openbsd/src/lib/libssl/d1_clnt.c, branch OPENBSD_6_8_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE2020-01-23T10:48:37+00:00Remove the ssl_get_message function pointer from SSL_METHOD_INTERNAL.2020-01-23T10:48:37+00:00jsing2020-01-23T10:48:37+00:00urn:sha1:a0913f8b11765018808c519315bcbc52aa7a4f27
ssl_get_message is essentially a switch between ssl3_get_message and
dtls1_get_message, both only used by the legacy stack. Instead, use
SSL_IS_DTLS() in ssl3_get_message to call the DTLS function when
necessary.
ok beck@ inoguchi@ tb@
Consolidate all of the SSL method structs/functions into a single file.2018-11-05T05:45:15+00:00jsing2018-11-05T05:45:15+00:00urn:sha1:fb9f160cf8d816f5dd783bf8cad3828d2aa35dbe
Discussed with tb@
Nuke ssl_pending/ssl_shutdown function pointers.2018-08-30T16:56:16+00:00jsing2018-08-30T16:56:16+00:00urn:sha1:16b6459b65a2ea71c62cee66fa098dd1e7b7cd8d
ssl3_pending() is used for all protocols and dtls1_shutdown() just calls
ssl3_shutdown(), so just call the appropriate function directly instead.
ok beck@ inoguchi@ tb@
Remove function pointers for ssl_{read,write,peek}.2018-04-07T17:02:34+00:00jsing2018-04-07T17:02:34+00:00urn:sha1:434b34179d51a711f0e2f59be4e5da2817c6a71f
Now that everything goes through the same code path, we can remove a layer
of indirection and just call ssl3_{read,write,peek} directly.
ok beck@ inoguchi@
Merge dtls1_connect() into ssl3_connect(), removing a large amount of2017-10-10T15:13:26+00:00jsing2017-10-10T15:13:26+00:00urn:sha1:7faea6afb3552bdce4af15a5de5afb4644c19ec4
duplicated code. For now this is essentially adds a diff of the two
functions with 'if (SSL_IS_DTLS(s))' - further clean up and improvement
will follow.
ok inoguchi@
Reduce non-functional differences between dtls1_connect() and2017-10-08T16:54:28+00:00jsing2017-10-08T16:54:28+00:00urn:sha1:23d9764354554ecb820c49fed8f0286c5b684bbe
ssl3_connect() - synchronise comments, whitespace, line wrapping, etc.
Convert ssl3_send_change_cipher_spec() to use CBB and make it handle DTLS,2017-10-08T16:24:02+00:00jsing2017-10-08T16:24:02+00:00urn:sha1:ba9ebd2e46ba795dd4f082910e89df705f1e264b
which allows us to drop dtls1_send_change_cipher_spec() entirely.
ok inoguchi@
Move state from ssl->internal to the handshake structure.2017-05-07T04:22:24+00:00beck2017-05-07T04:22:24+00:00urn:sha1:2439ee31e965a96d3685f362e5a32d365a9e5eaa
while we are at it, convert SSLerror to use a function
internally, so that we may later allocate the handshake
structure and check for it
ok jsing@
Bring in an SSL_HANDSHAKE structure and commence the great shovelling2017-05-06T22:24:58+00:00beck2017-05-06T22:24:58+00:00urn:sha1:ba0818f10be313fb81078efbbc62472ce82b1372
ok jsing@, gcc@, regress@
Change SSLerror() back to taking two args, with the first one being an SSL *.2017-02-07T02:08:38+00:00beck2017-02-07T02:08:38+00:00urn:sha1:9a5920738bea15430db1fdd138e67d9bbc3a95d3
Make a table of "function codes" which maps the internal state of the SSL *
to something like a useful name so in a typical error in the connection you
know in what sort of place in the handshake things happened. (instead of
by arcane function name).
Add SSLerrorx() for when we don't have an SSL *
ok jsing@ after us both being prodded by bluhm@ to make it not terrible