openbsd/src/lib/libcrypto/dh/dh_local.h, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92024-11-29T15:59:57+00:00Remove X9.42 DH rudiments2024-11-29T15:59:57+00:00tb2024-11-29T15:59:57+00:00urn:sha1:30b4f7f318b03413f22e3849cf9eeba83c165643
In the unlikely event that we should ever decide to implement this after
a quarter century of not needing it, we can readily put this back. Until
then this is dead weight.
prompted by a question by djm
ok jsing
Remove weird pad member that was never set to zero after malloc() so2024-11-29T07:42:35+00:00tb2024-11-29T07:42:35+00:00urn:sha1:916f80d01875d84154d09cf15bfc3c885c8c0b05
the weird thing it was supposed to be doing couldn't possibly work.
ok jsing
Garbage collect the DH_check*_ex() API2024-08-30T17:44:56+00:00tb2024-08-30T17:44:56+00:00urn:sha1:67d80505486d7a6c9512d45a4d7e0add8a2b13ec
This was only needed by the EVP_PKEY_*check() API, which was defanged. So
this silly garbage can now go: it translated flags to errors on the error
stack so that openssl *check could print ugly errors while DoS-ing the
user.
ok beck
Ignore ENGINE at the API boundary2023-11-29T21:35:57+00:00tb2023-11-29T21:35:57+00:00urn:sha1:69bbc5fea4f411f0c0033ecb0fc5126c895ea82a
This removes the remaining ENGINE members from various internal structs
and functions. Any ENGINE passed into a public API is now completely
ignored functions returning an ENGINE always return NULL.
ok jsing
Make structs in dh.h opaque2022-01-14T08:25:44+00:00tb2022-01-14T08:25:44+00:00urn:sha1:b750ed61cefe91940dce870088adff3ad6857d34
This moves the struct internals for DH and DH_METHOD to dh_local.h.
ok inoguchi jsing
Provide DH_check*_ex and many error codes2022-01-10T12:00:52+00:00tb2022-01-10T12:00:52+00:00urn:sha1:7f7aefb469a9916b1d914a9fabaed99bb909ef8d
DH_check{,_pub_key}_ex() wrap their non-ex versions to translate
the flags argument of the original functions into OpenSSL errors.
For this almost a dozen new error codes need to be added.
DH_params_check{,_ex}() is a new version of DH_check that only
performs a cheap subset of the checks.
They are needed to implement EVP_PKEY_{public,param}_check()
(observe the consistent naming) although the actual implementation
of EVP_PKEY_param_check() chose to use DH_check_ex().
As far as I can tell, the only raison d'être of the _ex functions
and error codes is to spew them to stderr in a couple of openssl(1)
commands. This couldn't have been solved differently...
These functions will not be exposed publicly.
ok inoguchi jsing
Add an essentially empty dh_local.h and include it in the files where2022-01-07T09:27:13+00:00tb2022-01-07T09:27:13+00:00urn:sha1:01c3a3efcb3377bc530d4bf225668754e137d085
it will be needed in the upcoming bump.
discussed with jsing