openbsd/src/lib/libcrypto/pem, branch libressl-v3.2.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.2.0 2019-09-06T17:41:05+00:00 Handle CMS PEM headers. 2019-09-06T17:41:05+00:00 jsing 2019-09-06T17:41:05+00:00 urn:sha1:6bf0ccd1f8e6e778cc2c39e96ba3f8d5c5062682 ok inoguchi@ tb@ Clean up pvkfmt.c 2019-07-08T11:56:18+00:00 inoguchi 2019-07-08T11:56:18+00:00 urn:sha1:38918e2b1105203e3a43e4c44a53bf432952771c - Replace EVP_CIPHER_CTX_init with EVP_CIPHER_CTX_new and handle return value - Replace EVP_CIPHER_CTX_cleanup with EVP_CIPHER_CTX_free - Change two 'return -1;' to 'goto err;' for avoiding leak - Remove the case if enclevel == 0 - Change enclevel checking to make more consistent - Change all goto label to 'err' and insert space before goto label ok and advise from tb@ Fix pvk format processing in libcrypto 2019-07-07T10:52:56+00:00 inoguchi 2019-07-07T10:52:56+00:00 urn:sha1:b7ed3b2ab5936f64572047d1bcd708bbdeeb5a59 - Return the valid pointer in i2b_PVK() - Use EVP_Decrypt* instead of EVP_Encrypt* - Fix error handling after BIO_write() in i2b_PVK_bio() ok tb@ Change PEM_Sign{Init,Update}() to return an int. 2018-08-24T19:51:31+00:00 tb 2018-08-24T19:51:31+00:00 urn:sha1:bf5473ed3db3f13d45280ab553b3c593d8e311ea tested in a bulk by sthen ok jsing Check return value of EVP_EncodeUpdate() in PEM_write_bio(). 2018-08-24T19:48:39+00:00 tb 2018-08-24T19:48:39+00:00 urn:sha1:f7f51b71b683001b12ec548a55a6c0779df009d5 ok jsing Fix memory leak in i2b_PVK in error handling. 2018-08-05T11:19:25+00:00 bcook 2018-08-05T11:19:25+00:00 urn:sha1:2e290efb0ac101817d9da88a5b417f1b48cbe3fa Simplify parameter checks since this is only called from one place. Found by Coverity, CID 183502. ok beck@ Add const qualifier to the 'name', 'header', and 'data' arguments of 2018-05-13T10:47:54+00:00 tb 2018-05-13T10:47:54+00:00 urn:sha1:3b290073d5397f3c36a8cdf72764dc9bed6c5ebd PEM_write(3) and PEM_write_bio(3). tested in a bulk build by sthen ok jsing make ENGINE_finish() succeed on NULL and simplify callers as in 2018-04-14T07:09:21+00:00 tb 2018-04-14T07:09:21+00:00 urn:sha1:0c5418014797b1fadca3f270eb2f140fd6f5bdf8 OpenSSL commit 7c96dbcdab9 by Rich Salz. This cleans up the caller side quite a bit and reduces the number of lines enclosed in #ifndef OPENSSL_NO_ENGINE. codesearch.debian.net shows that almost nothing checks the return value of ENGINE_finish(). While there, replace a few nearby 'if (!ptr)' with 'if (ptr == NULL)'. ok jsing, tested by & ok inoguchi use freezero() instead of memset/explicit_bzero + free. Substantially 2017-05-02T03:59:45+00:00 deraadt 2017-05-02T03:59:45+00:00 urn:sha1:5904cc0e04409fde39a97e6580535da34eeb4291 reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@