openbsd/src/lib/libcrypto/pem, branch OPENBSD_7_1_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_1_BASE2022-01-14T07:52:24+00:00Remove PEM_Seal{Init,Update,Final}2022-01-14T07:52:24+00:00tb2022-01-14T07:52:24+00:00urn:sha1:5728fda981ff41d316c6593bd304a41a39f23942
This unused, bug-ridden API was removed in OpenSSL commit 0674427f.
ok inoguchi jsing
Unifdef LIBRESSL_OPAQUE_* and LIBRESSL_NEXT_API2022-01-14T07:49:49+00:00tb2022-01-14T07:49:49+00:00urn:sha1:82ec18edf4e632f36b6f79c239fdb6961d421a82
This marks the start of major surgery in libcrypto. Do not attempt to
build the tree for a while (~50 commits).
Prepare to make RSA and RSA_METHOD opaque by including rsa_locl.h2022-01-07T09:55:32+00:00tb2022-01-07T09:55:32+00:00urn:sha1:443c3d5c755f7f540390fcf1a11c8a443b2553cc
where it will be needed in the upcoming bump.
discussed with jsing
Prepare the move of DSA_SIG, DSA_METHOD and DSA to dsa_locl.h by2022-01-07T09:35:36+00:00tb2022-01-07T09:35:36+00:00urn:sha1:72ddf309b6ca09529e5603af312e92fbefe2d810
including the local header where it will be needed.
discussed with jsing
Prepare to provide PEM_write_bio_PrivateKey_traditional()2021-12-24T12:59:18+00:00tb2021-12-24T12:59:18+00:00urn:sha1:60fc41d3383b676bdaea8bc4f89d5f7b69a1e209
This will be needed in openssl-ruby after the bump.
Part of OpenSSL commit 05dba815.
ok inoguchi jsing
Include evp_locl.h where it will be needed once most structs from2021-12-12T21:30:14+00:00tb2021-12-12T21:30:14+00:00urn:sha1:b632ec4f99386efc52214c580c9f233748302224
evp.h will be moved to evp_locl.h in an upcoming bump.
ok inoguchi
Remove the unused X509_CERT_PAIR struct and the assicated API.2021-10-31T16:28:50+00:00tb2021-10-31T16:28:50+00:00urn:sha1:ece3619d25257d5061daad5f5867253771ca392e
ok beck jsing
remove half a dozen "goto" statements and a label2020-07-25T11:53:37+00:00schwarze2020-07-25T11:53:37+00:00urn:sha1:0030d031a0ace03c9c7be82b8c636ad0dfbda45d
that change nothing whatsoever, except making the code harder to read;
OK tb@
Fix a bug in PEM_X509_INFO_read_bio(3) that is very likely to cause2020-07-23T17:15:35+00:00schwarze2020-07-23T17:15:35+00:00urn:sha1:bc9c51cf66fc92815074622c1c64a0e8bd9d5796
use-after-free and double-free issues in calling programs.
The bug was introduced in SSLeay-0.6.0 released on June 21, 1996
and has been present since OpenBSD 2.4.
I found the bug while documenting the function.
The bug could bite in two ways that looked quite different from the
perspective of the calling code:
* If a stack was passed in that already contained some X509_INFO
objects and an error occurred, all the objects passed in would be
freed, but without removing the freed pointers from the stack,
so the calling code would probable continue to access the freed
pointers and eventually free them a second time.
* If the input BIO contained at least two valid PEM objects followed by
at least one PEM object causing an error, at least one freed pointer
would be put onto the stack, even though the function would return NULL
rather than the stack. But the calling code would still have a pointer
to the stack, so it would be likely to access the new bogus pointers
sooner or later.
Fix all this by remembering the size of the input stack on entry
and cutting it back to exactly that size when exiting due to an
error, but no further.
While here, do some related cleanup:
* Garbage collect the automatic variables "error" and "i"
which were only used at one single place each.
* Use NULL rather than 0 for pointers.
I like bugfixes that make the code four lines shorter, reduce the
number of variables by one, reduce the number of brace-blocks by
one, reduce the number if if-statements by one, and reduce the
number of else-clauses by one.
Tweaks and OK tb@.
Handle CMS PEM headers.2019-09-06T17:41:05+00:00jsing2019-09-06T17:41:05+00:00urn:sha1:6bf0ccd1f8e6e778cc2c39e96ba3f8d5c5062682
ok inoguchi@ tb@