summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* document "openssl ec";jmc2010-10-081-3/+209
|
* OpenSSL grows another undocumented header, apparently needed on armishdjm2010-10-071-1/+2
|
* More OpenSSL fixes:djm2010-10-067-26/+30
| | | | | | | | | - Update local engines for the EVP API change (len u_int => size_t) - Use hw_cryptodev.c instead of eng_cryptodev.c - Make x86_64-xlate.pl always write to the output file and not stdout, fixing "make -j" builds (spotted by naddy@) ok naddy@
* Retire Skipjackmikeb2010-10-064-4/+0
| | | | | | | | | | | There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts.
* catch up to openssl-1.0.0a; there's some new commands, as yet undocumented,jmc2010-10-061-214/+650
| | | | but i'll get to those shortly...
* Our make already uses sh -e when executing commands.naddy2010-10-041-7/+7
| | | | Revert the "set -e" additions and kill unneeded subshells. ok djm@
* don't use non-standard CFLAGS; ok miod@, deraadt@naddy2010-10-031-2/+2
|
* DES_LONG should be u_int on all platforms, it was spuriouslydjm2010-10-031-1/+1
| | | | u_long on i386. suggested by deraadt@ and kettenis@
* percolate up errors from perl asm scripts, correctly enable SHA-256 asm ondjm2010-10-021-9/+9
| | | | amd64
* fix -Wall due to API changedjm2010-10-012-6/+6
|
* update to openssl-1.0.0adjm2010-10-011-20/+8
|
* update supporting files, crank library majorsdjm2010-10-0118-274/+621
|
* add missing; yay for cvs!djm2010-10-015-0/+607
|
* resolve conflicts, fix local changesdjm2010-10-011649-188904/+70184
|
* This commit was generated by cvs2git to track changes on a CVS vendordjm2010-10-01189-4739/+34138
|\ | | | | branch.
| * import OpenSSL-1.0.0adjm2010-10-01569-17816/+61097
| |
| * This commit was manufactured by cvs2git to create branch 'unlabeled-1.1.1'.cvs2svn2010-07-011-0/+992
| |
* | This commit was generated by cvs2git to track changes on a CVS vendordjm2010-10-01121-3204/+4684
|\ \ | | | | | | branch.
| * | import OpenSSL-1.0.0adjm2010-10-01798-31734/+48478
| | |
* | | This commit was generated by cvs2git to track changes on a CVS vendordjm2010-10-01339-5051/+49844
|\ \ \ | | | | | | | | branch.
| * | | import OpenSSL-1.0.0adjm2010-10-01373-6688/+55495
| | | |
| * | | This commit was manufactured by cvs2git to create branch 'OPENSSL'.cvs2svn2010-07-011-0/+992
| | | |
* | | | Make gcvt() better match printf("%g") behavior, it now passes regress.millert2010-09-251-11/+23
| | | | | | | | | | | | | | | | OK deraadt@
* | | | Add timingsafe_bcmp(3) to libc, mention that it's already in thematthew2010-09-243-5/+62
| | | | | | | | | | | | | | | | | | | | | | | | kernel in kern(9), and remove it from OpenSSH. ok deraadt@, djm@
* | | | add a GLOB_KEEPSTAT option that retains a copy of the struct statdjm2010-09-243-10/+86
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | information that is looked up while matching glob(3)s Keeping this information around can make a big difference when fetching it is expensive, e.g. in sftp which uses GLOB_ALTDIRFUNC feedback millert@ jmc@ "get it in before the libc crank" deraadt@
* | | | Implement if_freenameindex() as a real function as required by posix.claudio2010-09-241-1/+7
| | | | | | | | | | | | | | | | OK deraadt@, millert@
* | | | more wacky macro fixing;jmc2010-09-191-37/+37
| | | |
* | | | Add cvs tag, author name and yearmillert2010-09-181-1/+5
| | | |
* | | | Test default precision when ndigit is negative.millert2010-09-181-0/+6
| | | |
* | | | Add more test vectors.millert2010-09-181-6/+60
| | | |
* | | | Add gcvt() regress with test vectors derived from perl regress.millert2010-09-172-0/+61
| | | | | | | | | | | | | | | | | | | | Does not currently pass, which is why perl can't use it to format doubles.
