openbsd/src/lib/libssl/ssl_err.c, branch OPENBSD_7_9_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE 2025-05-10T05:49:21+00:00 SSL_error_internal: remove a superfluous pair of parens 2025-05-10T05:49:21+00:00 tb 2025-05-10T05:49:21+00:00 urn:sha1:80ed5796ab047c56ff275572e0e17bab3527946e const correct SSL_error_internal() 2025-05-10T05:31:21+00:00 tb 2025-05-10T05:31:21+00:00 urn:sha1:aa69cf38fa78a51f2bec81aaaf721b3798c5e574 Add missing alert errors and error strings 2024-10-09T08:00:29+00:00 tb 2024-10-09T08:00:29+00:00 urn:sha1:5970d14d0f56ef1cf034b25e99a18b9b0d2775cd For every TLS alert there needs a corresponding error with error code having an offset of SSL_AD_REASON_OFFSET (aka 1000), otherwise the error stack fails to set the reason correctly. ok beck Make error 235 resolve to "no application protocol" 2024-09-09T07:40:03+00:00 tb 2024-09-09T07:40:03+00:00 urn:sha1:ff309a8343aabbb4675e666bacf197d8838061b4 We accidentally have two errors 235 since we didn't notice that OpenSSL removed the unused SSL_R_TRIED_TO_USE_UNSUPPORTED_CIPHER and later that becamse SSL_R_NO_APPLICATION_PROTOCOL. Getting an "unsupported cipher" error when fiddling with ALPN is confusing, so fix that. ok jsing Forgot to annotate the TMP UGLY CAST[S] as requested by jsing 2024-07-14T15:56:08+00:00 tb 2024-07-14T15:56:08+00:00 urn:sha1:a32a7fa55c13a4e651ab180cf06c4be53208220f h/t to levitte Make error constants const in libssl 2024-07-13T17:42:13+00:00 tb 2024-07-13T17:42:13+00:00 urn:sha1:530bb0053c81388179678167d41cf2ecca7a6ce7 This could be made cleaner if we expose ERR_load_const_strings(), but for now this hackier version with casts achieves the same and removes the last unprotected modifiable globals in this library. ok jsing ssl_err: KNF tweak 2024-06-24T06:50:07+00:00 tb 2024-06-24T06:50:07+00:00 urn:sha1:a867c0bde57f054ddb1070563c7ade884b7c3c7c ssl_err: fix whitespace 2024-06-24T06:49:45+00:00 tb 2024-06-24T06:49:45+00:00 urn:sha1:b9b98a05bbe02caf56b2ebce2e8f7ac9f1bc7c65 Remove GOST and STREEBOG support from libssl. 2024-02-03T15:58:34+00:00 beck 2024-02-03T15:58:34+00:00 urn:sha1:20afa90e552d2efed2187dbafc92170a3895e921 This version of GOST is old and not anywhere close to compliant with modern GOST standards. It is also very intrusive in libssl and makes a mess everywhere. Efforts to entice a suitably minded anyone to care about it have been unsuccessful. At this point it is probably best to remove this, and if someone ever showed up who truly needed a working version, it should be a clean implementation from scratch, and have it use something closer to the typical API in libcrypto so it would integrate less painfully here. This removes it from libssl in preparation for it's removal from libcrypto with a future major bump ok tb@ Hide all public symbols in libssl 2023-07-08T16:40:14+00:00 beck 2023-07-08T16:40:14+00:00 urn:sha1:fce75ad52c1586db1ba9f44c6be85668e7d4a110 With the guentherizer 9000 ok tb@