openbsd/src/lib/libcrypto, branch libressl-v2.4.5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.5 2016-07-23T19:31:37+00:00 This commit was manufactured by cvs2git to create branch 'OPENBSD_6_0'. 2016-07-23T19:31:37+00:00 cvs2svn admin@example.com 2016-07-23T19:31:37+00:00 urn:sha1:f62463c2c218cf95320c8841ba552dc2c8ce4738 don't mix code and decls, ok tedu@ 2016-07-18T01:04:52+00:00 bcook 2016-07-18T01:04:52+00:00 urn:sha1:c7c0c4b1ecb389c009d446c6c9253677915896dc use memset to initialize the union 2016-07-17T22:01:01+00:00 bcook 2016-07-17T22:01:01+00:00 urn:sha1:c5ec86df737ed666779cf51e5f3a89a62397e0de remove unused OPENSSL_NO_OBJECT case 2016-07-17T21:23:50+00:00 bcook 2016-07-17T21:23:50+00:00 urn:sha1:45c9aa3806e0d3ab3751cd424acd1b069b6d54ee ok tedu@ Initialize buffers before use, noted by Kinichiro Inoguchi. 2016-07-17T21:21:40+00:00 bcook 2016-07-17T21:21:40+00:00 urn:sha1:fdee4729e12ac97473d08c1a7e9d17c5468fe82c ok beck@ Clean up OCSP_check_validity() a bit more. 2016-07-16T16:14:28+00:00 beck 2016-07-16T16:14:28+00:00 urn:sha1:8109af5f2daf46b062aa3ffda9db6ff7889f818f - Return on first failure rather than continuing. - Don't compare times by comparing strings that possibly were not parsable as a time. ok deraadt@ call BN_init on temporaries to avoid use-before-set warnings 2016-07-07T11:53:12+00:00 bcook 2016-07-07T11:53:12+00:00 urn:sha1:db57abec05ccea8ab13e008bbc745b4c3a07cd3d ok beck@ remove unneeded duplicate call - spotted by jsing@ 2016-07-05T03:24:38+00:00 beck 2016-07-05T03:24:38+00:00 urn:sha1:218d5ab4d242d1552eebc254412593a7e10d1505 On systems where we do not have BN_ULLONG defined (most 64-bit systems), 2016-07-05T02:54:35+00:00 bcook 2016-07-05T02:54:35+00:00 urn:sha1:29ecf1f5b4cb5a580dcac440216b7127a56e3f84 BN_mod_word() can return incorrect results if the supplied modulus is too big, so we need to fall back to BN_div_word. Now that BN_mod_word may fail, handle errors properly update the man page. Thanks to Brian Smith for pointing out these fixes from BoringSSL: https://boringssl.googlesource.com/boringssl/+/67cb49d045f04973ddba0f92fe8a8ad483c7da89 https://boringssl.googlesource.com/boringssl/+/44bedc348d9491e63c7ed1438db100a4b8a830be ok beck@ Add several fixes from OpenSSL to make OCSP work with intermediate 2016-07-05T00:21:47+00:00 beck 2016-07-05T00:21:47+00:00 urn:sha1:74a4eefc567605f4d8f2c58124b45cb770123a22 certificates provided in the response. - makes our newly added ocsp regress test pass too.. ok bcook@