openbsd/src/lib/libcrypto/man, branch libressl-v3.4.1A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=libressl-v3.4.12021-09-14T13:47:59+00:00As suggested by tb@, merge the description of OPENSSL_EC_NAMED_CURVE2021-09-14T13:47:59+00:00schwarze2021-09-14T13:47:59+00:00urn:sha1:8516f8e8e45c406ec2ca34ec57684ee01de472a5
and OPENSSL_EC_EXPLICIT_CURVE
from OpenSSL commit 146ca72c Feb 19 14:35:43 2015 +0000
after tb@ changed the default from 0 to OPENSSL_EC_NAMED_CURVE
in ec/ec_lib.c rev. 1.41,
which is the same default that OpenSSL uses since 1.1.0.
While merging, drop the description of the pre-1.1.0 behaviour.
It seems irrelevant to me because tb@ found no application in Debian
codesearch using OPENSSL_EC_EXPLICIT_CURVE. A former devious default
that was probably never relied upon by anyone does not need to be
documented.
Merge documentation of EC_GROUP_order_bits(3) from the OpenSSL 1.1.12021-09-11T17:59:04+00:00schwarze2021-09-11T17:59:04+00:00urn:sha1:6b26e78c6c668c2d81ebf87b49fe16389f658275
branch, which is still under a free license.
While here, also merge a few other improvements, mostly regarding
EC_GROUP_get_order(3) and EC_GROUP_get_cofactor(3); in particular,
some statements below RETURN VALUES were outright wrong.
This patch includes a few minor tweaks and an addition to HISTORY by me.
Feedback and OK tb@.
Merge documentation for BN_bn2binpad(3), BN_bn2lebinpad(3),2021-09-11T08:45:47+00:00schwarze2021-09-11T08:45:47+00:00urn:sha1:b0b3e4e847df0c7cb16cc4610638c96e86735cd5
and BN_lebin2bn(3) from the OpenSSL 1.1.1 branch,
which is still under a free license.
While here, tweak a number of details for clarity.
OK tb@
Calling OpenSSL_add_all_digests() is no longer needed since the library2021-09-10T18:58:43+00:00millert2021-09-10T18:58:43+00:00urn:sha1:edb71847e4b064c69f7e2779246ba6107a148526
automatically initializes itself. OK tb@
Use BN_RAND_* instead of mysterious values in the documentation of2021-09-10T14:37:14+00:00tb2021-09-10T14:37:14+00:00urn:sha1:9f055e2e8ea33c8d10d4c046e36c19dc8c70e444
BN_rand_range()
From OpenSSL 1.1.1l
ok beck jsing
link X509_STORE_get_by_subject(3) and X509_ocspid_print(3) to the build,2021-08-06T21:50:54+00:00schwarze2021-08-06T21:50:54+00:00urn:sha1:97c6e4ce5291e57bb264ab5855d94e78b09cf897
forgotten in earlier commits
new manual page X509_ocspid_print(3)2021-08-06T21:45:55+00:00schwarze2021-08-06T21:45:55+00:00urn:sha1:172327ff6e7395b57b84c156f9f430cee461e85a
using input from tb@, and OK tb@ on an earlier version
add a roff(7) comment marking the API function X509_get_default_private_dir()2021-08-06T19:09:56+00:00schwarze2021-08-06T19:09:56+00:00urn:sha1:11e33693517266d4557f25304a7ba8843d4535fe
as intentionally undocumented because it is trivial and unused in the wild;
OK tb@
Document X509_get_default_cert_dir_env(3)2021-08-03T19:47:39+00:00schwarze2021-08-03T19:47:39+00:00urn:sha1:47d24879f9ff720528a57ca26e679e90aa5cf66d
and X509_get_default_cert_file_env(3).
LibreSSL itself does not call getenv(3), but a few application programs
including epic5, fetchmail, fossil, slic3r call these functions, so in
case programmers find them in existing code, telling them what they do
seems useful.
Document X509_get_default_cert_area(3).2021-08-03T18:49:30+00:00schwarze2021-08-03T18:49:30+00:00urn:sha1:417c7b471eb496adbbf5040263f69563a125d430
Put it into this page because this is the code actually using it.
Despite its name and include file, it is unrelated to X.509
and unrelated to certificates: it is just the default directory
containing the library configuration file, openssl.cnf(5).