openbsd/src/lib/libcrypto/Makefile, branch OPENBSD_7_5A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_52024-03-02T13:39:28+00:00Remove some GOST relics2024-03-02T13:39:28+00:00tb2024-03-02T13:39:28+00:00urn:sha1:b67dd091b5f82f671c4de5665606d30a7de36db5Unhook and remove GOST and STREEBOG2024-03-02T11:17:27+00:00tb2024-03-02T11:17:27+00:00urn:sha1:8ea5a70cb7cc8a88e0f55a52b08b9bf917e9ab4d
This stops compiling the GOST source. The current implementation is low
quality and got in the way, especially in libssl. While we would be open
for GOST support, it needs to be significantly better than what we have
had and it also needs a maintainer.
Add OPENSSL_NO_GOST to opensslfeatures and stop installing gost.h.
Some code wrapped in #ifndef OPENSSL_NO_GOST will be removed later.
ok jsing
Make LHASH_OF() and STACK_OF() use opaque structs2024-03-02T11:11:11+00:00tb2024-03-02T11:11:11+00:00urn:sha1:26367add3db68a3e89bda58a3c85174507f8e71a
This removes internals of these two special snowflakes and will allow
further simplifications. Unfortunately, there are some pieces of
software that actually use LHASH_OF() (looking at you, pound, Ruby, and
openssl(1)), so we get to keep exposing this garbage, at least for now.
Expose lh_error() as a symbol to replace a macro reaching into _LHASH.
lh_down_load() is no longer available. _LHASH and _STACK are now opaque,
LHASH_NODE becomes internal-only.
from jsing
Remove lh stats2024-03-02T11:04:52+00:00tb2024-03-02T11:04:52+00:00urn:sha1:792421b3f220abcbd1405485edc9bf6b39485769
This could have been removed in an earlier bump. Now it's time for it to
say goodbye.
ok jsing
Remove RC4-HMAC-MD5 and AES-{128,256}-CBC-HMAC-SHA-12024-03-02T10:13:13+00:00tb2024-03-02T10:13:13+00:00urn:sha1:feacafd961cf1e2403e9dcb6c3f6a0722730e87d
"Stitched" mode AEADs were removed from libssl a long time ago. Nothing
uses these CIPHERs anymore.
ok jsing
Remove the ameth lib2024-03-02T10:03:13+00:00tb2024-03-02T10:03:13+00:00urn:sha1:4ca63f0c3efae2522713a42bfe9cd20f7369b0fc
This is accessor API for ASN.1 methods needed for custom PKEYs.
Nothing has ever used this. This has been neutered for months.
The EVP_PKEY_asn1_* API that needs to stay was moved elsewhere.
ok jsing
Add posix_time.h from BoringSSL2024-02-18T16:28:38+00:00tb2024-02-18T16:28:38+00:00urn:sha1:9b6fdece880dc96473b19c7044c2996ec2371e53
This is prepares to expose some internal API as OPENSSL_tm_to_posix() and
OPENSSL_posix_to_tm(). They will be used in libtls and ocspcheck(8) to get
rid of the portability nightmare that is timegm().
Also fix the location of OPENSSL_gmtime() and OPENSSL_timegm() (this API
is not yet exposed). The former is from OpenSSL and surprisingly lives in
crypto.h, not asn1.h, and the latter is BoringSSL API and lives in the new
posix_time.h.
Initial diff from beck, this pulls in further upstream work after review
feedback.
ok jsing
Fold keyivgen functions into evp_pbe.c2024-01-27T17:14:33+00:00tb2024-01-27T17:14:33+00:00urn:sha1:680fb50105f63be549a32bfec49bd0a023a09d82
These are only used by the EVP_PBE routines and will become internal in
the next major bump.
The OBJ_NAME API joins the party in evp_names.c2024-01-13T12:18:52+00:00tb2024-01-13T12:18:52+00:00urn:sha1:24cedf0f15ad1593149319e538270eb81d6b0b6c
... and another file without license disappears.
Move EVP_add_{cipher,digest}() to the trashcan2024-01-13T12:15:27+00:00tb2024-01-13T12:15:27+00:00urn:sha1:baaadaa13e73120edb7a69a5d7e2d21c2898f860
They will await their removal in the next major bump.