openbsd/src/lib/libcrypto/ts/ts_conf.c, branch OPENBSD_7_9 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2025-05-10T05:54:39+00:00 Use err_local.h rather than err.h in most places 2025-05-10T05:54:39+00:00 tb 2025-05-10T05:54:39+00:00 urn:sha1:41e8f99dd1625a9f0c80ce9d4383e95b18e85709 ok jsing replace atoi(3) usage with strtonum(3); ok/tweaks tb@ 2024-08-26T22:01:28+00:00 op 2024-08-26T22:01:28+00:00 urn:sha1:07d3f305ea24da68aec66c7e4be39317f6ea7dae Change ts to only support one second precision. 2024-03-26T00:39:22+00:00 beck 2024-03-26T00:39:22+00:00 urn:sha1:3604a06d3b1412f3b3b3959a358b2c8e2a07836a RFC 3631 allows for sub second ASN1 GENERALIZED times, if you choose to support sub second time precison. It does not indicate that an implementation must support them. Supporting sub second timestamps is just silly and unrealistic, so set our maximum to one second of precision. We then simplify this code by removing some nasty eye-bleed that made artisinally hand crafted strings and jammed them into an ASN1_GENERALIZEDTIME. ok tb@, jsing@, with one second precision tested by kn@ Unifdef OPENSSL_NO_ENGINE in libcrypto 2023-11-19T15:46:10+00:00 tb 2023-11-19T15:46:10+00:00 urn:sha1:593d97e74cc873d99aced677883cf55625efe62d This is mechanical apart from a few manual edits to avoid doubled empty lines. ok jsing Hide symbols in ts 2023-07-07T07:25:21+00:00 beck 2023-07-07T07:25:21+00:00 urn:sha1:8ec0f288746ef0197965cf8c262dd2e89fba308e ok jsing@ Make ENGINE_free() succeed on NULL. Matches OpenSSL's behavior and 2018-04-14T07:18:37+00:00 tb 2018-04-14T07:18:37+00:00 urn:sha1:e2303054291a1a9cf6ea192af2df63e77c3f65fd simplifies the caller side. tested by & ok inoguchi; discussed with schwarze Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Enable building with -DOPENSSL_NO_DEPRECATED. 2015-02-11T03:19:37+00:00 doug 2015-02-11T03:19:37+00:00 urn:sha1:e816a1ec1d4411707051912b945e8eab7a5a94e8 If you didn't enable deprecated code, there were missing err.h and bn.h includes. This commit allows building with or without deprecated code. This was not derived from an OpenSSL commit. However, they recently enabled OPENSSL_NO_DEPRECATED in git and fixed these header problems in a different way. Verified with clang that this only changes line numbers in the generated asm. ok miod@ Check the result of sk_*_push() operations for failure. 2014-10-28T05:46:56+00:00 miod 2014-10-28T05:46:56+00:00 urn:sha1:794dcf073b734d649d7b5d30916d7a3ae919b66e ok doug@ jsing@ Only import cryptlib.h in the four source files that actually need it. 2014-07-11T08:44:49+00:00 jsing 2014-07-11T08:44:49+00:00 urn:sha1:74e2c009c83ad374bd6acdcfc376a384e25ab007 Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@