openbsd/src/lib/libcrypto/evp, branch OPENBSD_6_4_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_4_BASE 2018-09-12T06:35:38+00:00 Add some accessor functions: 2018-09-12T06:35:38+00:00 djm 2018-09-12T06:35:38+00:00 urn:sha1:f4c645b723e47187baadb03d81e1b313974151a7 RSA_meth_get_finish() RSA_meth_set1_name() EVP_CIPHER_CTX_(get|set)_iv() feedback and ok jsing@ tb@ Add const to EVP_PKCS82PKEY(). 2018-08-24T20:26:03+00:00 tb 2018-08-24T20:26:03+00:00 urn:sha1:2e9cc12db341d66727099e500ca968482802fde1 tested in a bulk by sthen ok jsing Add consts to EVP_PKEY_asn1_set_private() 2018-08-24T20:22:15+00:00 tb 2018-08-24T20:22:15+00:00 urn:sha1:b9a3c83c03543369636a655128b69d56eb619b83 Requires adding a const to the priv_decode() member of EVP_PKEY_ASN1_METHOD and adjusting all *_priv_decode() functions. All this is already documented this way. tested in a bulk build by sthen ok jsing After removing support for broken PKCS#8 formats (it was high time), 2018-08-24T20:17:33+00:00 tb 2018-08-24T20:17:33+00:00 urn:sha1:4cdbdc5207fa48804d8ed3a7929a97ae5f9f466d we can add const to PKCS8_pkey_get0(). In order for this to work, we need to sprinkle a few consts here and there. tested in a bulk by sthen ok jsing Remove EVP_PKEY2PKCS8_broken() and PKCS8_set_broken() 2018-08-24T20:07:42+00:00 tb 2018-08-24T20:07:42+00:00 urn:sha1:e4cf8ac5385c963bee0eb8d0e642abe1bb82ac78 Provide PKCS8_pkey_add1_attr_by_NID() and PKCS8_pkey_get0_attrs(). Remove the whole broken code and simplify pkcs8_priv_key_info_st accordingly. Based on OpenSSL commit 54dbf42398e23349b59f258a3dd60387bbc5ba13 plus some const that was added later. tested in a bulk build by sthen ok jsing Check return value of EVP_EncodeUpdate() in b64_write(). 2018-08-24T19:47:25+00:00 tb 2018-08-24T19:47:25+00:00 urn:sha1:39df210110c83e352bd2e32fdf33d66baf8b816c ok jsing Convert EVP_EncodeUpdate() to return an int to allow for error 2018-08-24T19:45:11+00:00 tb 2018-08-24T19:45:11+00:00 urn:sha1:d00f5f4c25661c03fcc1c9798754a55bc5c80850 checking. Matches our documented behavior. Based on OpenSSL commit c5ebfcab713a82a1d46a51c8c2668c419425b387 tested in a bulk by sthen ok jsing Provide EVP_CIPHER_CTX_encrypting(). 2018-08-24T19:36:52+00:00 tb 2018-08-24T19:36:52+00:00 urn:sha1:c325efb29fe8d4424b297e038e185a24061bf706 tested in a bulk by sthen ok jsing Return an int in BIO_set_cipher() to be able to report errors. 2018-08-24T19:30:24+00:00 tb 2018-08-24T19:30:24+00:00 urn:sha1:733b572d3a5920f142990123512f10660520b9e6 tested in a bulk by sthen ok jsing Add a comment that explains what the check is doing and why len >= 1. 2018-08-14T17:59:26+00:00 tb 2018-08-14T17:59:26+00:00 urn:sha1:9859ca36fd5f9e9fa60319795fa81bb5cd44e986 Prompted by a remark by jsing