* | | | observe the following spelling:jmc2010-09-102-9/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - wide character (noun) - wide-character (adjective) this is the "fix of least resistance", and appears to be in line with posix style; a tiny fix still needed for curses, but i'll mail that upstream;
* | | | Use mandoc instead of groff to build PostScript manuals; note thatschwarze2010-09-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | these are not built by default, but only built when MANPS is set. kristaps@ and jmc@ agree with the idea, and the patch doesn't bother deraadt@ at all
* | | | Oracle has re-licensed sunrpc under a three-clause BSD license.millert2010-09-012-54/+58
| | | | | | | | | | | | | | | | Update our sources appropriately. OK deraadt@ jsg@
* | | | Add setenv/putenv regressmillert2010-08-233-2/+132
| | | |
* | | | Check for duplicate variables in the environment when setting a valuemillert2010-08-232-11/+24
| | | | | | | | | | | | | | | | via setenv() or putenv(). OK miod@
* | | | Sync hcreate(3) with NetBSD, adding some caveats.ray2010-07-281-12/+67
| | | | | | | | | | | | | | | | OK jmc
* | | | echo behaves differently in sh and csh, only handling C-style escapesguenther2010-07-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | in the former, so switch an example that needs them to use printf instead. From bcr at freebsd.org. ok halex@
* | | | getopt_long.c replaced getopt.c 6+ years ago; we can retireblambert2010-07-221-7/+1
| | | | | | | | | | | | | | | | | | | | | | | | the REPLACE_GETOPT macro, at long last ok millert@
* | | | Document new unsetenv() error returns.naddy2010-07-061-2/+8
| | | | | | | | | | | | | | | | From Nicolas Legrand <nlegrand@ethelred.fr>; ok jmc@
* | | | Fix the naming of interfaces and variables for rdomains and rtablesguenther2010-07-032-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and make it possible to bind sockets (including listening sockets!) to rtables and not just rdomains. This changes the name of the system calls, socket option, and ioctl. After building with this you should remove the files /usr/share/man/cat2/[gs]etrdomain.0. Since this removes the existing [gs]etrdomain() system calls, the libc major is bumped. Written by claudio@, criticized^Wcritiqued by me
* | | | getpeereid() can now be a library routine using getsockopt() withderaadt2010-07-013-3/+158
| | | | | | | | | | | | | | | | | | | | | | | | | | | | SOL_SOCKET and SO_PEERCRED, only issue being that it cannot return EFAULT for a page fault. The kernel code will soon be put into compat, and then in 10 years or so tedu will delete it. ok guenther millert
* | | | oops. Missed this from my aes-ni commit.thib2010-07-011-3/+4
| | | |
* | | | AES-NI engine support for OpenSSL.thib2010-07-0120-6/+3322
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is code mostly picked up from upstream OpenSSL, or to be more exact a diff from David Woodhouse <dwmw2 at infradead dot org>. Remember to make includes before doing a build! no objections from djm@ OK deraadt@, reyk@ (AES is about 4.25x faster on his x201 now)
* | | | use a union to align the dns answer buffer until gcc4 is fixedderaadt2010-06-291-5/+8
| | | |
* | | | Correct the target nameguenther2010-06-291-2/+2
| | | |
* | | | use a union to align the dns answer buffer until gcc4 is fixedderaadt2010-06-291-5/+8
| | | |
* | | | Make unsetenv(NULL) and unsetenv("") give EINVAL, per POSIX. ok deraadt@naddy2010-06-291-1/+5
| | | |
* | | | VIA xcrypt for amd64, simpler version of a diff from deraadtjsg2010-06-292-12/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | with suggestions from miod. The codepath doesn't seem to be called yet, this will be investigated later. looks good miod@, ok deraadt@
* | | | Add the extendedKeyUsage flags serverAuth and clientAuth. Newer Windowsreyk2010-06-261-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version require these flags to accept the X.509 certificates from the gateway or client; I just add both flags to make it work in both cases and verified it with win7, for example when authenticating against iked. go ahead beck@