<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/cms, branch OPENBSD_7_3_BASE</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_7_3_BASE</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_7_3_BASE'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2023-03-12T17:29:02+00:00</updated>
<entry>
<title>pk7_cb() and cms_cb()</title>
<updated>2023-03-12T17:29:02+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-03-12T17:29:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a000ef26734da6ea7f446ae52ac64059cf358592'/>
<id>urn:sha1:a000ef26734da6ea7f446ae52ac64059cf358592</id>
<content type='text'>
Add and fix FALLTHROUGH statement. I was confused for way too long since
I hadn't noticed that this case fell through to the next. Also add and
move some empty lines in the cms_cb() to make this resemble KNF more.
</content>
</entry>
<entry>
<title>Make header guards of internal headers consistent</title>
<updated>2022-11-26T17:23:18+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-11-26T17:23:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=3a1908508efa61f3f77ac8036694af2f920df947'/>
<id>urn:sha1:3a1908508efa61f3f77ac8036694af2f920df947</id>
<content type='text'>
Not all of them, only those that didn't leak into a public header...
Yes.
</content>
</entry>
<entry>
<title>Make internal header file names consistent</title>
<updated>2022-11-26T16:08:57+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-11-26T16:08:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=81d98bf600a381a625eb11b39a725b08c0ba547f'/>
<id>urn:sha1:81d98bf600a381a625eb11b39a725b08c0ba547f</id>
<content type='text'>
Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names
used for internal headers. Move all these headers we inherited from
OpenSSL to *_local.h, reserving the name *_internal.h for our own code.
Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h.
constant_time_locl.h is moved to constant_time.h since it's special.

Adjust all .c files in libcrypto, libssl and regress.

The diff is mechanical with the exception of tls13_quic.c, where
#include &lt;ssl_locl.h&gt; was fixed manually.

discussed with jsing,
no objection bcook
</content>
</entry>
<entry>
<title>Plug memory leak in CMS_add_simple_smimecap() in the unlikely event that</title>
<updated>2022-08-28T18:27:47+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-08-28T18:27:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=b0456ada9d95082610b820d3b1226160e07765d5'/>
<id>urn:sha1:b0456ada9d95082610b820d3b1226160e07765d5</id>
<content type='text'>
ASN1_INTEGER_set() fails.

ok jsing
</content>
</entry>
<entry>
<title>Remove mkerr.pl remnants from LibreSSL</title>
<updated>2022-07-12T14:42:50+00:00</updated>
<author>
<name>kn</name>
<email></email>
</author>
<published>2022-07-12T14:42:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=89e42d5857196a8071fbafb5565388d0e20ec32b'/>
<id>urn:sha1:89e42d5857196a8071fbafb5565388d0e20ec32b</id>
<content type='text'>
This script is not used at all and files are edited by hand instead.
Thus remove misleading comments incl. the obsolete script/config.

Feedback OK jsing tb
</content>
</entry>
<entry>
<title>Add check for EVP_CIPHER_CTX_set_key_length return value</title>
<updated>2022-01-20T10:58:35+00:00</updated>
<author>
<name>inoguchi</name>
<email></email>
</author>
<published>2022-01-20T10:58:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2192f9d8c922d7178d2f2df094d0e82bb30c8afb'/>
<id>urn:sha1:2192f9d8c922d7178d2f2df094d0e82bb30c8afb</id>
<content type='text'>
It returns 1 on success and 0 for failure, never negative value.

ok jsing@ millert@ tb@
</content>
</entry>
<entry>
<title>Check return value from EVP_CIPHER_CTX_new in cms_pwri.c</title>
<updated>2022-01-19T13:47:44+00:00</updated>
<author>
<name>inoguchi</name>
<email></email>
</author>
<published>2022-01-19T13:47:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=588ca0cba94f4202b54289ec730f971a07e97001'/>
<id>urn:sha1:588ca0cba94f4202b54289ec730f971a07e97001</id>
<content type='text'>
CID 345137

ok jsing@ tb@
</content>
</entry>
<entry>
<title>Garbage collect the app_items field of ASN1_ADB</title>
<updated>2022-01-14T08:16:13+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-01-14T08:16:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=ec5f7af843436771be5081c868e0fb0b44069ead'/>
<id>urn:sha1:ec5f7af843436771be5081c868e0fb0b44069ead</id>
<content type='text'>
This is unused and was removed in OpenSSL 5b70372d when it was
replaced with an ASN.1 ADB callback (which we don't support).

ok inoguchi jsing
</content>
</entry>
<entry>
<title>Move the now internal X.509-related structs into x509_lcl.h.</title>
<updated>2021-11-01T20:53:08+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2021-11-01T20:53:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f478d62658b61e2242dbf3575bf454f8c0f432b1'/>
<id>urn:sha1:f478d62658b61e2242dbf3575bf454f8c0f432b1</id>
<content type='text'>
Garbage collect the now unused LIBRESSL_CRYPTO_INTERNAL and
LIBRESSL_OPAQUE_X509. Include "x509_lcl.h" where needed and
fix a couple of unnecessary reacharounds.

ok jsing
</content>
</entry>
<entry>
<title>Fix leak in cms_RecipientInfo_kekri_decrypt()</title>
<updated>2021-09-08T14:33:02+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2021-09-08T14:33:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=34dad726781647a28729bb3e2fa6f77ca206abe8'/>
<id>urn:sha1:34dad726781647a28729bb3e2fa6f77ca206abe8</id>
<content type='text'>
Free ec-&gt;key before reassigning it.

From OpenSSL 1.1.1, 58e1e397

ok inoguchi
</content>
</entry>
</feed>
