openbsd/src/lib/libssl/d1_srtp.c, branch OPENBSD_6_8_BASE

Consistently spell 'unsigned' as 'unsigned int', as style(9) seems

2020-03-16T15:25:14+00:00

to prefer that. No binary change except in d1_srtp.c where the generated assembly differs only in line numbers (due to a wrapped long line) and in s3_cbc.c where there is no change in the generated assembly. ok inoguchi jsing

Avoid leak: free existing SRTP connection profiles before

2018-11-09T04:35:09+00:00

setting it. From Ben L .

Rewrite SRTP extension using CBB/CBS and the new extension framework.

2017-08-27T02:58:04+00:00

input + ok beck@, jsing@

Change SSLerror() back to taking two args, with the first one being an SSL *.

2017-02-07T02:08:38+00:00

Make a table of "function codes" which maps the internal state of the SSL * to something like a useful name so in a typical error in the connection you know in what sort of place in the handshake things happened. (instead of by arcane function name). Add SSLerrorx() for when we don't have an SSL * ok jsing@ after us both being prodded by bluhm@ to make it not terrible

Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the ugly

2017-01-26T12:16:13+00:00

line wraps that resulted

Send the error function codes to rot in the depths of hell where they belong

2017-01-26T10:40:21+00:00

We leave a single funciton code (0xFFF) to say "SSL_internal" so the public API will not break, and we replace all internal use of the two argument SSL_err() with the internal only SSL_error() that only takes a reason code. ok jsing@

sk_free() checks for NULL so do not bother doing it from the callers.

2017-01-24T15:04:12+00:00

Move a large part of ssl_st into internal, so we can see what squeals.

2017-01-23T06:45:30+00:00

ok jsing@

Move most of the fields in SSL_CTX to internal - the ones that remain are

2017-01-23T05:13:02+00:00

known to be in use. ok beck@

Fix SRTP parsing.

2015-07-31T00:35:06+00:00

jsing@ noticed that during the CBS conversion, an extra CBS_len comparison was introduced. It should be 0 after extracting MKI. ok jsing@ bcook@ deraadt@