openbsd/src/lib/libcrypto/pem, branch OPENBSD_5_9_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_5_9_BASE 2016-02-17T13:06:55+00:00 This commit was manufactured by cvs2git to create tag 'OPENBSD_5_9_BASE'. 2016-02-17T13:06:55+00:00 cvs2svn admin@example.com 2016-02-17T13:06:55+00:00 urn:sha1:c192600fadb763f0d8645c69f309093e3709f18c Correct spelling of OPENSSL_cleanse. 2015-09-10T15:56:26+00:00 jsing 2015-09-10T15:56:26+00:00 urn:sha1:647569a51c1530d10e75e272f0982682f696caa7 ok miod@ Drop stupid (int) casts for the arguments of malloc() and friends. This is 2015-07-19T18:29:31+00:00 miod 2015-07-19T18:29:31+00:00 urn:sha1:a24b14b6bf2c04501ea84182a52caa5bf2ae7635 not 16-bit MS-DOS anymore. ok bcook@ tedu@ Make sure the `reject negative sizes' logic introduced in 1.34 is actually 2015-07-16T02:14:48+00:00 miod 2015-07-16T02:14:48+00:00 urn:sha1:af5c71535f905bdf9ebd1db46a42dad5a462d2c4 applied to all code paths. ok beck@ bcook@ doug@ guenther@ Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls. 2015-05-15T11:00:14+00:00 jsg 2015-05-15T11:00:14+00:00 urn:sha1:f8e03ddcf892381c04c6d2274d698a4db936d93b ok doug@ Guenther has plans for OPENSSL_NO_CMS, so revert this for the moment. 2015-02-11T04:05:14+00:00 beck 2015-02-11T04:05:14+00:00 urn:sha1:3fb89787679dd239a55ca0a4e366ad4e2051fe84 get rid of OPENSSL_NO_CMS code we do not use. 2015-02-11T03:55:42+00:00 beck 2015-02-11T03:55:42+00:00 urn:sha1:1d3b395bb02124e944ce4abc2f2eab59e2cde925 ok miod@ Enable building with -DOPENSSL_NO_DEPRECATED. 2015-02-11T03:19:37+00:00 doug 2015-02-11T03:19:37+00:00 urn:sha1:e816a1ec1d4411707051912b945e8eab7a5a94e8 If you didn't enable deprecated code, there were missing err.h and bn.h includes. This commit allows building with or without deprecated code. This was not derived from an OpenSSL commit. However, they recently enabled OPENSSL_NO_DEPRECATED in git and fixed these header problems in a different way. Verified with clang that this only changes line numbers in the generated asm. ok miod@ Replace assert() and OPENSSL_assert() calls with proper error return paths. 2015-02-10T09:52:35+00:00 miod 2015-02-10T09:52:35+00:00 urn:sha1:edf340ccfb8b64c1c344e29963a2093fe1298a86 Careful review, feedback & ok doug@ jsing@ Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). 2014-10-22T13:02:04+00:00 jsing 2014-10-22T13:02:04+00:00 urn:sha1:fa457604779ff38b511fdfdae3c6a78664281c22 arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@