<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/err, branch libressl-v3.8.2</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=libressl-v3.8.2</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=libressl-v3.8.2'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2023-07-28T10:23:19+00:00</updated>
<entry>
<title>Remove more ERR cruft</title>
<updated>2023-07-28T10:23:19+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-07-28T10:23:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2a8a0e16fff5736c54d6005280b83c07587cb5d8'/>
<id>urn:sha1:2a8a0e16fff5736c54d6005280b83c07587cb5d8</id>
<content type='text'>
Ever wondered how many entries populate the various err hashes?
Me neither. Remove this garbage.

ok jsing
</content>
</entry>
<entry>
<title>Remove ERR_{get,set}_implementation()</title>
<updated>2023-07-28T10:21:01+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-07-28T10:21:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6f0a25f56e69a07f9a33663b857ea58bc32efba0'/>
<id>urn:sha1:6f0a25f56e69a07f9a33663b857ea58bc32efba0</id>
<content type='text'>
Much like ex_data, applications can make the library use their own error
stack implementation. Well, except as of right now they no longer can.

ok jsing
</content>
</entry>
<entry>
<title>Drop DSO and define OPENSSL_NO_DSO</title>
<updated>2023-07-28T09:46:36+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-07-28T09:46:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f94d1800c2bcef623d825d9ec18437897e187e0e'/>
<id>urn:sha1:f94d1800c2bcef623d825d9ec18437897e187e0e</id>
<content type='text'>
DSO and in particular dlopen() was used for dynamic engines, which we
removed a long time ago and for dynamic conf modules, which we removed
only very recently. Now remove this dangerous interface.

ok jsing
</content>
</entry>
<entry>
<title>Remove ECDH errors</title>
<updated>2023-07-28T09:19:59+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-07-28T09:19:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a90aeb58faecc32cf7d4158977677efa3db85477'/>
<id>urn:sha1:a90aeb58faecc32cf7d4158977677efa3db85477</id>
<content type='text'>
Much like the ECDSA errors, the ECDH errors have been unused for a
while. Garbage collect them.

ok jsing
</content>
</entry>
<entry>
<title>Remove ecs_err.c</title>
<updated>2023-07-28T09:01:25+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-07-28T09:01:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=92f3766713986fcccdc079df784442dcfde4921c'/>
<id>urn:sha1:92f3766713986fcccdc079df784442dcfde4921c</id>
<content type='text'>
These error codes have been unused for a while, so the public API loading
them is pointless.

ok jsing
</content>
</entry>
<entry>
<title>Unbreak the namespace build after a broken mk.conf and tool misfire had</title>
<updated>2023-07-07T19:37:54+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2023-07-07T19:37:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=1ca8095297adf80b48019b5a2d18010ff9e3427f'/>
<id>urn:sha1:1ca8095297adf80b48019b5a2d18010ff9e3427f</id>
<content type='text'>
me aliasing symbols not in the headers I was procesing.

This unbreaks the namespace build so it will pass again

ok tb@
</content>
</entry>
<entry>
<title>Hide symbols in hkdf, evp, err, ecdsa, and ec</title>
<updated>2023-07-07T13:54:46+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2023-07-07T13:54:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f9fcde20a6214da85e802190ccd3a2bf5f891559'/>
<id>urn:sha1:f9fcde20a6214da85e802190ccd3a2bf5f891559</id>
<content type='text'>
(part 2 of commit)

ok jsing@
</content>
</entry>
<entry>
<title>Unifdef ZLIB</title>
<updated>2023-06-11T05:35:43+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-06-11T05:35:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=97a013bc68d60ad211d8cdb339f38ccb4020ade6'/>
<id>urn:sha1:97a013bc68d60ad211d8cdb339f38ccb4020ade6</id>
<content type='text'>
This has long been unused code and compilation with -DZLIB was broken
for a long time after BIO was made opaque.

ok jsing
</content>
</entry>
<entry>
<title>Move a few functions out of OPENSSL_NO_DEPRECATED</title>
<updated>2023-04-09T19:10:23+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-04-09T19:10:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=180ac4430773db8fb86b3343279cc5790eee08e6'/>
<id>urn:sha1:180ac4430773db8fb86b3343279cc5790eee08e6</id>
<content type='text'>
Geoff Thorpe added OPENSSL_NO_DEPRECATED nearly two decades ago. The hope
was that at some point some functions can be dropped. Most of the functions
marked deprecated are actually unused nowadays but unfortunately some of
them are still used in the ecosystem. Move them out of OPENSSL_NO_DEPRECATED
so we can define it without breaking the consumers in the next bump.

ERR_remove_state() is still used by a dozen or so ports. This isn't a big
deal since it is just a stupid wrapper for the not quite as deprecated
ERR_remove_thread_state(). It's not worth patching these ports.

Annoyingly, {DH,DSA}_generate_parameters() and RSA_generate_key() are still
used. They "make use" of the old-style BN_GENCB callback, which is therefore
more difficult to remove - in case you don't know know: that's the thing
responsible for printing pretty '.', '+' and '*' when you generate keys.

Most annoyingly, DH_generate_parameters() was added to rust-openssl in 2020
for "advanced DH support". This is very unfortunate since cargo bundles a
rust-openssl and updates it only every few years or so. As a consequence
we're going to be stuck with this nonsense for a good while.

ok beck jsing
</content>
</entry>
<entry>
<title>Avoid errno is EINVAL after OpenSSL initialization</title>
<updated>2023-03-27T09:15:45+00:00</updated>
<author>
<name>jan</name>
<email></email>
</author>
<published>2023-03-27T09:15:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a1ba7edeaa4500f47680c5e16b40d8efa2802629'/>
<id>urn:sha1:a1ba7edeaa4500f47680c5e16b40d8efa2802629</id>
<content type='text'>
ok tb@
</content>
</entry>
</feed>
