<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/gost, branch OPENBSD_7_3_BASE</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_7_3_BASE</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_7_3_BASE'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2023-03-07T09:27:10+00:00</updated>
<entry>
<title>Call BN_free() instead of BN_clear_free().</title>
<updated>2023-03-07T09:27:10+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2023-03-07T09:27:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=19dfe7f484e5739359ee8c102d879d125df916ad'/>
<id>urn:sha1:19dfe7f484e5739359ee8c102d879d125df916ad</id>
<content type='text'>
BN_clear_free() is a wrapper that calls BN_free() - call BN_free() directly
instead.

ok tb@
</content>
</entry>
<entry>
<title>gost: add missing BN_CTX_{start,end}() pair</title>
<updated>2023-01-15T13:58:44+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2023-01-15T13:58:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=49d88d95baa39b0a851c635858749b0c08bd8d52'/>
<id>urn:sha1:49d88d95baa39b0a851c635858749b0c08bd8d52</id>
<content type='text'>
The new BN_CTX code enforces that the context be started before a BIGNUM
can be obtained from it via BN_CTX_get(), tests for ssl/interop and the
openssl app broke, implying missing test coverage in libcrypto itself.
Add the obviously missing bits.

reported by anton
ok jsing
</content>
</entry>
<entry>
<title>BN_one() can fail, check its return value.</title>
<updated>2022-12-01T02:58:31+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2022-12-01T02:58:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6ac34623f0ed759cefdd3f7c8b1a22780121b3f5'/>
<id>urn:sha1:6ac34623f0ed759cefdd3f7c8b1a22780121b3f5</id>
<content type='text'>
ok tb@
</content>
</entry>
<entry>
<title>Make header guards of internal headers consistent</title>
<updated>2022-11-26T17:23:18+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-11-26T17:23:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=3a1908508efa61f3f77ac8036694af2f920df947'/>
<id>urn:sha1:3a1908508efa61f3f77ac8036694af2f920df947</id>
<content type='text'>
Not all of them, only those that didn't leak into a public header...
Yes.
</content>
</entry>
<entry>
<title>Make internal header file names consistent</title>
<updated>2022-11-26T16:08:57+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-11-26T16:08:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=81d98bf600a381a625eb11b39a725b08c0ba547f'/>
<id>urn:sha1:81d98bf600a381a625eb11b39a725b08c0ba547f</id>
<content type='text'>
Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names
used for internal headers. Move all these headers we inherited from
OpenSSL to *_local.h, reserving the name *_internal.h for our own code.
Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h.
constant_time_locl.h is moved to constant_time.h since it's special.

Adjust all .c files in libcrypto, libssl and regress.

The diff is mechanical with the exception of tls13_quic.c, where
#include &lt;ssl_locl.h&gt; was fixed manually.

discussed with jsing,
no objection bcook
</content>
</entry>
<entry>
<title>Remove mkerr.pl remnants from LibreSSL</title>
<updated>2022-07-12T14:42:50+00:00</updated>
<author>
<name>kn</name>
<email></email>
</author>
<published>2022-07-12T14:42:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=89e42d5857196a8071fbafb5565388d0e20ec32b'/>
<id>urn:sha1:89e42d5857196a8071fbafb5565388d0e20ec32b</id>
<content type='text'>
This script is not used at all and files are edited by hand instead.
Thus remove misleading comments incl. the obsolete script/config.

Feedback OK jsing tb
</content>
</entry>
<entry>
<title>Avoid segfaults in EVP_PKEY_CTX_free()</title>
<updated>2022-03-30T07:17:48+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-03-30T07:17:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=c650ef2b4f969ce6b8d9a39f9e86c5e181dfafbc'/>
<id>urn:sha1:c650ef2b4f969ce6b8d9a39f9e86c5e181dfafbc</id>
<content type='text'>
It is possible to call pmeth-&gt;cleanup() with an EVP_PKEY_CTX whose data
is NULL. If pmeth-&gt;init() in int_ctx_new() fails, EVP_PKEY_CTX_free() is
called with such a context. This in turn calls pmeth-&gt;cleanup(), and thus
these cleanup functions must be careful not to use NULL data.  Most of
them are, but one of GOST's functions and HMAC's aren't.

Reported for HMAC by Masaru Masada
https://github.com/libressl-portable/openbsd/issues/129

ok bcook jsing
</content>
</entry>
<entry>
<title>gost needs to look into ecs_locl.h</title>
<updated>2022-01-07T09:40:03+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-01-07T09:40:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=b832de683c05102d9874b3b63f2f3e51488fc323'/>
<id>urn:sha1:b832de683c05102d9874b3b63f2f3e51488fc323</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Check BIO_indent() return like all the others in this file.</title>
<updated>2021-12-26T15:38:49+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2021-12-26T15:38:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=d50edb3a8245ec1d4c4f77c5ec34ea0e3364666f'/>
<id>urn:sha1:d50edb3a8245ec1d4c4f77c5ec34ea0e3364666f</id>
<content type='text'>
CID 345118
</content>
</entry>
<entry>
<title>Include evp_locl.h where it will be needed once most structs from</title>
<updated>2021-12-12T21:30:14+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2021-12-12T21:30:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=b632ec4f99386efc52214c580c9f233748302224'/>
<id>urn:sha1:b632ec4f99386efc52214c580c9f233748302224</id>
<content type='text'>
evp.h will be moved to evp_locl.h in an upcoming bump.

ok inoguchi
</content>
</entry>
</feed>
