summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | enviroment -> environmentjufi2002-07-073-5/+5
| | |
* | | regress for getaddrinfo/getnameinfoitojun2002-07-055-2/+397
| | |
* | | correct handling of EOF on both tty input and network. for example,vincent2002-07-041-11/+15
| | | | | | | | | | | | | | | | | | | | | this allows stuff like nc -l 10101 < /dev/null to have nc exit automatically when it gets EOF from the network. ok ericj@
* | | more type pedantitojun2002-07-011-2/+2
| | |
* | | lint clean (and don't mixup signed/unsigned). from martin husemannitojun2002-07-011-12/+12
| | |
* | | define SUN_LEN if it is not already for portability.vincent2002-07-011-1/+6
| | | | | | | | | | | | millert made the same suggestion, so i guess it's ok ;)
* | | use SUN_LEN to calculate AF_UNIX sockaddr's length. + some stylevincent2002-07-011-22/+18
| | | | | | | | | | | | ok ericj@
* | | make more pedantic check on strtoul. from deraadt, sync w/kameitojun2002-07-011-8/+12
| | |
* | | correct port range check. from deraadt. sync w/kame. bind-bugs have ↵itojun2002-06-291-2/+3
| | | | | | | | | | | | already notified.
* | | Replace strtou?q() with the more standard strtou?ll(), using weakmillert2002-06-295-42/+108
| | | | | | | | | | | | aliases to fake up strtou?q(). espie@ OK.
* | | %d -> %u. mostly in #ifdef DEBUG.itojun2002-06-275-34/+34
| | |
* | | %d/%u mixup (in #ifdef DEBUG)itojun2002-06-272-5/+5
| | |
* | | ntohs() returns unsigned valueitojun2002-06-271-2/+2
| | |
* | | correct bad practice in the code - it uses two changing variablesitojun2002-06-262-26/+22
| | | | | | | | | | | | | | | | | | | | | to manage buffer (buf and buflen). we eliminate buflen and use fixed point (ep) as the ending pointer. this fix is NOT critical.
* | | avoid remote buffer overrun on hostbuf[]. From: Joost Pol <joost@pine.nl>itojun2002-06-262-43/+33
| | | | | | | | | | | | | | | | | | | | | | | | correct bad practice in the code - it uses two changing variables to manage buffer (buf and buflen). we eliminate buflen and use fixed point (ep) as the ending pointer. this fix is critical.
* | | remove support for RC4 via /dev/crypto, suggested by Niels; ok provos@markus2002-06-202-36/+0
| | |
* | | do not syslog from libraries!deraadt2002-06-192-20/+2
| | |
* | | KNF, -Wall, and other cleanups. still does not failover 100% correctlyderaadt2002-06-192-44/+104
| | | | | | | | | | | | for operations when /dev/crypto is missing, for instance in chroot
* | | stupid stupid bug ja ja ja jaderaadt2002-06-192-2/+2
| | |
* | | unbreak sshd with privsep: open /dev/crypto, keep fd, and callmarkus2002-06-182-10/+40
| | | | | | | | | | | | CRIOGET per EVP_Init(); ok niklas@, miod@
* | | per-evp state is now sizeof(struct dev_crypto_state) instead sizeof(struct ↵markus2002-06-182-12/+12
| | | | | | | | | | | | session_op)
* | | keep a FD per EVP_init, use a global FD for all asym operations;markus2002-06-132-166/+170
| | | | | | | | | | | | ok beck@
* | | KNFderaadt2002-06-112-38/+32
| | |
* | | add "dsa_dsa_mod_exp" - This mimics the software dsa_mod_exp funtionbeck2002-06-112-6/+74
| | | | | | | | | | | | | | | | | | | | | using two mod_exp operations - otherwise we use BN_mod_exp2 entirely in software, which makes dsa verifications glacially slow while signatures, (which use mod_exp) are fast. This lets cards that can only do bn_mod_exp decently offload most of dsa.
* | | Make DSA work now... at least for things that can do bn_mod_exp.beck2002-06-112-14/+8
| | |
* | | Make asymmetric crypto work in userlandbeck2002-06-112-72/+228
| | | | | | | | | | | | | | | this will only be used if you both have a card that supports it with a working driver and you set sysctl kern.userasymcrypto=1
* | | spelling; moritz@jodeit.orgderaadt2002-06-091-2/+4
| | |
* | | Pass the right arguments for RSA, DSA, and modexp operations. Fix theangelos2002-06-092-60/+74
| | | | | | | | | | | | translation between the crypto framework's format and the BN structure.
* | | After much horrible and painful slogging through asn1 code,beck2002-06-082-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | this fixes the source of connection problems with ssl/tls connections between sparc64 and other things. The punchline, we just found a bug in floating point emulation on sparc64 when this script produces off-by-one output on sparc64. This fix is annoyingly easy for the effort expended.
* | | do not propose IDEA cipher on SSL connection. tested by beckitojun2002-06-075-0/+18
| | | | | | | | | | | | noticed by Sverre Froyen <sverre@viewmark.com>
* | | typo - I am a luser and a moron.beck2002-06-071-2/+2
| | |
* | | Merge OpenSSL 0.9.7-stable-20020605,beck2002-06-07100-5004/+1076
| | | | | | | | | | | | correctly autogenerate obj_mac.h
* | | sig_atomic_t type must also be volatilederaadt2002-06-032-2/+2
| | |
* | | we do not need this to be Makefile.bsd-wrapperderaadt2002-06-012-979/+976
| | |
* | | Avoid spinning poll, and while we're at it more closely reproduce thehugh2002-05-301-3/+9
| | | | | | | | | | | | original netcat's timeout behaviour. Theo says go.
* | | more snprintfderaadt2002-05-291-2/+2
| | |
* | | unsigned vs unsigned intderaadt2002-05-271-3/+3
| | |
* | | pid_t cleanupderaadt2002-05-261-3/+3
| | |
* | | do not assume scripts are executablederaadt2002-05-2512-12/+12
| | |
* | | try to use strlcpy and snprintf more; ok variousderaadt2002-05-249-38/+43
| | |
* | | more strlcpy and snprintfderaadt2002-05-223-47/+41
| | |
* | | Merge openssl-0.9.7-stable-SNAP-20020519beck2002-05-2136-235/+210
| | |
* | | do not reverse-lookup scoped ipv6 address - it is meaningless as there'sitojun2002-05-181-1/+7
| | | | | | | | | | | | no way to pass scope id. sync w/kame
* | | clean MLINK treederaadt2002-05-161-249/+338
| | |
* | | add aes/bf/cast; ok deraadt@markus2002-05-162-4/+100
| | |
* | | use hw_cryptodevderaadt2002-05-162-48/+48
| | |
* | | missed a few morederaadt2002-05-161-59/+161
| | |
* | | handle some more pods (there are still missing ones I bet)deraadt2002-05-161-34/+80
| | |
* | | Damn my rush to make it build again.beck2002-05-152-5684/+0
| | |
* | | order betterderaadt2002-05-151-3/+2
| | |