openbsd/src/lib/libcrypto/conf, branch libressl-v3.8.0A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=libressl-v3.8.02022-07-12T14:42:50+00:00Remove mkerr.pl remnants from LibreSSL2022-07-12T14:42:50+00:00kn2022-07-12T14:42:50+00:00urn:sha1:89e42d5857196a8071fbafb5565388d0e20ec32b
This script is not used at all and files are edited by hand instead.
Thus remove misleading comments incl. the obsolete script/config.
Feedback OK jsing tb
Restrict the length of openssl conf value string2020-02-17T12:51:48+00:00inoguchi2020-02-17T12:51:48+00:00urn:sha1:87fb9bdd12641546dd753d42025a1427113b4747
There was no limitation for the length of openssl conf value.
This brings possibility of out-of-memory problem as oss-fuzz had detected.
This diff restricts the length of conf value up to 64k.
ok jsing@
I should not be calling ENGINE_load_builtin_engines_internal2018-03-19T03:56:08+00:00beck2018-03-19T03:56:08+00:00urn:sha1:74a14c647b3e5439c7c6eb66de27b4468df22bab
here, just the normal version.
ok jsing@
Correct mistake of loading the default openssl.conf by default during autoinit.2018-03-19T03:35:38+00:00beck2018-03-19T03:35:38+00:00urn:sha1:02fd65d9fc788d4e8e18c251840f300031577d70
This brings in the OPENSSL_INIT_LOAD_CONFIG flag with the same semantics as
OpenSSL. As a result, by default the openssl.conf file is not loaded during
autoinit, which makes autoinit safe for pledge(stdio).
ok jsing@
Bring in compatibility for OpenSSL 1.1 style init functions.2018-03-17T16:20:01+00:00beck2018-03-17T16:20:01+00:00urn:sha1:035770aca4c8c1f0d36f1b8da62c9e1fb9a4f09b
This adds OPENSSL_init_crypto and OPENSSL_init_ssl, as well
thread safety modifications for the existing LibreSSL init
functions. The initialization routines are called automatically
by the normal entry points into the library, as in newer OpenSSL
ok jsing@, nits by tb@ and deraadt@
Send the function codes from the error functions to the bit bucket,2017-01-29T17:49:23+00:00beck2017-01-29T17:49:23+00:00urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0
as was done earlier in libssl. Thanks inoguchi@ for noticing
libssl had more reacharounds into this.
ok jsing@ inoguchi@
Explicitly export a list of symbols from libcrypto.2016-12-21T15:49:29+00:00jsing2016-12-21T15:49:29+00:00urn:sha1:18adabd97858ed28289c9dc31e8042c515840be4
Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting
the bn_* symbols. These are documented as only being intended for internal
use, so why they were placed in a public header is beyond me...
This hides 363 previously exported symbols, most of which exist in headers
that are not installed and were never intended to be public. This also
removes a few crusty old things that should have died long ago (like
_ossl_old_des_read_pw). But don't worry... there are still 3451 symbols
exported from the library.
With input and testing from inoguchi@.
ok beck@ inoguchi@
Do not *printf %s NULL2016-08-05T17:25:51+00:00deraadt2016-08-05T17:25:51+00:00urn:sha1:eddbbea455d49711cb896d4dde20250e7893645c
ok bcook
Coverity 216512015-07-18T22:42:09+00:00beck2015-07-18T22:42:09+00:00urn:sha1:78599d7242781ff79777272759bc1dfa92ca0304
ok doug@
use strdup() to init string2015-04-30T15:28:03+00:00deraadt2015-04-30T15:28:03+00:00urn:sha1:d1f5c22fd717e9c23f0872123144e73e792e46d5
ok doug millert