openbsd/src/lib/libcrypto/crypto, branch libressl-v2.3.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.3.1 2015-10-19T16:32:37+00:00 Stop supporing "legcay" time formats that OpenSSL supports. Rewrite the 2015-10-19T16:32:37+00:00 beck 2015-10-19T16:32:37+00:00 urn:sha1:6f20e3b7bc4e6801abfde111c397198fb23a59ec utctime and gentime wrappers accordingly. Along with some other cleanup. this also removes the need for timegm. ok bcook@ sthen@ jsing@ Flense the greasy black guts of unreadble string parsing code out of three areas 2015-10-02T15:04:45+00:00 beck 2015-10-02T15:04:45+00:00 urn:sha1:0fdba47b730ef7a8d2107e42c5db7b2a3e008a8f in asn1 and x509 code, all dealing with an ASN1_TIME. This brings the parsing together in one function that converts into a struct tm. While we are at it this also brings us into conformance with RFC 5280 for times allowed in an X509 cert, as OpenSSL is very liberal with what it allows. input and fixes from deraadt@ jsing@ guethther@ and others. ok krw@, guenther@, jsing@ Temporarily revive MD4 for MS CHAP support. 2015-09-14T01:45:03+00:00 doug 2015-09-14T01:45:03+00:00 urn:sha1:ea990ff7851a189e7a61b56357a6d6e0de88a040 Crank major version due to removal of SHA-0 and MD4 from libcrypto. 2015-09-13T23:42:29+00:00 doug 2015-09-13T23:42:29+00:00 urn:sha1:da36d6a18c187f8d3c2e38a0e5940d8073110b10 Remove MD4 support from LibreSSL. 2015-09-13T23:36:21+00:00 doug 2015-09-13T23:36:21+00:00 urn:sha1:785c6ad9250acc090d76964e9c21e550856a22f3 MD4 should have been removed a long time ago. Also, RFC 6150 moved it to historic in 2011. Rides the major crank from removing SHA-0. Discussed with many including beck@, millert@, djm@, sthen@ ok jsing@, input + ok bcook@ Remove SHA-0 support. 2015-09-13T21:09:56+00:00 doug 2015-09-13T21:09:56+00:00 urn:sha1:f84194ca116d8e28c7eb7098c2c8d88f43bd56ac SHA-0 was withdrawn shortly after publication 20 years ago and replaced with SHA-1. This will require a major crank. ok bcook@, jsing@ Merge ech_ossl.c into ech_key.c - not much point having one file with a 2015-09-13T12:27:14+00:00 jsing 2015-09-13T12:27:14+00:00 urn:sha1:7aad11835631635218a8c6cff256232a97116994 four line function and a tonne of license text. ok beck@ Nuke openssl/e_os2.h, since nothing should be using it. 2015-09-13T12:13:02+00:00 jsing 2015-09-13T12:13:02+00:00 urn:sha1:464203fc6f0f7c192427eebc2b31b32285b5514c ok deraadt@ "hurray! finally!" miod@ "Yay!" sthen@ Add a new interface, OPENSSL_cpu_caps(), to return the currently running 2015-09-13T10:02:49+00:00 miod 2015-09-13T10:02:49+00:00 urn:sha1:83f57d181d785f30f940e80aab02506a0ccdffb8 cpu's specific hardware capabilities users of libcrypto might be interested in, as an integer value. This deprecates the existing OPENSSL_ia32cap() macro and the OPENSSL_ia32cap_loc() function (which returns the pointer so that you can mess with stuff you shouldn't mess with). Interpreting the value returned by OPENSSL_cpu_caps() is, of course, machine-dependent. Minor version bump for libcrypto. ok beck@ jsing@ Pass "openbsd" instead of "openbsd-elf" as the "flavour" to the perl assembler 2015-09-11T14:48:06+00:00 miod 2015-09-11T14:48:06+00:00 urn:sha1:9750a3821f26639c541ea7c893d977024d363b62 machinery. OpenBSD has never been not ELF on amd64, and changing this will actually make -portable life slightly easier in the near future.