openbsd/src/lib/libssl/ssl_packet.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2018-11-08T22:28:52+00:00 Clean up and simplify the handshake transcript code. 2018-11-08T22:28:52+00:00 jsing 2018-11-08T22:28:52+00:00 urn:sha1:d1a7f20049bf29c61782397cffb632339b12ba54 This provides a cleaner, simpler and more readable API, with code that uses a BUF_MEM instead of a BIO. ok beck@ ("hurry up") and tb@. Make more of libssl's record layer state internal. 2018-10-24T18:04:50+00:00 jsing 2018-10-24T18:04:50+00:00 urn:sha1:c35a1141f368eb454f165541c3dfbe6b6e48b91d In January 2017, we changed large amounts of libssl's data structures to be non-visible/internal, however intentionally left things that the software ecosystem was needing to use. The four or so applications that reached into libssl for record layer related state now implement alternative code. As such, make these data structures internal. ok tb@ Add missing $OpenBSD$ tags. 2017-05-06T16:18:36+00:00 jsing 2017-05-06T16:18:36+00:00 urn:sha1:0de4d35571b79288296f8df357dedc38c201ad7e Correctly convert an SSLv2 challenge into an SSLv3/TLS client random by 2017-03-05T16:09:44+00:00 jsing 2017-03-05T16:09:44+00:00 urn:sha1:87117ac52c1642f68394967df52a4cac4effcfd4 truncating or left zero padding. ok beck@ inoguchi@ sthen@ Change SSLerror() back to taking two args, with the first one being an SSL *. 2017-02-07T02:08:38+00:00 beck 2017-02-07T02:08:38+00:00 urn:sha1:9a5920738bea15430db1fdd138e67d9bbc3a95d3 Make a table of "function codes" which maps the internal state of the SSL * to something like a useful name so in a typical error in the connection you know in what sort of place in the handshake things happened. (instead of by arcane function name). Add SSLerrorx() for when we don't have an SSL * ok jsing@ after us both being prodded by bluhm@ to make it not terrible Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the ugly 2017-01-26T12:16:13+00:00 beck 2017-01-26T12:16:13+00:00 urn:sha1:a141ed2bc17672028f4c648479f1cc3c598be1e9 line wraps that resulted Send the error function codes to rot in the depths of hell where they belong 2017-01-26T10:40:21+00:00 beck 2017-01-26T10:40:21+00:00 urn:sha1:a4abf558fd44464a5a48bfeb5393b01002f66c5e We leave a single funciton code (0xFFF) to say "SSL_internal" so the public API will not break, and we replace all internal use of the two argument SSL_err() with the internal only SSL_error() that only takes a reason code. ok jsing@ Merge the client/server version negotiation into the existing (currently 2017-01-26T05:31:25+00:00 jsing 2017-01-26T05:31:25+00:00 urn:sha1:7ba6d48018c99e9b4a6d3f810b4c03e4365bdebd fixed version) client/server code. ok beck@