<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/evp/pmeth_lib.c, branch OPENBSD_7_9_BASE</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2025-05-10T05:54:39+00:00</updated>
<entry>
<title>Use err_local.h rather than err.h in most places</title>
<updated>2025-05-10T05:54:39+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-05-10T05:54:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=41e8f99dd1625a9f0c80ce9d4383e95b18e85709'/>
<id>urn:sha1:41e8f99dd1625a9f0c80ce9d4383e95b18e85709</id>
<content type='text'>
ok jsing
</content>
</entry>
<entry>
<title>Annotate why EVP_PKEY_CTX_ctrl_str() will stay for a while</title>
<updated>2025-01-20T12:57:28+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-01-20T12:57:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=1737b7a21404e79b547997d636147775a9ce091e'/>
<id>urn:sha1:1737b7a21404e79b547997d636147775a9ce091e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Add tls1_prf_pkey_meth to pkey_methods</title>
<updated>2024-07-09T17:02:29+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-07-09T17:02:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=03464fb728517030f7dc3db7b482bff8f083c3a9'/>
<id>urn:sha1:03464fb728517030f7dc3db7b482bff8f083c3a9</id>
<content type='text'>
ok jsing
</content>
</entry>
<entry>
<title>Hide public symbols in evp.h</title>
<updated>2024-04-09T13:52:42+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2024-04-09T13:52:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=9835bb3c82adc630df1f3aaa7dfbf7f0506b0bc4'/>
<id>urn:sha1:9835bb3c82adc630df1f3aaa7dfbf7f0506b0bc4</id>
<content type='text'>
largely mechanically done by the guentherizer 9000

ok tb@
</content>
</entry>
<entry>
<title>Unhook and remove GOST and STREEBOG</title>
<updated>2024-03-02T11:17:27+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-03-02T11:17:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=8ea5a70cb7cc8a88e0f55a52b08b9bf917e9ab4d'/>
<id>urn:sha1:8ea5a70cb7cc8a88e0f55a52b08b9bf917e9ab4d</id>
<content type='text'>
This stops compiling the GOST source. The current implementation is low
quality and got in the way, especially in libssl. While we would be open
for GOST support, it needs to be significantly better than what we have
had and it also needs a maintainer.

Add OPENSSL_NO_GOST to opensslfeatures and stop installing gost.h.
Some code wrapped in #ifndef OPENSSL_NO_GOST will be removed later.

ok jsing
</content>
</entry>
<entry>
<title>Remove EVP_PKEY_meth_*() API</title>
<updated>2024-03-02T10:04:40+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-03-02T10:04:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f133870188c9e5cfe00cc09b92ee4f957e5448ac'/>
<id>urn:sha1:f133870188c9e5cfe00cc09b92ee4f957e5448ac</id>
<content type='text'>
After ameth, the second bit of custom EVP_PKEY API removal.

ok jsing
</content>
</entry>
<entry>
<title>Prepare to remove the EVP_PKEY_meth_* API</title>
<updated>2024-01-13T12:46:59+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-01-13T12:46:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=45322465d9f9a94e93086cbda16289d99c712c56'/>
<id>urn:sha1:45322465d9f9a94e93086cbda16289d99c712c56</id>
<content type='text'>
After removing the last caller of EVP_PKEY_meth_find() from libssl, none
of these is used. And with EVP_PKEY_meth_new() gone, there will no longer
be a way to get your hands onto an EVP_PKEY_METHOD that is writable, so
none of the silent failures (because they're void functions) should matter
in the few weeks until we bump.

ok jsing
</content>
</entry>
<entry>
<title>Disable EVP_PKEY_meth_* extensibility</title>
<updated>2024-01-04T20:15:01+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-01-04T20:15:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=ae3acb67e6622658135da49293d2899a382422bc'/>
<id>urn:sha1:ae3acb67e6622658135da49293d2899a382422bc</id>
<content type='text'>
This removes the global pkey_app_methods stack that was never cleaned up
and makes EVP_PKEY_meth_add0() always fail and push an error on the stack.
EVP_PKEY_meth_find() can now walk the list of PKEY_METHODs forward and
things become a bit cleaner. It's still all way more complicated than it
needs to be...

ok jsing
</content>
</entry>
<entry>
<title>Ignore ENGINE at the API boundary</title>
<updated>2023-11-29T21:35:57+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-11-29T21:35:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=69bbc5fea4f411f0c0033ecb0fc5126c895ea82a'/>
<id>urn:sha1:69bbc5fea4f411f0c0033ecb0fc5126c895ea82a</id>
<content type='text'>
This removes the remaining ENGINE members from various internal structs
and functions. Any ENGINE passed into a public API is now completely
ignored functions returning an ENGINE always return NULL.

ok jsing
</content>
</entry>
<entry>
<title>Unifdef OPENSSL_NO_ENGINE in pmeth_lib.c</title>
<updated>2023-11-19T15:43:52+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-11-19T15:43:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=cde35b41c5eb9d9d0b61fe730c39e6a5c553b840'/>
<id>urn:sha1:cde35b41c5eb9d9d0b61fe730c39e6a5c553b840</id>
<content type='text'>
This includes a manual intervention for the call to EVP_PKEY_meth_find()
which ended up in the middle of nowhere.

ok jsing
</content>
</entry>
</feed>
