openbsd/src/lib/libcrypto/x509v3, branch OPENBSD_6_2

Allow leading . in nameConstraints. from openssl via jabberwock. ok jsing

2017-07-20T19:45:08+00:00

Distinguish between self-issued certificates and self-signed certificates.

2017-06-22T17:28:00+00:00

The certificate verification code has special cases for self-signed certificates and without this change, self-issued certificates (which it seems are common place with openvpn/easyrsa) were also being included in this category. Based on BoringSSL. Thanks to Dale Ghent for assisting in identifying the issue and testing this fix. ok inoguchi@

the XXXfree functions being called accept NULL, so don't check first.

2017-05-02T04:11:08+00:00

ok beck

Send the function codes from the error functions to the bit bucket,

2017-01-29T17:49:23+00:00

as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@

Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.

2017-01-21T04:44:43+00:00

No change to generated assembly excluding line numbers.

Expand ASN1_ITEM_rptr macros - no change in preprocessor output.

2016-12-30T16:19:24+00:00

Expand ASN1_ITEM_ref and ASN1_ITEM_ptr macros - no change in generated

2016-12-30T15:54:49+00:00

assembly. Of particular interest is ASN1_ITEM_ptr which does nothing and resulted in code like: if (method->it) ASN1_ITEM_free(..., ASN1_ITEM_ptr(method->it));

Remove all DECLARE_ASN1_SET_OF macro usage - since 2000 these have been

2016-12-27T16:05:57+00:00

nothing but markers for utils/mkstack.pl... and we removed the code that generated more macros from these markers in 2014.

Expand DECLARE_ASN1_ITEM macros - no change in preprocessor output.

2016-12-27T15:37:07+00:00

Explicitly export a list of symbols from libcrypto.

2016-12-21T15:49:29+00:00

Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@