openbsd/src/lib/libcrypto, branch libressl-v2.3.1

Another change that is needed to restore the previous behaviour of

2015-10-22T15:38:05+00:00

ASN1_{GENERALIZED,UTC}TIME_set_string(), which allows it to be called with a NULL pointer. ok beck@

Restore previous behaviour and allow

2015-10-22T15:03:19+00:00

ASN1_{GENERALIZED,UTC,}TIME_set_string() to be called with a NULL pointer. Found the hard way by @kinichiro on github. ok beck@

Reject too small bits value in BN_generate_prime_ex(), so that it does not risk

2015-10-21T19:02:22+00:00

becoming negative in probable_prime_dh_safe(). Reported by Franck Denis who noticed `openssl gendh 0' would segfault. Fix adapted from OpenSSL RT#2701. ok beck@ jsing@

In the case where len is not a multiple of sizeof(RC4_CHUNK) the RC4 code

2015-10-21T16:36:50+00:00

will end up doing a read and write of up to 7 bytes beyond the specified length. This is effectively a non-issue since we read and write back the same data and due to alignment it is within a page boundary. Regardless, avoid this by removing the "special" handling for the remaining length and allow the standard (non-chunk) code to process the remaining bytes, which does not result in overrun. Reported by Pascal Cuoq - thanks! ok beck@ miod@

Lob a style(9) grenade in here.

2015-10-20T15:50:13+00:00

Stop supporing "legcay" time formats that OpenSSL supports. Rewrite the

2015-10-19T16:32:37+00:00

utctime and gentime wrappers accordingly. Along with some other cleanup. this also removes the need for timegm. ok bcook@ sthen@ jsing@

Remove pointless externs - the structs are declared in the same files a

2015-10-16T15:15:39+00:00

few lines above.

Expand DECLARE_ASN1_ALLOC_FUNCTIONS and DECLARE_ASN1_FUNCTIONS_const

2015-10-16T15:12:30+00:00

macros. The only change in the generated assembly is due to line numbering.

Remove pointless uses of DECLARE_ASN1_ENCODE_FUNCTIONS_const.

2015-10-16T15:09:28+00:00

DECLARE_ASN1_FUNCTIONS_const already includes this macro so using both means we end up with duplicate function prototypes and externs.

actually include the prerequisite dependency for BIO instead of doing nastyness

2015-10-16T12:41:29+00:00