<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/hidden, branch master</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=master</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2025-10-24T11:33:38+00:00</updated>
<entry>
<title>Expose X509_VERIFY_PARAM_get_hostflags()</title>
<updated>2025-10-24T11:33:38+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-10-24T11:33:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f77c42a93e09c937696f65c6aefd2b3120a20cff'/>
<id>urn:sha1:f77c42a93e09c937696f65c6aefd2b3120a20cff</id>
<content type='text'>
This is needed by Python 3.14, extending the urllib3 nonsense further.
This is a trivial getter and it is exercised by the libssl unit test
I added for urllib3 (which can now use dynamic linking for libcrypto).

Fixes https://github.com/libressl/portable/issues/1202
Thanks to @orbea for the report.

ok kenjiro

PS: X509_VERIFY_PARAM_get_flags() and X509_VERIFY_PARAM_get_peername()
aren't const correct. Fixing this will require some doing...
</content>
</entry>
<entry>
<title>Hide primitive BOOLEAN items</title>
<updated>2025-08-22T14:07:34+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-08-22T14:07:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=026a2ea5b1aabdfbf27997ffd198cd73b3b5ee08'/>
<id>urn:sha1:026a2ea5b1aabdfbf27997ffd198cd73b3b5ee08</id>
<content type='text'>
Rides the libcrypto bump from a couple days ago
</content>
</entry>
<entry>
<title>An executive decision has been taken to expose marshal private key as well</title>
<updated>2025-08-19T21:37:08+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-08-19T21:37:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=fe2206ea0ebbcabbfbe6889f6747287fae32b1fc'/>
<id>urn:sha1:fe2206ea0ebbcabbfbe6889f6747287fae32b1fc</id>
<content type='text'>
rides the libcrypto bump
</content>
</entry>
<entry>
<title>Avoid asm("") for MSVC</title>
<updated>2025-08-18T16:00:05+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-08-18T16:00:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=7bb5d534c2961734465b2d9635a531ab902567e4'/>
<id>urn:sha1:7bb5d534c2961734465b2d9635a531ab902567e4</id>
<content type='text'>
This allows us to get rid of an ugly patch in portable.

ok jsing
</content>
</entry>
<entry>
<title>Add a reasonable ML-KEM API for public use.</title>
<updated>2025-08-14T15:48:48+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2025-08-14T15:48:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6452fa9fc6f33dac80ee572764b9fe29a469f8ce'/>
<id>urn:sha1:6452fa9fc6f33dac80ee572764b9fe29a469f8ce</id>
<content type='text'>
Adapt the tests to use this API.

This does not yet make the symbols public in Symbols.list
which will happen shortly with a bump.

This includes some partial rototilling of the non-public
interfaces which will be shortly continued when the internal
code is deduplicated to not have multiple copies for ML-KEM
768 and ML-KEM 1024 (which is just an artifact of unravelling
the boring C++ code).

ok jsing@, tb@
</content>
</entry>
<entry>
<title>Ride the libcrypto bump with some simple cleanup:</title>
<updated>2025-07-16T15:59:26+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-07-16T15:59:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=c82a6c2e80c4901e67b15003b73d79f25ed56a6c'/>
<id>urn:sha1:c82a6c2e80c4901e67b15003b73d79f25ed56a6c</id>
<content type='text'>
Remove BIO_s_log(): already unhooked in portable, completely unused.
Remove X509_PKEY_new/free from public API. Remove PEM_X509_INFO_read()
PEM_X509_INFO_write_bio(): all unused garbage.

The simplify X509_PKEY_new/free was ok kenjiro.
</content>
</entry>
<entry>
<title>Reinstate PKCS12_key_gen_uni()</title>
<updated>2025-03-09T15:45:52+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-03-09T15:45:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=9971249d16e9e04b0af48f612febcd91710abad9'/>
<id>urn:sha1:9971249d16e9e04b0af48f612febcd91710abad9</id>
<content type='text'>
Unfortunately, this is used in acsm-calibre-plugin, via oscrypto.
Fixes https://github.com/Leseratte10/acsm-calibre-plugin/issues/112

ok jsing
</content>
</entry>
<entry>
<title>Remove EC_POINTs_* API</title>
<updated>2025-03-09T15:42:19+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-03-09T15:42:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=4be808e28680e2a2170b30eec229c60cf8d921ec'/>
<id>urn:sha1:4be808e28680e2a2170b30eec229c60cf8d921ec</id>
<content type='text'>
And another one... Completely overengineered for the sake of academic
credentials and only Ruby ever picked this garbage up. Fortunately, it's
no longer used with LibreSSL since we defanged this in 2018. The latest
version of ruby/openssl has completely removed this as part of their post
1.0.x cleanup.

ok jsing
</content>
</entry>
<entry>
<title>Remove Jprojective_coordinates API</title>
<updated>2025-03-09T15:39:39+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-03-09T15:39:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=56f34fa2487d9426eeedabbd78842094c36f8c8c'/>
<id>urn:sha1:56f34fa2487d9426eeedabbd78842094c36f8c8c</id>
<content type='text'>
There goes another implementation detail that should never have been leaked
out of the library.

ok jsing
</content>
</entry>
<entry>
<title>Unexport EC_GROUP_*precompute_mult()</title>
<updated>2025-03-09T15:37:31+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2025-03-09T15:37:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6bee4b83725b153b6d7208954ada4af2402d16da'/>
<id>urn:sha1:6bee4b83725b153b6d7208954ada4af2402d16da</id>
<content type='text'>
These have been noops for a while and as usual some Perl module was the
only thing "using" it.

ok jsing
</content>
</entry>
</feed>
