openbsd/src/usr.bin/openssl/openssl.c, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92026-01-02T00:14:24+00:00openssl: list SHA-3 digests in help output2026-01-02T00:14:24+00:00kenjiro2026-01-02T00:14:24+00:00urn:sha1:17255ba650aa0774866aa85ba1d21ef0e5086566
Register sha3-{224,256,384,512} as dgst commands so they appear in
openssl help. Without this, SHA-3 support is easy to miss and looks
unsupported from the command line.
ok tb jsing
openssl speed: remove whirlpool2025-05-25T04:54:41+00:00joshua2025-05-25T04:54:41+00:00urn:sha1:9c476c7a531ca0620e1274e88ba48ca60110fc7a
whirlpool was previously removed from libcrypto, and OPENSSL_NO_WHIRLPOOL
will always be defined. Remove whirlpool support from the openssl speed
command entirely.
ok jsing tb
Merge s_apps.h into apps.h2025-01-02T13:10:03+00:00tb2025-01-02T13:10:03+00:00urn:sha1:615194fc158a5d23d4587eda0dda3c781f62bfad
discussed with jsing
openssl(1) doesn't need 6 .h files: fold progs.h into apps.h2025-01-02T12:31:44+00:00tb2025-01-02T12:31:44+00:00urn:sha1:8d0fcc0d460d9b0c35764534bef3e0d86dc8aab8
discussed with jsing
Remove spkac subcommand2024-07-08T05:59:10+00:00tb2024-07-08T05:59:10+00:00urn:sha1:ac5d44090fb8f3b2c8ebd600d3bdeeb4e242b66c
Google killed efforts to have SPKAC in html5 by zapping it from chrome
a decade ago. This effort doesn't look like it's going anywhere:
https://datatracker.ietf.org/doc/draft-leggett-spkac/
Unfortunately, PHP and Ruby still support NETSCAPE_SPKI, so we can't
kill that code, but I see no real reason we need to support this in our
openssl command. If the need should arise we can write a somewhat less
poor version of this.
ok jsing
Remove GOST and STREEBOG support from libssl.2024-02-03T15:58:34+00:00beck2024-02-03T15:58:34+00:00urn:sha1:20afa90e552d2efed2187dbafc92170a3895e921
This version of GOST is old and not anywhere close to compliant with
modern GOST standards. It is also very intrusive in libssl and
makes a mess everywhere. Efforts to entice a suitably minded anyone
to care about it have been unsuccessful.
At this point it is probably best to remove this, and if someone
ever showed up who truly needed a working version, it should be
a clean implementation from scratch, and have it use something
closer to the typical API in libcrypto so it would integrate less
painfully here.
This removes it from libssl in preparation for it's removal from
libcrypto with a future major bump
ok tb@
remove unused args_st struct2023-06-11T13:02:10+00:00jsg2023-06-11T13:02:10+00:00urn:sha1:ac70859dc201d497443dd39b4e6cdb731fc3398d
ok tb@
Unifdef ZLIB2023-06-11T05:45:20+00:00tb2023-06-11T05:45:20+00:00urn:sha1:70aeb9007c8fa406651fbf1c8baee0f9dcac9fb9
This is very dead code: the openssl app was never compiled with -DZLIB
after January 1, 2015.
Remove the nseq command2023-04-25T16:11:02+00:00tb2023-04-25T16:11:02+00:00urn:sha1:55f6443ac0e7f1a6cb59fa4319d9b78857735d56Clean up openssl(1) command execution.2022-11-11T18:24:32+00:00joshua2022-11-11T18:24:32+00:00urn:sha1:39d8fb2501f7e5c2d22fd9a544ef07f29231f60c
This cleans up the code that handles command execution for openssl(1),
displays the help message when 'openssl help' is executed, and exits
with code 1 when an invalid command is executed, matching the behaviour
of OpenSSL version 1.1+ and above.
ok tb@