openbsd/src/usr.bin/openssl/s_cb.c, branch OPENBSD_7_9_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE 2025-01-02T13:10:03+00:00 Merge s_apps.h into apps.h 2025-01-02T13:10:03+00:00 tb 2025-01-02T13:10:03+00:00 urn:sha1:615194fc158a5d23d4587eda0dda3c781f62bfad discussed with jsing Drop policy printing from openssl 2023-04-14T15:27:13+00:00 tb 2023-04-14T15:27:13+00:00 urn:sha1:c10c85651e3dc8e653705dc1c2dd2683fe0f6c66 Nothing really uses the policy tree. It's desgined with built-in DoS capabilities directly from the RFC. It will be removed from the attack surface and replaced with something equivalent that doesn't grow exponentially with the depth. This removes the only reason the policy tree itself ever leaked out of the library. ok jsing Check return values in ssl_print_tmp_key() 2022-08-31T07:12:30+00:00 tb 2022-08-31T07:12:30+00:00 urn:sha1:e9b277782866239b8ebf2ee6fd7350e695cca639 Use EVP_PKEY_get0_EC_KEY() instead of the get1 version to avoid an EVP_PKEY_free(). Check return values: if either EVP_PKEY_get0_EC_KEY() or EC_KEY_get0_group() fail, a NULL dereference occurs. CID 43289 ok jsing Check HMAC() return value to avoid a later use of uninitialized 2022-08-30T20:40:14+00:00 tb 2022-08-30T20:40:14+00:00 urn:sha1:a2701e1610925369192d4d0f4f871abf3115d2d0 CID 25421 Unindent and unwrap lines. Pull up a NULL check. No functional change. 2022-02-03T18:40:34+00:00 tb 2022-02-03T18:40:34+00:00 urn:sha1:01d04794fbaa5d9025ecc2f3c46bc6d260879e8c Remove commented variable declarations 2022-02-03T18:35:24+00:00 tb 2022-02-03T18:35:24+00:00 urn:sha1:abad11035c3183301acbcdfeaf956314f575e2df Remove some stale comments. 2022-02-03T17:42:54+00:00 tb 2022-02-03T17:42:54+00:00 urn:sha1:0c0e949baa03c83ba65d3a71244cf0155f517a0d ok jsing Show DTLS1.2 message with openssl(1) s_server and s_client 2021-04-02T10:19:19+00:00 inoguchi 2021-04-02T10:19:19+00:00 urn:sha1:c245727825704732bf5038539dea477bf4238666 ok jsing@ tb@ Display TLSv1.3 extension type with openssl(1) -tlsextdebug 2020-04-26T02:09:21+00:00 inoguchi 2020-04-26T02:09:21+00:00 urn:sha1:8f2c02832ec6fff2ca65f31528d1fdb1deb27f75 Add TLSv1.3 extension type, and sort by the definition order in tls1.h. This helps that openssl(1) s_server and s_client with -tlsextdebug displays the TLS extension type instead of "unknown". ok beck@ jsing@ tb@ add a couple of XXX for future cleanup 2020-01-25T05:29:10+00:00 tb 2020-01-25T05:29:10+00:00 urn:sha1:a77de724fe06e092e028921c9a8426256f5b820f