openbsd/src/lib/libcrypto, branch OPENBSD_6_1

bump to LibreSSL 2.5.5

2017-07-07T05:28:12+00:00

MFC:

2017-07-05T15:20:10+00:00

Distinguish between self-issued certificates and self-signed certificates. The certificate verification code has special cases for self-signed certificates and without this change, self-issued certificates (which it seems are common place with openvpn/easyrsa) were also being included in this category. ok inoguchi@

bump to 2.5.4

2017-04-29T19:56:13+00:00

MFC: Switch Linux getrandom() usage to non-blocking mode, continuing to

2017-04-29T18:57:00+00:00

use fallback mechanims if unsuccessful. The design of Linux getrandom is broken. It has an uninitialized phase coupled with blocking behaviour, which is unacceptable from within a library at boot time without possible recovery. ok deraadt@ jsing@

MFC: Revert previous change that forced consistency between return value and

2017-04-28T23:12:04+00:00

error code, since this breaks the documented API. Under certain circumstances this will result in incorrect successful certiticate verification (where a user supplied callback always returns 1, and later code checks the error code to potentially abort post verification)

bump version for stable release

2017-04-06T10:36:12+00:00

reinstate the capitalisation from previous, as advised by schwarze;

2017-03-27T17:00:54+00:00

tweak previous;

2017-03-26T12:31:27+00:00

merge new UI documentation from OpenSSL

2017-03-26T00:06:10+00:00

document X509_Digest(3) and friends;

2017-03-25T22:21:21+00:00

from Rich Salz , OpenSSL commit 3e5d9da5 etc.