57:04 2015 +0000
Remove legacy sign/verify from EVP_MD.
Remove sign/verify and required_pkey_type fields of EVP_MD: these are a
legacy from when digests were linked to public key types. All signing is
now handled by the corresponding EVP_PKEY_METHOD.
Only allow supported digest types in RSA EVP_PKEY_METHOD: other algorithms
already block unsupported types.
Remove now obsolete EVP_dss1() and EVP_ecdsa().
Reviewed-by: Richard Levitte <levitte@openssl.org>
Plus OpenSSL commit 625a9baf11c1dd94f17e5876b6ee8d6271b3921d for m_dss.c
Remove obsolete key formats2022-01-14T08:12:31+00:00tb2022-01-14T08:12:31+00:00urn:sha1:52dcf108ffdd923eecabf36d4015036834354df8
This removes NETSCAPE_X509, NETSCAPE{,_ENCRYPTED}_PKEY, RSA_NET,
Netscape_RSA things. Some of the nasty tentacles that could go in
principle are used in some test suites, so we need to keep them...
All this was removed as part of OpenSSL commit 0bc2f365.
ok inoguchi jsing