openbsd/src/lib/libcrypto/cms, branch libressl-v3.9.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.9.1 2024-02-02T14:13:11+00:00 Ignore EVP_MD_CTX_reset() return value 2024-02-02T14:13:11+00:00 tb 2024-02-02T14:13:11+00:00 urn:sha1:596318a93b385d8ceac9fe58bdc42976e748c110 Also drop now unnecessary NULL checks before it. Ignore EVP_CIPHER_CTX_reset() return value, it can't fail 2024-02-02T14:11:45+00:00 tb 2024-02-02T14:11:45+00:00 urn:sha1:b1040daba222a9faca83108369fe805c1eb5b2d5 Tidy a few more includes in cms/ 2024-01-14T18:40:24+00:00 tb 2024-01-14T18:40:24+00:00 urn:sha1:d8fbbf56c16588a8c19188dc49bc5b3ddc1eb704 Clean up includes in cms_smime.c 2023-12-22T10:23:11+00:00 tb 2023-12-22T10:23:11+00:00 urn:sha1:be0bb03b7cb6789b3ea101b1fa9906e3d34afc23 Clean up includes in cms_pwri.c 2023-12-20T18:38:19+00:00 tb 2023-12-20T18:38:19+00:00 urn:sha1:79d93706d8ddf516d3dc56f5c0ff0f129c35efc5 Tidy includes 2023-10-26T09:08:57+00:00 tb 2023-10-26T09:08:57+00:00 urn:sha1:67cb76e74e33486ee4b670235412c0727b4b4023 Use X509_ALGOR_set_evp_md() in CMS_add1_signer() 2023-10-18T07:30:49+00:00 tb 2023-10-18T07:30:49+00:00 urn:sha1:8e27400f3be8740bb959238b66aa047cb43bfd4a Contrary to X509_ALGOR_set_md() this allows for error checking. Avoid local complications by freeing in the exit path and use a const version of X509_ALGOR for walking a STACK_OF() to avoid a bad free. Clean up includes ok jsing cms_DigestedData_create() use X509_ALGOR_set_evp_md() 2023-10-18T07:24:15+00:00 tb 2023-10-18T07:24:15+00:00 urn:sha1:46c5c914ea23794d946df13aad0d291d383c1765 Our internal version allows for error checking and this avoids a silent failure leading to corruption later on. Clean up includes while there. ok jsing Small cleanups in cms_sd_asn1_ctrl(): 2023-09-11T09:29:30+00:00 tb 2023-09-11T09:29:30+00:00 urn:sha1:7b9ac939ddc743eb500e57c6326c5f8fde2eda31 Compare explicitly against NULL and use ret instead of i. Rewrite CMS_SignerInfo_{sign,verify}() 2023-09-11T09:24:14+00:00 tb 2023-09-11T09:24:14+00:00 urn:sha1:a85fbcce5ef459e11c27d544f9823aee7b0c441d Convert to using one-shot signing and verification. This is simpler than doing Init/Update/Final and necessary for Ed25519 support (RFC 8419). Use a single exit idiom, don't reuse the same buffer for decoding and signing and simplify a few other things. ok jsing