openbsd/src/lib/libssl/ssl, branch butholakala A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=butholakala 2014-04-13T15:49:51+00:00 This commit was manufactured by cvs2git to create tag 'butholakala'. 2014-04-13T15:49:51+00:00 cvs2svn admin@example.com 2014-04-13T15:49:51+00:00 urn:sha1:9ef0d5fb5b0acfd35d73a5557198f46525ab1667 Move undocumented internal OPENSSL_DIR interface from libcrypto to libssl, 2014-04-13T15:49:50+00:00 miod 2014-04-13T15:49:50+00:00 urn:sha1:ff237038a541d51619efa5b36fb251c8dc1e9637 so that libssl no longer need to access the non-external headers of libcrypto to build. No library bump, riding upon the recent update. Crank libcrypto minor (addition of BN_consttime_swap and CRYPTO_memcmp) 2014-04-13T15:27:32+00:00 miod 2014-04-13T15:27:32+00:00 urn:sha1:56c513ba3ba3cd7769e215efdcf73445c2f51450 and libssl major (ssl_check_clienthello_tlsext split into two functions) Move build machinery for libcrypto from libssl/crypto to libcrypto, as well 2014-04-11T22:51:54+00:00 miod 2014-04-11T22:51:54+00:00 urn:sha1:4362780bc2f199c11d5612e83851f6fc88139d21 as configuration files; split manpages and .pc files between libcrypto and libssl. No functional change, only there to make engineering easier, and libcrypto sources are still found in libssl/src/crypto at the moment. ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects. oops, typo, spotted by Matthias Scheler 2014-04-10T20:00:27+00:00 deraadt 2014-04-10T20:00:27+00:00 urn:sha1:49e7dc5d936d5bc70fa284968e81a480ea1a49e2 crank major; struct ssl_ctx_st changes; ok tedu 2014-04-10T18:09:25+00:00 deraadt 2014-04-10T18:09:25+00:00 urn:sha1:3823ba8a08df6f999a1c08dfb1da7a4f2c1aed84 Disable Segglemann's RFC520 hearbeat. 2014-04-10T18:09:08+00:00 deraadt 2014-04-10T18:09:08+00:00 urn:sha1:765ba4f5df62ba013c7670d45f13bdd7b2a74707 I am completely blown away that the same IETF that cannot efficiently allocate needed protocol, service numbers, or other such things when they are needed, can so quickly and easily rubber stamp the addition of a 64K Covert Channel in a critical protocol. The organization should look at itself very carefully, find out how this this happened, and everyone who allowed this to happen on their watch should be evicted from the decision making process. IETF, I don't trust you. ok tedu markus disable buf freelists. we'll see what happens next. 2014-04-10T18:03:44+00:00 tedu 2014-04-10T18:03:44+00:00 urn:sha1:dd6008ac7699cfcbe2fef6fb74ae5f6e08393dc4 ok deraadt Switch time_t, ino_t, clock_t, and struct kevent's ident and data 2013-08-13T05:52:16+00:00 guenther 2013-08-13T05:52:16+00:00 urn:sha1:b58995a2731c61572f208c53448da6380346d5fc members to 64bit types. Assign new syscall numbers for (almost all) the syscalls that involve the affected types, including anything with time_t, timeval, itimerval, timespec, rusage, dirent, stat, or kevent arguments. Add a d_off member to struct dirent and replace getdirentries() with getdents(), thus immensely simplifying and accelerating telldir/seekdir. Build perl with -DBIG_TIME. Bump the major on every single base library: the compat bits included here are only good enough to make the transition; the T32 compat option will be burned as soon as we've reached the new world are are happy with the snapshots for all architectures. DANGER: ABI incompatibility. Updating to this kernel requires extra work or you won't be able to login: install a snapshot instead. Much assistance in fixing userland issues from deraadt@ and tedu@ and build assistance from todd@ and otto@ cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt 2013-02-14T15:11:44+00:00 markus 2013-02-14T15:11:44+00:00 urn:sha1:4383d44ca79eba8836d9f92c612c44ba8aeb87bd from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@