openbsd/src/lib, branch libressl-v3.0.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.0.0 2019-07-29T23:14:06+00:00 correct mispellings of EACCES; from Kris Katterjohn 2019-07-29T23:14:06+00:00 deraadt 2019-07-29T23:14:06+00:00 urn:sha1:4da1936865acf10342b9a0523ce755f5bf2e266c explain the acronym "CRT"; suggested by tb@ 2019-07-13T17:26:38+00:00 schwarze 2019-07-13T17:26:38+00:00 urn:sha1:e9ef26d0b799866960d5d8ea8c87d53cea6b50ff Using pthread_atfork instead of __register_atfork with uClibc on noMMU 2019-07-11T10:37:28+00:00 inoguchi 2019-07-11T10:37:28+00:00 urn:sha1:c513fcc21523226bcda18cc239488f0508ef6e37 uClibc on noMMU doesn't provide __register_atfork(). Reported by redbirdtek on Github issue. https://github.com/libressl-portable/portable/issues/538 ok bcook@ Group tls_{handshake,read,write,close}() return values documentation. 2019-07-09T17:58:33+00:00 jsing 2019-07-09T17:58:33+00:00 urn:sha1:ee433ef57027dc35958a9c56ad878f679d66886b Move the documentation for tls_error() down so that both the special return values for tls_{handshake,read,write,close}() directly follow the standard return values for the same functions. Prompted by deraadt@. ok deraadt@ schwarze@ Clean up pvkfmt.c 2019-07-08T11:56:18+00:00 inoguchi 2019-07-08T11:56:18+00:00 urn:sha1:38918e2b1105203e3a43e4c44a53bf432952771c - Replace EVP_CIPHER_CTX_init with EVP_CIPHER_CTX_new and handle return value - Replace EVP_CIPHER_CTX_cleanup with EVP_CIPHER_CTX_free - Change two 'return -1;' to 'goto err;' for avoiding leak - Remove the case if enclevel == 0 - Change enclevel checking to make more consistent - Change all goto label to 'err' and insert space before goto label ok and advise from tb@ Fix pvk format processing in libcrypto 2019-07-07T10:52:56+00:00 inoguchi 2019-07-07T10:52:56+00:00 urn:sha1:b7ed3b2ab5936f64572047d1bcd708bbdeeb5a59 - Return the valid pointer in i2b_PVK() - Use EVP_Decrypt* instead of EVP_Encrypt* - Fix error handling after BIO_write() in i2b_PVK_bio() ok tb@ improve verb-tense for explaining the calling convention of __ 2019-07-05T12:55:36+00:00 deraadt 2019-07-05T12:55:36+00:00 urn:sha1:4bf793e9505c261426aef9e5558f1bd86f66f22a ok guenther jmc The last consumer of pre-posix realpath behaviour has stopped 2019-07-05T05:04:26+00:00 deraadt 2019-07-05T05:04:26+00:00 urn:sha1:cf5049b76fb3fdb0cbabcd4bf2d38f55144d1ee2 requiring it (sftp-server). Remove the /exists///// behaviour from here. The /nonexistant behaviour remains in the kernel and needs to be shot next. There may be ports fallout, but we doubt it. ok beck djm snprintf/vsnprintf return < 0 on error, rather than -1. 2019-07-03T03:24:04+00:00 deraadt 2019-07-03T03:24:04+00:00 urn:sha1:bdd1c0627cbfd4015db19da84ab1a24f50d9f6dc Add cpuid support for arm64 so that we can recognize which 2019-07-02T19:31:28+00:00 patrick 2019-07-02T19:31:28+00:00 urn:sha1:154e31023af7e0be306e0968992087fe0a23f907 hardware crypto features are available. "no objections" kettenis@