<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/err/err.h, branch OPENBSD_7_9</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2025-05-10T06:17:09+00:00</updated>
<entry>
<title>Remove error macros except PEMerr(), RSAerr() and SSLerr()</title>
<updated>2025-05-10T06:17:09+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-05-10T06:17:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=d682cf6a7375c84e36042dbec2fd58cbb9be9bde'/>
<id>urn:sha1:d682cf6a7375c84e36042dbec2fd58cbb9be9bde</id>
<content type='text'>
These three are still used in about half a dozen ports. All the others are
unused.

ok jsing
</content>
</entry>
<entry>
<title>Move the internal FOOerror() to err_local.h</title>
<updated>2025-05-10T06:03:38+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-05-10T06:03:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=d8a1d67824f0262e6ac047e2eada875112658767'/>
<id>urn:sha1:d8a1d67824f0262e6ac047e2eada875112658767</id>
<content type='text'>
These are now only used in libcrypto. They should never have been in a
public header in the first place.

ok jsing
</content>
</entry>
<entry>
<title>Support OPENSSL_NO_FILENAMES</title>
<updated>2025-03-09T15:12:18+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-03-09T15:12:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=b8acfd2983c50474382bf8ed132a5b7e7bdedb34'/>
<id>urn:sha1:b8acfd2983c50474382bf8ed132a5b7e7bdedb34</id>
<content type='text'>
Some people are concerned that leaking a user name is a privacy issue.
Allow disabling the __FILE__ and __LINE__ argument in the error stack
to avoid this. This can be improved a bit in tree.

From Viktor Szakats in https://github.com/libressl/portable/issues/761

ok bcook jsing
</content>
</entry>
<entry>
<title>Remove ERR_add_{,v}data()</title>
<updated>2024-08-31T10:09:15+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-08-31T10:09:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=20621a3f421681dddbebb1b41d980374765a0b0e'/>
<id>urn:sha1:20621a3f421681dddbebb1b41d980374765a0b0e</id>
<content type='text'>
Another unused bit of legacy API...

ok beck jsing
</content>
</entry>
<entry>
<title>Hide remaining unused ERR functions in err.h</title>
<updated>2024-07-09T07:17:13+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2024-07-09T07:17:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a09a0ff7b6568c0cf4e6dc355ac218984899ebc3'/>
<id>urn:sha1:a09a0ff7b6568c0cf4e6dc355ac218984899ebc3</id>
<content type='text'>
ok tb@
</content>
</entry>
<entry>
<title>Adjust signature of ERR_load_strings()</title>
<updated>2024-03-02T10:32:26+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-03-02T10:32:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=ec2a181702a200c7cbfaa3e93de38f22d7b9cf4b'/>
<id>urn:sha1:ec2a181702a200c7cbfaa3e93de38f22d7b9cf4b</id>
<content type='text'>
This aligns the prototypes with OpenSSL 1.1.

ok jsing
</content>
</entry>
<entry>
<title>Remove ERR_get_state</title>
<updated>2024-03-02T10:30:48+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-03-02T10:30:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=d23ca349fd2e45b2231f05fba70d31bc44134e14'/>
<id>urn:sha1:d23ca349fd2e45b2231f05fba70d31bc44134e14</id>
<content type='text'>
The ERR_STATE struct is an unused implementation detail of the horrific
error stack code. It is the last public consumer of CRYPTO_THREAD
internals. Make this and its accessor internal so we can make the
CRYPTO_THREAD struct opaque.

ok jsing
</content>
</entry>
<entry>
<title>Remove more ERR cruft</title>
<updated>2023-07-28T10:23:19+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-07-28T10:23:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2a8a0e16fff5736c54d6005280b83c07587cb5d8'/>
<id>urn:sha1:2a8a0e16fff5736c54d6005280b83c07587cb5d8</id>
<content type='text'>
Ever wondered how many entries populate the various err hashes?
Me neither. Remove this garbage.

ok jsing
</content>
</entry>
<entry>
<title>Remove ERR_{get,set}_implementation()</title>
<updated>2023-07-28T10:21:01+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-07-28T10:21:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6f0a25f56e69a07f9a33663b857ea58bc32efba0'/>
<id>urn:sha1:6f0a25f56e69a07f9a33663b857ea58bc32efba0</id>
<content type='text'>
Much like ex_data, applications can make the library use their own error
stack implementation. Well, except as of right now they no longer can.

ok jsing
</content>
</entry>
<entry>
<title>Move a few functions out of OPENSSL_NO_DEPRECATED</title>
<updated>2023-04-09T19:10:23+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-04-09T19:10:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=180ac4430773db8fb86b3343279cc5790eee08e6'/>
<id>urn:sha1:180ac4430773db8fb86b3343279cc5790eee08e6</id>
<content type='text'>
Geoff Thorpe added OPENSSL_NO_DEPRECATED nearly two decades ago. The hope
was that at some point some functions can be dropped. Most of the functions
marked deprecated are actually unused nowadays but unfortunately some of
them are still used in the ecosystem. Move them out of OPENSSL_NO_DEPRECATED
so we can define it without breaking the consumers in the next bump.

ERR_remove_state() is still used by a dozen or so ports. This isn't a big
deal since it is just a stupid wrapper for the not quite as deprecated
ERR_remove_thread_state(). It's not worth patching these ports.

Annoyingly, {DH,DSA}_generate_parameters() and RSA_generate_key() are still
used. They "make use" of the old-style BN_GENCB callback, which is therefore
more difficult to remove - in case you don't know know: that's the thing
responsible for printing pretty '.', '+' and '*' when you generate keys.

Most annoyingly, DH_generate_parameters() was added to rust-openssl in 2020
for "advanced DH support". This is very unfortunate since cargo bundles a
rust-openssl and updates it only every few years or so. As a consequence
we're going to be stuck with this nonsense for a good while.

ok beck jsing
</content>
</entry>
</feed>
