A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_1_BASE 2017-01-29T17:49:23+00:00 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ 2016-12-21T15:49:29+00:00 jsing 2016-12-21T15:49:29+00:00 urn:sha1:18adabd97858ed28289c9dc31e8042c515840be4 Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@ 2016-11-04T17:30:30+00:00 miod 2016-11-04T17:30:30+00:00 urn:sha1:1a12fc8399638223feca8f853e2ac2cc22eeb471 meaningful constants in a private header file, so that reviewers can actually get a chance to figure out what the code is attempting to do without knowing all cpuid bits. While there, turn it from an array of two 32-bit ints into a properly aligned 64-bit int. Use of OPENSSL_ia32_P is now restricted to the assembler parts. C code will now always use OPENSSL_cpu_caps() and check for the proper bits in the whole 64-bit word it returns. i386 tests and ok jsing@ 2016-11-04T13:56:05+00:00 miod 2016-11-04T13:56:05+00:00 urn:sha1:098856ba6c9340c7f8061be62dd042763fe233a3 faster-on-genuine-80386-but-slower-on-80486-onwards innstruction sequence in the SHA512 code, and had not been enabled in years, if at all. ok tom@ bcook@ 2015-12-07T03:30:09+00:00 bcook 2015-12-07T03:30:09+00:00 urn:sha1:08dd703b6936f9d0ce2247d4d0b74a9ad398474d This enables ENGINE_get_digest to work again with SHA1. noted by NARUSE, Yui, @nurse from github 2015-08-28T01:06:09+00:00 beck 2015-08-28T01:06:09+00:00 urn:sha1:3afc5208a3a2aff4b6e13f31fcbe99c2ca94151c ok doug@ 2015-07-19T22:34:27+00:00 doug 2015-07-19T22:34:27+00:00 urn:sha1:25841ddc7e1d255a907b71bc100b10c363287a75 OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@ 2015-07-19T00:56:48+00:00 bcook 2015-07-19T00:56:48+00:00 urn:sha1:3b99f7506c1fd9c2348f2fc6cdfc60a2d8e602af ok doug@, beck@ 2015-06-19T06:32:43+00:00 bcook 2015-06-19T06:32:43+00:00 urn:sha1:433691f86112f1eea8eb1872e9c9b8b423437151 Noted by doug@ in an earlier revision of the dynamic engine removal patch, but I had forgotten to include it in the latest version. 2015-06-19T06:05:11+00:00 bcook 2015-06-19T06:05:11+00:00 urn:sha1:1ef7c35782edea8e65610a2d9d6d6d08ea90983c We do not build, test or ship any dynamic engines, so we can remove the dynamic engine loader as well. This leaves a stub initialization function in its place. ok beck@, reyk@, miod@