openbsd/src/lib/libcrypto/pkcs12, branch OPENBSD_7_2

Make structs in pkcs12.h opaque

2022-09-11T17:30:13+00:00

ok jsing

Add an empty pkcs12_local.h and include it where it will soon be needed.

2022-08-20T09:16:18+00:00

Prepare to provide PKCS12 accessors

2022-08-03T20:16:06+00:00

In order to be able to make pkcs12/ opaque, we need an entire family of accessors. These are in a particularly nasty tangle since this was done in about a dozen steps while sprinkling const, renaming functions, etc. The public API also adds backward compat macros for functions that were in the tree for half a day and then renamed. Of course some of them got picked up by some ports. Some of the gruesome hacks in here will go away with the next bump, but that doesn't mean that the pkcs12 directory will be prettier afterward. ok jsing

Eliminate the somewhat pointless Ij variable

2022-07-30T11:27:06+00:00

Requested by & ok jsing

Transform two || chains into individually checked functions

2022-07-30T11:24:52+00:00

Requested by and ok jsing

fix indent

2022-07-25T05:06:06+00:00

Align PKCS12_key_gen_uni() with OpenSSL

2022-07-24T18:55:22+00:00

This is Dr Stephen Henson's rewrite avoiding BIGNUM (OpenSSL 54c68d35). Additionally this pulls in a < vs <= fix by Pauli Dale (OpenSSL 9d868840). There is also some minor cleanup by myself. ok jsing

Minor fixes in PKCS12_parse()

2022-07-24T18:51:16+00:00

Pull up clearing of output parameters before first return (OpenSSL 524fdd51 by Bernd Edlinger), explicit comparisons against NULL, '\0', etc. ok jsing

Per RFC 7292, safeContentsBag is a SEQUENCE OF, not a SET OF

2022-07-24T18:48:04+00:00

OpenSSL b709babb by Richard Levitte ok jsing

Clear key on exit in PKCS12_gen_mac()

2022-07-24T18:45:21+00:00

Also switch to heap-allocated HMAC_CTX and clean a few things up stylistically. loosely based on OpenSSL f5cee414 by Shane Lontis ok jsing