openbsd/src/lib/libcrypto/pkcs7, branch libressl-v2.1.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.1.2 2014-11-09T19:17:13+00:00 GOST crypto algorithms (well, most of them), ported from the removed GOST 2014-11-09T19:17:13+00:00 miod 2014-11-09T19:17:13+00:00 urn:sha1:35d7dd4666beda50f5094b8804802132fbe722ef engine to regular EVP citizens, contributed by Dmitry Eremin-Solenikov; libcrypto bits only for now. This is a verbatim import of Dmitry's work, and does not compile in this state; the forthcoming commits will address these issues. None of the GOST code is enabled in libcrypto yet, for it still gets compiled with OPENSSL_NO_GOST defined. However, the public header gost.h will be installed. Check the result of sk_*_push() operations for failure. 2014-10-28T05:46:56+00:00 miod 2014-10-28T05:46:56+00:00 urn:sha1:794dcf073b734d649d7b5d30916d7a3ae919b66e ok doug@ jsing@ Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). 2014-10-22T13:02:04+00:00 jsing 2014-10-22T13:02:04+00:00 urn:sha1:fa457604779ff38b511fdfdae3c6a78664281c22 arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@ None of these need to include <openssl/rand.h> 2014-10-18T17:20:40+00:00 jsing 2014-10-18T17:20:40+00:00 urn:sha1:0bad55f54f7132a386746f23ba4f2d106d115563 BIO_free() returns immediately when the sole input is NULL. 2014-07-25T06:05:32+00:00 doug 2014-07-25T06:05:32+00:00 urn:sha1:d9473bfc95b9bc3edd71f25c11f0b47b27500df9 Remove unnecessary NULL check. ok miod@ if (x) FOO_free(x) -> FOO_free(x). 2014-07-12T16:03:37+00:00 miod 2014-07-12T16:03:37+00:00 urn:sha1:068bf464df6ef084067943863d776f59762bfaf0 Improves readability, keeps the code smaller so that it is warmer in your cache. review & ok deraadt@ Only import cryptlib.h in the four source files that actually need it. 2014-07-11T08:44:49+00:00 jsing 2014-07-11T08:44:49+00:00 urn:sha1:74e2c009c83ad374bd6acdcfc376a384e25ab007 Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ Explicitly include <openssl/opensslconf.h> in every file that references 2014-07-10T22:45:58+00:00 jsing 2014-07-10T22:45:58+00:00 urn:sha1:62348213609ef233110561d1a6ed67ad66df1c7e an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. KNF 2014-07-10T21:42:43+00:00 miod 2014-07-10T21:42:43+00:00 urn:sha1:822fd17ec473f87a76c94e42d17f4d9e116ab340 Fix a double free in a can't-fail error path in PKCS7_decrypt(), by removing 2014-07-10T21:40:59+00:00 miod 2014-07-10T21:40:59+00:00 urn:sha1:c99ec4c1c37261359267882a1c4fc78b3022a6b6 the error path altogether and simplifying the local variables as a result. joint work with jsing@; ok jsing@ tedu@