Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | sync inclusion of <stdlib.h> from libcrypto | tb | 2024-05-25 | 3 | -3/+6 | |
| | ||||||
* | Include <stdint.h> in the bytestring .c files | tb | 2024-05-25 | 3 | -3/+6 | |
| | | | | | | They currently depend on bytestring.h pulling that in. discussed with jsing | |||||
* | Revert previous | tb | 2024-05-25 | 1 | -10/+4 | |
| | | | | It wasn't quite right, but I also think the test is bogus. | |||||
* | asn1time: another use of gmtime was hiding here | tb | 2024-05-25 | 1 | -4/+10 | |
| | ||||||
* | des_local.h: Remove some unused macros | tb | 2024-05-24 | 1 | -20/+1 | |
| | ||||||
* | Remove documentation of DES_enc_{read,write} and DES_rw_mode | tb | 2024-05-24 | 1 | -89/+4 | |
| | | | | ok jsing | |||||
* | Stub out DES_enc_{read,write}(3) | tb | 2024-05-24 | 3 | -321/+14 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The most terrible code in OpenSSL has its roots in libdes, which came before SSLeay. Hello, LHASH. Hello speed app. Hello DES (obviously). There are some diary-style changelog comments dating all the way back to 1990. /* This has some uglies in it but it works - even over sockets. */ Well, kind of: * - This code cannot handle non-blocking sockets. Also: /* >output is a multiple of 8 byes, if len < rnum * >we must be careful. The user must be aware that this * >routine will write more bytes than he asked for. * >The length of the buffer must be correct. * FIXED - Should be ok now 18-9-90 - eay */ Or /* This is really a bad error - very bad * It will stuff-up both ends. */ Or #ifdef _LIBC extern unsigned long time(); extern int write(); #endif I can't even... Delete, delete, delete. ok jsing | |||||
* | Make signature of SSL_COMP_add_compression_method(3) match reality | tb | 2024-05-23 | 1 | -3/+3 | |
| | ||||||
* | x509_v3.c: indent labels | tb | 2024-05-23 | 1 | -4/+4 | |
| | ||||||
* | x509_v3.c: remove an unnecessary else | tb | 2024-05-23 | 1 | -3/+3 | |
| | ||||||
* | x509_v3.c: consistently call STACK_OF(X509_EXTENSIONS) arguments sk | tb | 2024-05-23 | 1 | -12/+12 | |
| | | | | (where it doesn't conflict with a local variable) | |||||
* | x509_v3.c: zap another pointless local variable | tb | 2024-05-23 | 1 | -7/+2 | |
| | ||||||
* | x509_v3.c: add a few empty lines | tb | 2024-05-23 | 1 | -1/+9 | |
| | ||||||
* | X509v3_get_ext_by_NID: make obj const, test & assign | tb | 2024-05-23 | 1 | -4/+4 | |
| | ||||||
* | x509_v3.c: remove a pointless local variable | tb | 2024-05-23 | 1 | -5/+3 | |
| | ||||||
* | x509_v3.c: mechanically replace ex with ext and new_ex with new_ext | tb | 2024-05-23 | 1 | -42/+42 | |
| | ||||||
* | Exercise EVP_chacha20_poly1305() with in-place decryption | tb | 2024-05-22 | 1 | -2/+143 | |
| | | | | | This needs quite a bit of cleanup but let's have some tests rather than none. | |||||
* | Fix in-place decryption for EVP_chacha20_poly1305() | tb | 2024-05-22 | 1 | -3/+3 | |
| | | | | | | | | | | | | | Take the MAC before clobbering the input value on decryption. Fixes hangs during the QUIC handshake with HAProxy using TLS_CHACHA20_POLY1305_SHA256. Found, issue pinpointed, and initial fix tested by Lucas Gabriel Vuotto: Let me take this opportunity to thank the HAProxy team for going out of their way to keep supporting LibreSSL. It's much appreciated. See https://github.com/haproxy/haproxy/issues/2569 tweak/ok jsing | |||||
* | crib better wording from schwarze's EVP_PKEY_get_attr_by_NID(3) | tb | 2024-05-22 | 1 | -5/+4 | |
| | ||||||
* | Fix incorrect X509v3_get_ext_by_NID(3) return values | tb | 2024-05-22 | 1 | -9/+17 | |
| | | | | This error comes from upstream, where it is still wrong. | |||||
* | remove prototypes with no matching function and externs with no var | jsg | 2024-05-21 | 1 | -2/+1 | |
| | | | | partly checked by millert@ | |||||
