openbsd/src/lib/libssl/bs_ber.c, branch OPENBSD_6_8_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE2016-12-03T12:34:35+00:00Avoid signed vs unsigned warnings from clang by adding two casts,2016-12-03T12:34:35+00:00jsing2016-12-03T12:34:35+00:00urn:sha1:578440178487a164eba874e7a566a55de4a9e2e8
slightly rewriting some code and changing the type of an array.
ok bcook@ doug@
Check for failure with CBB_init() in bs_ber.c.2015-06-21T16:10:45+00:00doug2015-06-21T16:10:45+00:00urn:sha1:b97997b53e900d6e532a26c353078d8d7779ad1e
From BoringSSL commit 3fa65f0f05f67615d9daf48940e07f84d094ac6e.
Use explicit int in bs_ber.c.2015-06-17T07:20:39+00:00doug2015-06-17T07:20:39+00:00urn:sha1:813677f2785c97e586fde9752ed686ed6ac85193
ok miod@ jsing@
Be more strict about BER and DER terminology.2015-06-16T06:37:58+00:00doug2015-06-16T06:37:58+00:00urn:sha1:b87417588144066bdf43f4c7eaed221f27269c8f
bs_ber.c does not convert BER to DER. It's a hack to convert a DER-like
encoding with one violation (indefinite form) to strict DER. Rename
the functions to reflect this.
ok miod@ jsing@
Make CBS_get_any_asn1_element() more compliant with DER encoding.2015-06-15T07:35:49+00:00doug2015-06-15T07:35:49+00:00urn:sha1:f06caa67ef95efe3935b9b1e51f4e8a10a52d973
CBS_get_any_asn1_element violates DER encoding by allowing indefinite
form. All callers except bs_ber.c expect DER encoding. The callers
must check to see if it was indefinite or not.
Rather than exposing all callers to this behavior,
cbs_get_any_asn1_element_internal() allows specifying whether you want to
allow the normally forbidden indefinite form. This is used by
CBS_get_any_asn1_element() for strict DER encoding and by a new static
function in bs_ber.c for the relaxed version.
While I was here, I added comments to differentiate between ASN.1
restrictions and CBS limitations.
ok miod@
Add whitespace and replace OPENSSL_free with free in documentation.2015-04-29T02:11:09+00:00doug2015-04-29T02:11:09+00:00urn:sha1:82d4e9306fa0516286b66cf7b46315b9ff1cf8a1
ok jsing@
Call CBS_mem_equal() rather than reimplementing it.2015-04-29T01:31:39+00:00doug2015-04-29T01:31:39+00:00urn:sha1:e2a0aa020fd370f1d6e7a9277f0e06bbde38322d
ok jsing@
KNF bytestring files.2015-02-06T22:22:33+00:00doug2015-02-06T22:22:33+00:00urn:sha1:d03a4807083e9e8c5b74ea28b35bf911945962ec
I checked that this doesn't change anything. Compiled with clang using
-Wno-pointer-sign -g0 to reduce the differences. Only difference in the
asm is due to assert(0) line number changes in bs_cbs.c and bs_cbb.c.
miod is ok with the general process.
Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.2015-02-06T09:36:16+00:00doug2015-02-06T09:36:16+00:00urn:sha1:57c3c820260976eedbeceb47dc79b313f0dd1b42
This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.
BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.
Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.
input + ok jsing@, miod@