openbsd/src/lib/libcrypto, branch libressl-v3.6.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.6.0 2022-09-19T12:25:52+00:00 Remove PKCS12_MAKE_{,SH}KEYBAG from Symbols.list 2022-09-19T12:25:52+00:00 tb 2022-09-19T12:25:52+00:00 urn:sha1:8c6b171d46b1c38f2d049466913944f62bc162e2 These functions were renamed in the last bump #define PKCS12_MAKE_KEYBAG PKCS12_SAFEBAG_create0_p8inf #define PKCS12_MAKE_SHKEYBAG PKCS12_SAFEBAG_create_pkcs8_encrypt They don't appear in the compiled library itself, so no further bump required. Fixes libressl-portable/portable#791 Found the hard way by vollkommenheit ok deraadt jsing Add OID for RPKI signedTAL objects 2022-09-15T08:20:34+00:00 job 2022-09-15T08:20:34+00:00 urn:sha1:5e986ba9f9b316020df4d510e27b6b7d1a19effe IANA made a permanent registration in the SMI Security for S/MIME CMS Content Type registry at https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-1 for signed objects conforming to draft-ietf-sidrops-signed-tal. OK tb@ Use LONG_MAX as the limit for ciphers with long based APIs. 2022-09-15T07:04:19+00:00 jsing 2022-09-15T07:04:19+00:00 urn:sha1:69a6645367fe0e98f414f8ce038c6a4c2e3fb102 These ciphers have long based APIs, while EVP has a size_t based API. The intent of these loops is to handle sizes that are bigger than LONG_MAX. Rather than using the rather crazy EVP_MAXCHUNK construct, use LONG_MAX rounded down to a large block size, ensuring that it is a block size multiple. Revert the recently added overflow checks now that this is handled more appropriately. ok tb@ Stop pretending that EVP_CIPHER cleanup can fail. 2022-09-13T04:59:18+00:00 jsing 2022-09-13T04:59:18+00:00 urn:sha1:2ec5e8a2e012afe68c1a580604d754b7e8cc73ee Now that EVP_CIPHER is opaque, stop pretending that EVP_CIPHER cleanup can fail. ok tb@ zap extra .Pp 2022-09-12T14:36:09+00:00 tb 2022-09-12T14:36:09+00:00 urn:sha1:ac803c42a5901693703e027059e9c004c3f5e507 Stop documenting i2c_ASN1_INTEGER. 2022-09-12T14:33:47+00:00 tb 2022-09-12T14:33:47+00:00 urn:sha1:afa32a688a05314cc1b6eec8c3ec695173e1459d This is no longer public API. Also remove some comments about i2c and c2i functions being intentionally undocumented since they are no longer public. Define LIBRESSL_HAS_QUIC 2022-09-11T17:36:34+00:00 tb 2022-09-11T17:36:34+00:00 urn:sha1:8ff32812e5677a254847c26df72f51999742522e ok jsing Bump major after symbol addition and removal and struct visibility changes 2022-09-11T17:34:41+00:00 tb 2022-09-11T17:34:41+00:00 urn:sha1:450676964345ddce4854693a15a41080426de582 Update Symbols.list 2022-09-11T17:32:01+00:00 tb 2022-09-11T17:32:01+00:00 urn:sha1:41b584fdb124607297340bf563460e3a3a769548 ok jsing Make structs in ts.h opaque 2022-09-11T17:31:19+00:00 tb 2022-09-11T17:31:19+00:00 urn:sha1:b7fb781bef534398c94a8cbc267fb62adea0af0c ok jsing