openbsd/src/lib/libcrypto/ec/ec_ameth.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2019-09-09T20:26:16+00:00 Plug memory leak in error paths. Found while comparing this file 2019-09-09T20:26:16+00:00 tb 2019-09-09T20:26:16+00:00 urn:sha1:d49d20054e040ce4430db9cfc4805d021c35c549 with OpenSSL 1.1.1's version which contains a similar fix. ok jsing Move #include <openssl/cms.h> to more appropriate location (since it is 2019-09-09T17:56:00+00:00 jsing 2019-09-09T17:56:00+00:00 urn:sha1:b80e4b6d577f24dd4a0a25bf26adc1fbc6f8310b now being installed). Add CMS ECC support. 2019-09-08T17:00:05+00:00 jsing 2019-09-08T17:00:05+00:00 urn:sha1:633c0b7b298b56e623ca77728f2044b8179ed6fd This brings in EC code from OpenSSL 1.1.1b, with style(9) and whitespace cleanups. All of this code is currently under OPENSSL_NO_CMS hence is a no-op. ok inoguchi@ Add consts to EVP_PKEY_asn1_set_private() 2018-08-24T20:22:15+00:00 tb 2018-08-24T20:22:15+00:00 urn:sha1:b9a3c83c03543369636a655128b69d56eb619b83 Requires adding a const to the priv_decode() member of EVP_PKEY_ASN1_METHOD and adjusting all *_priv_decode() functions. All this is already documented this way. tested in a bulk build by sthen ok jsing After removing support for broken PKCS#8 formats (it was high time), 2018-08-24T20:17:33+00:00 tb 2018-08-24T20:17:33+00:00 urn:sha1:4cdbdc5207fa48804d8ed3a7929a97ae5f9f466d we can add const to PKCS8_pkey_get0(). In order for this to work, we need to sprinkle a few consts here and there. tested in a bulk by sthen ok jsing recommit label indentation part of the backout; clearly unrelated to the 2018-07-15T16:27:39+00:00 tb 2018-07-15T16:27:39+00:00 urn:sha1:e2da96a71555180892d2e924d66c06a17b7a86e5 breakage. back out ecc constant time changes 2018-07-15T05:38:48+00:00 jsg 2018-07-15T05:38:48+00:00 urn:sha1:ccbfd1fe05749d4f08db7f45fe5db1fac8d14d6b after the constant time commits various regress tests started failing on sparc64 ssh t9, libcrypto ec ecdh ecdsa and trying to ssh out resulted in 'invalid elliptic curve value' ok tb@ Indent labels by a space so they don't obliterate function names in diffs. 2018-07-10T22:06:14+00:00 tb 2018-07-10T22:06:14+00:00 urn:sha1:a7fe13b565d141da544ee36178a90bb52f4939d1 Convert a handful of X509_*() functions to take const as in OpenSSL. 2018-05-01T19:01:28+00:00 tb 2018-05-01T19:01:28+00:00 urn:sha1:7c375c1a832336c8d9c706ebe1c9cd62252a1d88 tested in a bulk by sthen ok jsing Fix for processing of EC public key 2018-03-12T13:14:21+00:00 inoguchi 2018-03-12T13:14:21+00:00 urn:sha1:b4ddb0f51fc8a6934ca72ca243bd2e1237e3db44 Prevents segmentation fault while reading EC private key without public key. Generates missing EC public key when reading EC private key. Refer to these OpenSSL commits: 1f2b943254ce590867717375e4f364860a9b7154 2083f7c465d07867dd9867b8742bb71c03d1f203 Reported on GitHub https://github.com/libressl-portable/portable/issues/395 by Anton Bukov (@k06a) . ok beck@