A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2023-07-28T09:16:17+00:00 2023-07-28T09:16:17+00:00 tb 2023-07-28T09:16:17+00:00 urn:sha1:bf7ee0210d0d1420ed787a79eda0c974f8d15f17 Move the remaining ECDSA API into ec.h to match OpenSSL 1.1's interface better. In particular, the EC_KEY sign and verify method accessors are moved to the right header. Whether the rest of the ECDSA stuff belongs there is debatable, but that was upstream's choice. ok jsing 2023-07-28T09:08:31+00:00 tb 2023-07-28T09:08:31+00:00 urn:sha1:8a9904a7f31aeb68336f4a9f6ba9e8ab8ecc7f11 After smtpd (in base) and libtls finally switched from ECDSA_METHOD to EC_KEY_METHOD, much of the ECDSA_METHOD code was neutered. Remove the remaining public API as well as numerous tentacles into ENGINE. ok jsing 2023-07-28T09:01:25+00:00 tb 2023-07-28T09:01:25+00:00 urn:sha1:92f3766713986fcccdc079df784442dcfde4921c These error codes have been unused for a while, so the public API loading them is pointless. ok jsing 2023-07-28T08:49:43+00:00 tb 2023-07-28T08:49:43+00:00 urn:sha1:a60bb43ba730ae6d2d64a6568ee5fddecaf151e3 ECDSA_sign_setup() permits precomputing the values of the inverse of the random k and the corresponding r. These can then be fed into the signing routines ECDSA_{do_,}sign_ex() multiple times if needed. This is not a great idea and the interface adds a lot of unwanted complexity. Not to mention that nothing ever used this correctly - if s works out to 0, a special error code is thrown requesting that the caller provide new kinv and r values. Unsurprisingly, nobody ever checked for that special error code. ok jsing This commit marks the start of a libcrypto major bump. Do not build the tree until I bumped the shlib_version and synced file sets (in about 35 commits). 2023-06-19T09:12:41+00:00 tb 2023-06-19T09:12:41+00:00 urn:sha1:f59cfd7fc3fc9aecc3583f671c2ba7e1f547ae5c These functions are properly documented and upcoming surgery in here is going to be tricky enough without having to navigate around this noise. No code change. 2023-04-18T08:47:28+00:00 tb 2023-04-18T08:47:28+00:00 urn:sha1:34eb49714b89be6d0c4cddab0bcab8580b6ca809 Requested by jsing 2023-04-18T08:33:43+00:00 tb 2023-04-18T08:33:43+00:00 urn:sha1:7c140db45f1d1b8f4daf0a81424b35e3a5ff8e29 Some headers were included conditionally on OPENSSL_NO_DEPRECATED in hopes that eventually the mess of everything includes everything will magically resolve itself. Of course everyone would end up building openssl with OPENSSL_NO_DEPRECATED over time... Right. Surprisingly, the ecosystem has come to rely on these implicit inclusions, so about two dozen ports would fail to build because of this. Patching this would be easy but really not worth the effort. ok jsing 2022-12-26T07:18:53+00:00 jmc 2022-12-26T07:18:53+00:00 urn:sha1:2eb7e5ff6bb69760f9dd4a43e7e3520ebb930120 i removed the arithmetics -> arithmetic changes, as i felt they were not clearly correct ok tb 2022-07-12T14:42:50+00:00 kn 2022-07-12T14:42:50+00:00 urn:sha1:89e42d5857196a8071fbafb5565388d0e20ec32b This script is not used at all and files are edited by hand instead. Thus remove misleading comments incl. the obsolete script/config. Feedback OK jsing tb 2022-01-14T08:31:03+00:00 tb 2022-01-14T08:31:03+00:00 urn:sha1:61219b77d5b56d0f4d1297df47aac4c8a542dbeb We can't make ECDSA_METHOD opaque since it is still used in smtpd(8) ok inoguchi jsing