openbsd/src/lib/libcrypto, branch libressl-v3.3.3A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=libressl-v3.3.32021-04-15T14:15:03+00:00Switch back to the legacy verifier for the release.2021-04-15T14:15:03+00:00tb2021-04-15T14:15:03+00:00urn:sha1:013c39e97f0af8342cdb560b4a2a45f87602f7b7
This is disappointing as a lot of work was put into the new verifier
during this cycle. However, there are still too many known bugs and
incompatibilities. It is better to be faced with known broken behavior
than with new broken behavior and to switch now rather than via errata.
This way we have another cycle to iron out the kinks and to fix some of
the remaining bugs.
ok jsing
Don't leak param->name in x509_verify_param_zero()2021-04-05T07:02:50+00:00tb2021-04-05T07:02:50+00:00urn:sha1:57e3ff55d71172acc1caf21e8c346e67b7089676
For dynamically allocated verify parameters, param->name is only ever set
in X509_VERIFY_set1_name() where the old one is freed and the new one is
assigned via strdup(). Setting it to NULL without freeing it beforehand is
a leak.
looks correct to millert, ok inoguchi
Bump minors after symbol addition2021-03-31T17:02:18+00:00tb2021-03-31T17:02:18+00:00urn:sha1:0c1b885ba6292c3b2d58d343977ac4cab728cc2bExpose various DTLSv1.2 specific functions and defines2021-03-31T16:59:32+00:00tb2021-03-31T16:59:32+00:00urn:sha1:2ebb1bafcf20e3417b35907fc27572bb0ff9faac
ok bcook inoguchi jsing
Provide missing prototype for d2i_DSAPrivateKey_fp(3)2021-03-31T16:51:06+00:00tb2021-03-31T16:51:06+00:00urn:sha1:a2c7dc9f61c905842b4ecaed7ee8beba13289e15
ok bcook inoguchi jsing
Document EVP_PKEY_new_CMAC_key(3)2021-03-31T16:48:43+00:00tb2021-03-31T16:48:43+00:00urn:sha1:5f72b11bd2dc2e740c447ac146e4fdf67f2aee3b
ok bcook inoguchi jsing
Provide EVP_PKEY_new_CMAC_key(3)2021-03-31T16:47:01+00:00tb2021-03-31T16:47:01+00:00urn:sha1:c7922f8b9a137af47dc02a37ceec9bfacef62554
ok bcook inoguchi jsing
Prepare documenting EVP_PKEY_new_CMAC_key(3)2021-03-29T17:58:29+00:00tb2021-03-29T17:58:29+00:00urn:sha1:43988cfad5dfc057f452876ef7cfca69a2f3779c
Based on some text in OpenSSL 1.1.1's EVP_PKEY_new.pod.
Prepare to provide EVP_PKEY_new_CMAC_key()2021-03-29T15:57:23+00:00tb2021-03-29T15:57:23+00:00urn:sha1:e5044a16b50be503267937298648ce4abb8bbcbc
sebastia ran into this when attempting to update security/hcxtools.
This will be tested via wycheproof.go once the symbol is public.
ok jsing, tested by sebastia
Avoid mangled output in BIO_debug_callback2021-03-25T09:26:17+00:00tb2021-03-25T09:26:17+00:00urn:sha1:0939b7a663a0450286c355c29910f9611128d2b0
Instead of blindly skipping 14 characters, we can use the return
value of snprintf() to determine how much we should skip.
From Martin Vahlensieck with minor tweaks by me