openbsd/src/lib/libssl/ssl_cert.c, branch OPENBSD_7_9

Remove GOST and STREEBOG support from libssl.

2024-02-03T15:58:34+00:00

This version of GOST is old and not anywhere close to compliant with modern GOST standards. It is also very intrusive in libssl and makes a mess everywhere. Efforts to entice a suitably minded anyone to care about it have been unsuccessful. At this point it is probably best to remove this, and if someone ever showed up who truly needed a working version, it should be a clean implementation from scratch, and have it use something closer to the typical API in libcrypto so it would integrate less painfully here. This removes it from libssl in preparation for it's removal from libcrypto with a future major bump ok tb@

Hide all public symbols in libssl

2023-07-08T16:40:14+00:00

With the guentherizer 9000 ok tb@

Move verified_chain from SSL to SSL_HANDSHAKE

2023-05-26T13:44:05+00:00

This is a better version of the fix for the missing pointer invalidation but a bit larger, so errata got the minimal fix. tested by jcs ok jsing

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Get rid of SSL_CTX_INTERNAL and SSL_INTERNAL.

2022-10-02T16:36:42+00:00

These are no longer necessary due to SSL_CTX and SSL now being fully opaque. Merge SSL_CTX_INTERNAL back into SSL_CTX and SSL_INTERNAL back into SSL. Prompted by tb@

Unifdef LIBRESSL_HAS_SECURITY_LEVEL and remove some workarounds

2022-07-07T13:04:39+00:00

that are no longer needed now that libcrypto exposes the necessary security-bits API. ok jsing

Call certificate variables cert and certs, rather than x and sk

2022-07-02T19:36:07+00:00

ok tb@

Make ssl_cert_add{0,1}_chain_cert() take ssl/ctx

2022-06-29T21:18:04+00:00

ok beck jsing

ssl_cert_set{0,1}_chain() take ssl/ctx

2022-06-29T21:17:22+00:00

ok beck jsing

Refactor use_certificate_chain_* to take ssl/ctx instead of a cert

2022-06-29T21:12:19+00:00

ok beck jsing