openbsd/src/lib/libcrypto/Symbols.list, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92025-10-24T11:33:38+00:00Expose X509_VERIFY_PARAM_get_hostflags()2025-10-24T11:33:38+00:00tb2025-10-24T11:33:38+00:00urn:sha1:f77c42a93e09c937696f65c6aefd2b3120a20cff
This is needed by Python 3.14, extending the urllib3 nonsense further.
This is a trivial getter and it is exercised by the libssl unit test
I added for urllib3 (which can now use dynamic linking for libcrypto).
Fixes https://github.com/libressl/portable/issues/1202
Thanks to @orbea for the report.
ok kenjiro
PS: X509_VERIFY_PARAM_get_flags() and X509_VERIFY_PARAM_get_peername()
aren't const correct. Fixing this will require some doing...
An executive decision has been taken to expose marshal private key as well2025-08-19T21:37:08+00:00tb2025-08-19T21:37:08+00:00urn:sha1:fe2206ea0ebbcabbfbe6889f6747287fae32b1fc
rides the libcrypto bump
Expose beck's version of BoringSSL's ML-KEM APi2025-08-19T19:29:40+00:00tb2025-08-19T19:29:40+00:00urn:sha1:c0f79bb3e045369a9b889c196c9c4a1aec657d39
This includes interfaces for public and private keys for ML-KEM 768
and 1024. Marshalling and parsing of public keys and parsing of the
wasteful NIST format of private keys (marshalling this private key
format is deliberately omitted from the public API). Decapsulation
and encapsulation of shared secrets.
This will soon be used to implement the X25519MLKEM768 hybrid key
agreement in libssl.
ok beck jsing
Add back the ASN1_{,F,T}BOOLEAN_it ASN.1 items2025-08-19T19:27:00+00:00tb2025-08-19T19:27:00+00:00urn:sha1:765e497f9697935834bb4064789c931ef52106ba
I was overeager to remove those a while back. This was dumb because
this is about a basic ASN.1 type. The Gentoo maintainers found that
tpm2-tools uses templated ASN.1 involving them.
Fixes https://github.com/libressl/portable/issues/1178
ok beck jsing
Ride the libcrypto bump with some simple cleanup:2025-07-16T15:59:26+00:00tb2025-07-16T15:59:26+00:00urn:sha1:c82a6c2e80c4901e67b15003b73d79f25ed56a6c
Remove BIO_s_log(): already unhooked in portable, completely unused.
Remove X509_PKEY_new/free from public API. Remove PEM_X509_INFO_read()
PEM_X509_INFO_write_bio(): all unused garbage.
The simplify X509_PKEY_new/free was ok kenjiro.
Reinstate PKCS12_key_gen_uni()2025-03-09T15:45:52+00:00tb2025-03-09T15:45:52+00:00urn:sha1:9971249d16e9e04b0af48f612febcd91710abad9
Unfortunately, this is used in acsm-calibre-plugin, via oscrypto.
Fixes https://github.com/Leseratte10/acsm-calibre-plugin/issues/112
ok jsing
Remove EC_POINTs_* API2025-03-09T15:42:19+00:00tb2025-03-09T15:42:19+00:00urn:sha1:4be808e28680e2a2170b30eec229c60cf8d921ec
And another one... Completely overengineered for the sake of academic
credentials and only Ruby ever picked this garbage up. Fortunately, it's
no longer used with LibreSSL since we defanged this in 2018. The latest
version of ruby/openssl has completely removed this as part of their post
1.0.x cleanup.
ok jsing
Remove Jprojective_coordinates API2025-03-09T15:39:39+00:00tb2025-03-09T15:39:39+00:00urn:sha1:56f34fa2487d9426eeedabbd78842094c36f8c8c
There goes another implementation detail that should never have been leaked
out of the library.
ok jsing
Unexport EC_GROUP_*precompute_mult()2025-03-09T15:37:31+00:00tb2025-03-09T15:37:31+00:00urn:sha1:6bee4b83725b153b6d7208954ada4af2402d16da
These have been noops for a while and as usual some Perl module was the
only thing "using" it.
ok jsing
Unexport EC_GROUP_copy()2025-03-09T15:35:40+00:00tb2025-03-09T15:35:40+00:00urn:sha1:4ddad434176a7ad7ea0ce3b49407fb745e911351
Without EC_GROUP_new(), this API is useless. There's EC_GROUP_dup().
ok jsing