openbsd/src/usr.bin/openssl/req.c, branch OPENBSD_7_9 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2024-04-17T01:24:43+00:00 openssl req: plug obvious leak 2024-04-17T01:24:43+00:00 tb 2024-04-17T01:24:43+00:00 urn:sha1:a3505a3263651d4bca08a628d452a8c6b2ccaf56 CID 492603 Teach openssl req about EdDSA certs 2023-07-02T07:05:14+00:00 tb 2023-07-02T07:05:14+00:00 urn:sha1:b6adfc3781a9955e5e39f5247741ac81125ea6cd After a few things in libcrypto were adjusted, this diff makes issuing certificate requests with Ed25519 work. ok beck Rename struct ${app}_config to plain cfg 2023-03-06T14:32:06+00:00 tb 2023-03-06T14:32:06+00:00 urn:sha1:2ba7dcfcbc2ef5aaeb8eb14f36f83bd57c22bcae All the structs are static and we need to reach into them many times. Having a shorter name is more concise and results in less visual clutter. It also avoids many overlong lines and we will be able to get rid of some unfortunate line wrapping down the road. Discussed with jsing openssl: make all config structs static 2023-03-05T13:12:53+00:00 tb 2023-03-05T13:12:53+00:00 urn:sha1:526ac760d941819bc6d2eefe70bf7c9c5562bc26 These are per-app, so per-file. Most of them already are static, adjust the rest of them. openssl/req: garbage collect a pointless EVP_MD_CTX_init() 2023-03-04T06:25:42+00:00 tb 2023-03-04T06:25:42+00:00 urn:sha1:69faacd992fce32cb8d30f38074d008f457a4de9 Before do_sign_init(), the ctx is always allocated by EVP_MD_CTX_new() aka calloc(). There is no point in doing EVP_MD_CTX_init(), aka bzero(). ok jsing Remove the legacy interactive mode from openssl(1). 2022-11-11T17:07:39+00:00 joshua 2022-11-11T17:07:39+00:00 urn:sha1:273d9e16fc9e481283c2b2302b348e4863e29f28 This removes the legacy interactive mode from openssl(1) since it is rarely used, complicates the code, and has also been removed from OpenSSL in version 3.x.x. ok tb@ jsing@ Use X509_*get0_pubkey() wherever possible to simplify and clean up 2022-02-03T17:44:04+00:00 tb 2022-02-03T17:44:04+00:00 urn:sha1:0e2779e85257ee6b31fddc3a6315fd7b7c63fce0 the code. Also add error checking where possible. ok jsing Convert req.c to compile with opaque EVP_MD_CTX. 2021-12-12T20:42:37+00:00 tb 2021-12-12T20:42:37+00:00 urn:sha1:6e6ff0a0cef93f48fcb1e34e0758a9008e61cf6d ok inoguchi Nuke the asn1-kludge. This was a workaround for CAs with broken PCKS#10 2021-10-23T11:36:44+00:00 tb 2021-10-23T11:36:44+00:00 urn:sha1:f525cb84f0c55c9c6bdb35916db7d304bae09213 encoders many moons ago. OpenSSL removed it in 2015. ok beck jsing Stop setting enc.modified manually. It's no longer needed. 2021-10-22T09:44:30+00:00 tb 2021-10-22T09:44:30+00:00 urn:sha1:cc328d27effc23fc0cbc259c242a23984425d2e2