openbsd/src/lib/libssl, branch libressl-v3.7.0

Add a small blurb on @SECLEVEL=n

2022-12-11T20:53:27+00:00

Make header guards of internal headers consistent

2022-11-26T17:23:18+00:00

Not all of them, only those that didn't leak into a public header... Yes.

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Reverse arguments in CBS_dup()

2022-11-23T07:31:12+00:00

We want to copy the tls_content_cbs() into the cbs, not the other way around CID 377013 ok jsing

Bump libssl minor to match libcrypto

2022-11-13T14:06:58+00:00

Convert the legacy TLS stack to tls_content.

2022-11-11T17:15:27+00:00

This converts the legacy TLS stack to tls_content - records are now opened into a tls_content structure, rather than being written back into the same buffer that the sealed record was read into. This will allow for further clean up of the legacy record layer. ok tb@

Symbols.list: Drop comments and sort.

2022-11-11T13:08:29+00:00

While grouping the API by its purpose is nice, it doesn't help much if >90% is "general API". ok jsing

Add support for symbol hiding disabled by default.

2022-11-11T11:25:18+00:00

Fully explained in libcrypto/README. TL;DR make sure libcrypto and libssl's function calls internally and to each other are via symbol names that won't get overridden by linking other libraries. Mostly work by guenther@, which will currently be gated behind a build setting NAMESPACE=yes. once we convert all the symbols to this method we will do a major bump and pick up the changes. ok tb@ jsing@

Use tls_buffer for alert and handshake fragments in the legacy stack.

2022-11-10T18:06:37+00:00

This avoids a bunch of pointer munging and a handrolled memmove. ok tb@

Sync CBS_strdup() documentation update from libcrypto.

2022-11-09T23:14:51+00:00