<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/ocsp, branch OPENBSD_7_5</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=OPENBSD_7_5</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=OPENBSD_7_5'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2024-03-02T09:08:41+00:00</updated>
<entry>
<title>Remove beck's ASN.1 time API from public visibility</title>
<updated>2024-03-02T09:08:41+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2024-03-02T09:08:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=69842f2ef7daf132291420391b6098aac2e4a7dc'/>
<id>urn:sha1:69842f2ef7daf132291420391b6098aac2e4a7dc</id>
<content type='text'>
This API was needed since OpenSSL didn't have one. We now have variants
of OpenSSL's API and will also expose BoringSSL's complementary API. The
users of this API were ported to the OpenSSL variants and some may switch
to BoringSSL's in the future. Part of it is still used internally.

ASN1_time_tm_clamp_notafter() is still used by libtls (and only libtls).
This will be fixed in a future bump.

ok jsing
</content>
</entry>
<entry>
<title>correct spelling of FALLTHROUGH</title>
<updated>2023-11-28T09:29:20+00:00</updated>
<author>
<name>jsg</name>
<email></email>
</author>
<published>2023-11-28T09:29:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=696efe761eacd6872932fb223f3b1c3c84f0adf3'/>
<id>urn:sha1:696efe761eacd6872932fb223f3b1c3c84f0adf3</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Hide symbols in cast, idea, and ocsp</title>
<updated>2023-07-08T10:44:00+00:00</updated>
<author>
<name>beck</name>
<email></email>
</author>
<published>2023-07-08T10:44:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=74c07cfc5fdb0509df57f93456ab3a89a9252697'/>
<id>urn:sha1:74c07cfc5fdb0509df57f93456ab3a89a9252697</id>
<content type='text'>
ok tb@
</content>
</entry>
<entry>
<title>spelling fixes; from paul tagliamonte</title>
<updated>2022-12-26T07:18:53+00:00</updated>
<author>
<name>jmc</name>
<email></email>
</author>
<published>2022-12-26T07:18:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2eb7e5ff6bb69760f9dd4a43e7e3520ebb930120'/>
<id>urn:sha1:2eb7e5ff6bb69760f9dd4a43e7e3520ebb930120</id>
<content type='text'>
i removed the arithmetics -&gt; arithmetic changes, as i felt they
were not clearly correct

ok tb
</content>
</entry>
<entry>
<title>Make internal header file names consistent</title>
<updated>2022-11-26T16:08:57+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-11-26T16:08:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=81d98bf600a381a625eb11b39a725b08c0ba547f'/>
<id>urn:sha1:81d98bf600a381a625eb11b39a725b08c0ba547f</id>
<content type='text'>
Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names
used for internal headers. Move all these headers we inherited from
OpenSSL to *_local.h, reserving the name *_internal.h for our own code.
Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h.
constant_time_locl.h is moved to constant_time.h since it's special.

Adjust all .c files in libcrypto, libssl and regress.

The diff is mechanical with the exception of tls13_quic.c, where
#include &lt;ssl_locl.h&gt; was fixed manually.

discussed with jsing,
no objection bcook
</content>
</entry>
<entry>
<title>Remove mkerr.pl remnants from LibreSSL</title>
<updated>2022-07-12T14:42:50+00:00</updated>
<author>
<name>kn</name>
<email></email>
</author>
<published>2022-07-12T14:42:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=89e42d5857196a8071fbafb5565388d0e20ec32b'/>
<id>urn:sha1:89e42d5857196a8071fbafb5565388d0e20ec32b</id>
<content type='text'>
This script is not used at all and files are edited by hand instead.
Thus remove misleading comments incl. the obsolete script/config.

Feedback OK jsing tb
</content>
</entry>
<entry>
<title>X509_GET_PUBKEY(3) return value check in libcrypto</title>
<updated>2022-01-22T00:33:02+00:00</updated>
<author>
<name>inoguchi</name>
<email></email>
</author>
<published>2022-01-22T00:33:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=97f5f3a4eec63d096ff75c0f3eefea873954c06f'/>
<id>urn:sha1:97f5f3a4eec63d096ff75c0f3eefea873954c06f</id>
<content type='text'>
ok beck@ tb@

suggest using X509_get0_pubkey() and remove EVP_PKEY_free() from tb@
</content>
</entry>
<entry>
<title>X509_GET_PUBKEY(3) return value check in libcrypto</title>
<updated>2022-01-22T00:31:23+00:00</updated>
<author>
<name>inoguchi</name>
<email></email>
</author>
<published>2022-01-22T00:31:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=6584e96690c653cb2ad98e693163abcdef34e0d7'/>
<id>urn:sha1:6584e96690c653cb2ad98e693163abcdef34e0d7</id>
<content type='text'>
ok beck@ tb@
</content>
</entry>
<entry>
<title>Make structs in ocsp.h opaque</title>
<updated>2022-01-14T08:32:26+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-01-14T08:32:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=3acb0bae7f358a317f5ebe092026edc36a05d43b'/>
<id>urn:sha1:3acb0bae7f358a317f5ebe092026edc36a05d43b</id>
<content type='text'>
This adds a little order to this pig sty.

ok inoguchi jsing
</content>
</entry>
<entry>
<title>Add an essentially empty ocsp_local.h and include it in the files</title>
<updated>2022-01-07T09:45:52+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2022-01-07T09:45:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=e355318d027a0f704ff216613a362a7e02c68037'/>
<id>urn:sha1:e355318d027a0f704ff216613a362a7e02c68037</id>
<content type='text'>
that will need it in the upcoming bump.

discussed with jsing
</content>
</entry>
</feed>
