openbsd/src/lib/libcrypto/ocsp/ocsp_cl.c, branch OPENBSD_7_9_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE2025-05-10T05:54:39+00:00Use err_local.h rather than err.h in most places2025-05-10T05:54:39+00:00tb2025-05-10T05:54:39+00:00urn:sha1:41e8f99dd1625a9f0c80ce9d4383e95b18e85709
ok jsing
Convert libressl to use the BoringSSL style time conversions2024-03-24T11:30:12+00:00beck2024-03-24T11:30:12+00:00urn:sha1:0f167a53fa3e19b7e6bb0620e16c6d11f07f10ca
This gets rid of our last uses of timegm and gmtime in the
library and things that ship with it. It includes a bit
of refactoring in ocsp_cl.c to remove some obvious ugly.
ok tb@
Remove beck's ASN.1 time API from public visibility2024-03-02T09:08:41+00:00tb2024-03-02T09:08:41+00:00urn:sha1:69842f2ef7daf132291420391b6098aac2e4a7dc
This API was needed since OpenSSL didn't have one. We now have variants
of OpenSSL's API and will also expose BoringSSL's complementary API. The
users of this API were ported to the OpenSSL variants and some may switch
to BoringSSL's in the future. Part of it is still used internally.
ASN1_time_tm_clamp_notafter() is still used by libtls (and only libtls).
This will be fixed in a future bump.
ok jsing
Hide symbols in cast, idea, and ocsp2023-07-08T10:44:00+00:00beck2023-07-08T10:44:00+00:00urn:sha1:74c07cfc5fdb0509df57f93456ab3a89a9252697
ok tb@
spelling fixes; from paul tagliamonte2022-12-26T07:18:53+00:00jmc2022-12-26T07:18:53+00:00urn:sha1:2eb7e5ff6bb69760f9dd4a43e7e3520ebb930120
i removed the arithmetics -> arithmetic changes, as i felt they
were not clearly correct
ok tb
Add an essentially empty ocsp_local.h and include it in the files2022-01-07T09:45:52+00:00tb2022-01-07T09:45:52+00:00urn:sha1:e355318d027a0f704ff216613a362a7e02c68037
that will need it in the upcoming bump.
discussed with jsing
Fix a whitespace error that has annoyed me for way too long2021-11-24T19:27:03+00:00tb2021-11-24T19:27:03+00:00urn:sha1:05a11ca39a8ba8c17aa0e79382a429335e75d511Move the now internal X.509-related structs into x509_lcl.h.2021-11-01T20:53:08+00:00tb2021-11-01T20:53:08+00:00urn:sha1:f478d62658b61e2242dbf3575bf454f8c0f432b1
Garbage collect the now unused LIBRESSL_CRYPTO_INTERNAL and
LIBRESSL_OPAQUE_X509. Include "x509_lcl.h" where needed and
fix a couple of unnecessary reacharounds.
ok jsing
Prepare to provide a bunch of OCSP_resp_* getters.2021-10-24T13:50:14+00:00tb2021-10-24T13:50:14+00:00urn:sha1:f731efcb020de1a829fe2e6ba79f1411545dbdbf
ok beck jsing
Fix leak or double free with OCSP_request_add0_id()2020-10-09T17:19:35+00:00tb2020-10-09T17:19:35+00:00urn:sha1:fefcf488fdade8b93e6ee8a514efcb3705e952ff
On success, OCSP_request_add0_id() transfers ownership of cid to
either 'one' or 'req' depending on whether the latter is NULL or
not. On failure, the caller can't tell whether OCSP_ONEREQ_new()
failed (in which case cid needs to be freed) or whether it was a
failure to allocate memory in sk_insert() (in which case cid must
not be freed).
The caller is thus faced with the choice of leaving either a leak
or a potential double free. Fix this by transferring ownership
only at the end of the function.
Found while reviewing an upcoming diff by beck.
ok jsing