A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.9.2 2024-03-02T10:22:07+00:00 2024-03-02T10:22:07+00:00 tb 2024-03-02T10:22:07+00:00 urn:sha1:e3494e65f2eaea2f3dd1e2d5163aa09c4d59490f Garbage collect some more of this former horror show. ok jsing 2023-11-19T15:47:40+00:00 tb 2023-11-19T15:47:40+00:00 urn:sha1:890d88b77e3c187cc5d11f2e9e51b6d534af555b 2023-11-19T15:46:10+00:00 tb 2023-11-19T15:46:10+00:00 urn:sha1:593d97e74cc873d99aced677883cf55625efe62d This is mechanical apart from a few manual edits to avoid doubled empty lines. ok jsing 2023-11-19T15:41:46+00:00 tb 2023-11-19T15:41:46+00:00 urn:sha1:f06ef86abaad7907cce57f275e90632f9aba77e1 Also rip out all the gross, useless comments. There's still too much garbage in here... ok jsing 2023-08-04T05:44:51+00:00 tb 2023-08-04T05:44:51+00:00 urn:sha1:0ae66afba11fc664857797afa60c36cc29bacddb 2023-07-28T09:53:55+00:00 tb 2023-07-28T09:53:55+00:00 urn:sha1:b5382a6334a2ec0fe73ab6c49ebefb47af93329c ENGINE was special. It's horrible code even by the low standards of this library. Some ports may now try to use the stubs which will fail, but the fallout from this should be minimal. Of course there are various language bindings that expose the ENGINE API. OpenSSL 3 disabling ENGINE by default will likely help fixing this at some point. ok jsing 2023-07-28T09:22:26+00:00 tb 2023-07-28T09:22:26+00:00 urn:sha1:d5a81d6e35ae60f515d5705afb9c2f871823721a Unlike ECDSA_METHOD, this has been unused forever but kind of needed to stay for symmetry with ECDSA_METHOD. Now we can finally take it behind the barn and remove its tendrils into ENGINE. ok jsing 2023-07-28T09:08:31+00:00 tb 2023-07-28T09:08:31+00:00 urn:sha1:8a9904a7f31aeb68336f4a9f6ba9e8ab8ecc7f11 After smtpd (in base) and libtls finally switched from ECDSA_METHOD to EC_KEY_METHOD, much of the ECDSA_METHOD code was neutered. Remove the remaining public API as well as numerous tentacles into ENGINE. ok jsing 2023-07-21T09:04:23+00:00 tb 2023-07-21T09:04:23+00:00 urn:sha1:6fcc6301cbb6ea5d47209442358f4af309d05661 This commit adds a few symbols under OPENSSL_NO_ENGINE. They will be used after the main ENGINE code is disabled in the next bump. The ecosystem is mostly prepared for dealing with a libcrypto compiled with OPENSSL_NO_ENGINE. There are a few stragglers like M2Crypto, dovecot and the latest apr-util release (fixed in their development branch). To avoid intrusive patching in these ports, we need to keep a bunch of ENGINE symbols around despite adding OPENSSL_NO_ENGINE. This of course meant patching some other ports, but that was way easier. ok jsing 2023-07-20T16:36:06+00:00 tb 2023-07-20T16:36:06+00:00 urn:sha1:83937989b46c380964459dc0761d1fdec60c4d17 discussed with jsing