openbsd/src/lib/libcrypto/ts, branch libressl-v3.4.1A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=libressl-v3.4.12021-07-02T11:15:08+00:00call the API function X509_NAME_cmp(3) instead of the obsolete,2021-07-02T11:15:08+00:00schwarze2021-07-02T11:15:08+00:00urn:sha1:c33f63bcb3b575cf1e28e65f51259e81b9c463c6
undocumented macro alias X509_name_cmp(3);
no change to the assembler code generated by the compiler;
OK tb@
Make TS_compute_imprint a bit more robust.2021-05-02T15:33:33+00:00tb2021-05-02T15:33:33+00:00urn:sha1:63fb3940fa3e6cc8c92f3ed37d159fa4034bc320
Instead of using the output parameters directly, null them out at the
beginning and work with local variables which are only assigned to the
output parameters on success. This way we avoid leaking stale pointers
back to the caller.
requested/ok jsing
Prevent double free in int_TS_RESP_verify_token2021-05-01T13:13:45+00:00tb2021-05-01T13:13:45+00:00urn:sha1:4070e35405faa122a43083b89e5569ecc3aaf536
If TS_compute_imprint fails after md_alg was allocated, there will be a
double free in its caller. Obvious fix is to null out the output
parameter md_alg just like it's already done for imprint and imprint_len.
From Pauli Dale, OpenSSL 1.1.1, a3dea76f742896b7d75a0c0529c0af1e628bd853
ok inoguchi jsing
snprintf/vsnprintf return < 0 on error, rather than -1.2019-07-03T03:24:04+00:00deraadt2019-07-03T03:24:04+00:00urn:sha1:bdd1c0627cbfd4015db19da84ab1a24f50d9f6dcAdd const to the ASN1_OBJECT argument of TS_TST_INFO_get_ext_by_OBJ(3).2018-05-13T15:35:46+00:00tb2018-05-13T15:35:46+00:00urn:sha1:6db451f380877c4c494a94c071855240ac202477
Should have been part of the previous commit. Omission noted by schwarze.
tested in bulk build by sthen
ok jsing
Add const qualifier to the ASN1_OBJ * argument of2018-05-13T15:04:05+00:00tb2018-05-13T15:04:05+00:00urn:sha1:fde187bda5ffeae71c1695aa3de4a72d94f51052
TS_REQ_get_ext_by_OBJ(3), TS_REQ_set_policy_id(3),
TS_RESP_CTX_add_policy(3), TS_RESP_CTX_set_def_policy(3),
and TS_TST_INFO_get_ext_by_OBJ(3)
tested in a bulk by sthen
ok jsing
Make ENGINE_free() succeed on NULL. Matches OpenSSL's behavior and2018-04-14T07:18:37+00:00tb2018-04-14T07:18:37+00:00urn:sha1:e2303054291a1a9cf6ea192af2df63e77c3f65fd
simplifies the caller side.
tested by & ok inoguchi; discussed with schwarze
Send the function codes from the error functions to the bit bucket,2017-01-29T17:49:23+00:00beck2017-01-29T17:49:23+00:00urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0
as was done earlier in libssl. Thanks inoguchi@ for noticing
libssl had more reacharounds into this.
ok jsing@ inoguchi@
Remove all DECLARE_ASN1_SET_OF macro usage - since 2000 these have been2016-12-27T16:05:57+00:00jsing2016-12-27T16:05:57+00:00urn:sha1:0bde81f3db44da2391092cc43925c8351096c73c
nothing but markers for utils/mkstack.pl... and we removed the code that
generated more macros from these markers in 2014.
More X509_STORE_CTX_set_*() return value checks.2016-11-05T15:19:07+00:00miod2016-11-05T15:19:07+00:00urn:sha1:f72470bc783a016dc0f537ddde0f7868dcf634f4
ok beck@ jsing@