* | cmac: zero_iv should be const | tb | 2024-05-20 | 1 | -2/+2 | |
| | ||||||
* | unwrap a line | tb | 2024-05-19 | 1 | -3/+2 | |
| | ||||||
* | Add space after commas | tb | 2024-05-19 | 2 | -6/+6 | |
| | ||||||
* | KNF for dh_err and dsa_err | tb | 2024-05-19 | 2 | -63/+59 | |
| | ||||||
* | remove prototypes with no matching function | jsg | 2024-05-19 | 8 | -39/+9 | |
| | | | | feedback and ok tb@ | |||||
* | remove extern with no matching var; ok tb@ | jsg | 2024-05-18 | 1 | -2/+1 | |
| | ||||||
* | remove prototypes with no matching function; ok tb@ | jsg | 2024-05-18 | 3 | -6/+3 | |
| | ||||||
* | asn1_str2tag(): no need for tntmp to be static | tb | 2024-05-17 | 1 | -2/+3 | |
| | ||||||
* | The long primitive function table can be const | tb | 2024-05-17 | 1 | -2/+2 | |
| | ||||||
* | The bignum primitive function table (bignum_pf) can be const | tb | 2024-05-17 | 1 | -2/+2 | |
| | ||||||
* | x509_v3.c: remove superfluous parentheses | tb | 2024-05-16 | 1 | -39/+39 | |
| | | | | No change in the generated assembly | |||||
* | SSL_CTX_set_keylog_callback: copy-paste error _set_ -> _get_ | tb | 2024-05-16 | 1 | -3/+3 | |
| | ||||||
* | Improve X509V3_get0_uids() documentation | tb | 2024-05-15 | 1 | -11/+19 | |
| | | | | | Use less horrcble variable names and make it explicit that both output arguments are allowed to be NULL. | |||||
* | X509_check_akid: zap stray space | tb | 2024-05-15 | 1 | -2/+2 | |
| | ||||||
* | x509_ext.c: remove unnecessary includes | tb | 2024-05-14 | 1 | -5/+1 | |
| | ||||||
* | x509_ext.c: remove lots of extraneous parentheses | tb | 2024-05-14 | 1 | -23/+23 | |
| | | | | No change in the generated assembly | |||||
* | Fix last sentence of CAVEATS which I got the wrong way around | tb | 2024-05-14 | 1 | -4/+3 | |
| | ||||||
* | Be more specific about X509V3_ADD_APPEND and X509V3_ADD_DELETE | tb | 2024-05-12 | 1 | -3/+6 | |
| | ||||||
* | Tweak wording | tb | 2024-05-12 | 1 | -1/+4 | |
| | ||||||
* | Remove a 'built-in' that was left in by accident | tb | 2024-05-12 | 1 | -2/+2 | |
| | ||||||
* | Install X509V3_EXT_get_nid.3 | tb | 2024-05-12 | 1 | -1/+2 | |
| | ||||||
* | Add minimal manpage documenting the misnamed X509V3_EXT_get_nid() | tb | 2024-05-12 | 2 | -2/+92 | |
| | | | | | | This avoids a dangling reference in i2s_ASN1_ENUMERATED_TABLE. To complete this manual, someone will need to document X509V3_EXT_METHOD, but that's for a much more rainy day than today. | |||||
* | Avoid .Xr to no longer public X509_LOOKUP_by_subject(3) | tb | 2024-05-12 | 1 | -7/+4 | |
| | | | | looks good to jmc | |||||
* | Move X509V3_add_standard_extensions out of the way | tb | 2024-05-11 | 1 | -8/+8 | |
| | | | | | | This function is only used by OpenLDAP and it's been a noop since forever. It has no business to be squeezed in between a number of other, quite unrelated functions. It's distracting. | |||||
* | Make two NULL checks more explicit | tb | 2024-05-11 | 1 | -3/+3 | |
| | ||||||
* | Unwrap a line | tb | 2024-05-11 | 1 | -3/+2 | |
| | ||||||
* | Sync DSA_METHOD documentation with reality | tb | 2024-05-11 | 1 | -36/+15 | |
| | | | | | | | It is dubious whether this opaque struct's internals should be documented in the first place. This also has been incomplete since forever. For now zap the stuff that no longer exists and make an attempt at matching KNF a bit more closely. | |||||
* | Remove unused DSA methods | tb | 2024-05-11 | 4 | -53/+21 | |
| | | | | | | | There are no accessors to set them, so this has been involved in a bunch of dead logic ever since we made DSA opaque a few years ago. ok jsing | |||||
* | Remove unused PEM_USER and PEM_CTX | tb | 2024-05-11 | 1 | -50/+1 | |
| | | | | | | | I could not find any use of this in all of OpenSSL's git history since SSLeay 0.8.1b. ok jsing |