summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Mention EVP_PKEY_encrypt_old(3) and EVP_PKEY_decrypt_old(3) becauseschwarze2023-09-101-7/+87
| | | | | | | some software still calls them. Put them here because despite the function and header names, they are really specific to RSA. Besides, this avoids a distraction in the more important EVP_PKEY_encrypt(3) and EVP_PKEY_decrypt(3) manual pages.
* Briefly mention SSLeay_add_all_algorithms(3) becauseschwarze2023-09-101-6/+18
| | | | | | | | surprisingly large numbers of software packages still call it. Mark the unused aliases OPENSSL_add_all_algorithms_conf(3), OPENSSL_add_all_algorithms_noconf(3), SSLeay_add_all_ciphers(3), and SSLeay_add_all_digests(3) as intentionally undicumented.
* Document the deprecated functions EVP_set_pw_prompt(3) andschwarze2023-09-101-71/+86
| | | | | | | | | | | | | | | | EVP_get_pw_prompt(3) because some software out there still uses them. While here, also improve the description of EVP_read_pw_string(3). Delete documentation for des_read_pw(3) and des_read_pw_string(3). They couldn't be used in LibreSSL since at least 2016 because they were never in Symbols.list, and in 2022, jsing@ also removed them from <openssl/ui_compat.h>. Delete the misleading AUTHORS section. Richard Levitte did not write the original implementation of these functions, and the compatibility wrapper around the UI_process(3) API that he did write is not notable enough to be mentioned so prominently.
* Mark EVP_ENCODE_LENGTH() and EVP_DECODE_LENGTH() as intentionallyschwarze2023-09-101-2/+6
| | | | | | | undocumented because they do not describe properties of the Base64 encoding but add arbitrary constant lengths, hence being implementation details of BIO_f_base64(3). Besides, they are practically unused outside evp/bio_b64.c.
* fix Xr punctuationjsg2023-09-101-3/+3
|
* spellingjsg2023-09-102-6/+6
|
* new manual page EVP_PKEY_CTX_get_operation(3),schwarze2023-09-094-5/+127
| | | | also documenting EVP_PKEY_CTX_get0_pkey(3)
* document EVP_PKEY_CTX_get_data(3) and EVP_PKEY_CTX_set_data(3)schwarze2023-09-091-6/+58
|
* Document EVP_PKEY_CTX_set0_keygen_info(3).schwarze2023-09-091-10/+59
| | | | | | While here, also add the missing RETURN VALUES entries for EVP_PKEY_gen_cb(3), EVP_PKEY_CTX_get_cb(3), and EVP_PKEY_CTX_get_keygen_info(3).
* Document EVP_PKEY_CTX_get0_peerkey(3).schwarze2023-09-091-19/+97
| | | | While here, also make the descriptions of the other functions more precise.
* Print waring message when not allocated memory in putleakinfo().asou2023-09-091-2/+20
| | | | ok otto.
* Mark EVP_PKEY_save_parameters() as intentionally undocumentedschwarze2023-09-081-2/+6
| | | | | | because nothing uses it according to codesearch.debian.net and it only affects X509_PUBKEY_set(3) for DSA and GOST2001 keys, resulting in incomplete output without the public key parameters.
* Below RETURN VALUES,schwarze2023-09-071-10/+12
| | | | | | | | | | | | * mention that EVP_MD_CTX_md(3) also returns NULL if no message digest is configured yet; and * omplete the list of functions returning const EVP_MD *, also making the wording more precise. Delete EVP_MAX_MD_SIZE from the NAME, SYNOPSIS, and HISTORY sections because we do not usually document preprocessor macro constants in this way. There is nothing special about this constant justifying an exception.
* add the missing entries for EVP_MD_CTX_pkey_ctx(3) and EVP_MD_CTX_md_data(3)schwarze2023-09-071-1/+7
| | | | to the RETURN VALUES section
* document EVP_MD_nid(3) and EVP_MD_name(3)schwarze2023-09-071-4/+41
|
* improve the descriptions of most functionsschwarze2023-09-071-30/+45
|
* Split two new manual pages EVP_MD_nid(3) and EVP_MD_CTX_ctrl(3)schwarze2023-09-075-315/+501
| | | | out of the large EVP_DigestInit(3). No text change.
* Mark EVP_CIPHER_set_asn1_iv() and EVP_CIPHER_get_asn1_iv() as intentionallyschwarze2023-09-061-2/+7
| | | | | | | | undocumented because they are unused outside libcrypto according to codesearch.debian.net and should probably not be public: they seem hardly useful even for implementing custom EVP_CIPHER algorithms. tb@ came to similar conclusions regarding these two functions.
* Initialize afi & safi to zerojob2023-09-061-4/+5
| | | | OK tb@
* Avoid use-of-uninitialized in i2r_IPAddrBlocks()tb2023-09-061-1/+8
| | | | | | | Reported by Viktor Szakats in https://github.com/libressl/portable/issues/910 ok job
* Correct the RETURN VALUES of OBJ_add_object(3).schwarze2023-09-061-6/+33
| | | | | | | | The text was misleading before and after the improvement in obj_dat.c rev. 1.61. The way i'm fixing the documentation here takes that improvement into account. Also add a CAVEATS section about adding incomplete objects.
* add a BUGS section warning about the creation of incomplete objectsschwarze2023-09-051-3/+22
|
* Improve error handling in OBJ_add_object()tb2023-09-051-13/+7
| | | | | | | | | | | | | | | | | There is no need for a helper function to obfuscate lh_ADDED_OBJ_new(). Just call the real thing directly. Adding an object with a NID of NID_undef basically amounts to disabling a built-in OID. It does so in an incoherent fashion and the caller can't easily tell success from failure of the operation. Arguably the result is a corrupted objects table. Let's not allow adding such an object in an attempt at keeping things slightly more coherent. Issue noted and initial diff by schwarze while writing documentation ok schwarze
* document EVP_CIPHER_name(3)schwarze2023-09-051-2/+32
|
* add the missing .Dv macros to the list of flagsschwarze2023-09-051-13/+13
|
* improve the descriptions of almost all flags,schwarze2023-09-051-40/+101
| | | | in particular saying which API functions each flag affects
* Partial rewrite:schwarze2023-09-051-140/+231
| | | | | | | | | | | | | | | | | * Integrate the leftovers of the former NOTES section into the main text, resulting in a more logical order of information. * Make many descriptions more precise and tweak many wordings. For example, the description of OBJ_cmp(3) was totally misleading. Add a CAVEATS section explaining the scary ownership contracts of the functions returning ASN1_OBJECT pointers. Move the discussion of NID_undef to the BUGS section because the statement "objects which are not in the table have the NID value NID_undef" was misleading in more than one way. Considering that an API as fundamental as this one contains such a gigantic amount of quirks and traps and gaps makes me shudder.
* Make wp_local.h and cmll_local.h self-standingtb2023-09-044-9/+12
|
* unbreak build with llvm-16 by including sys/types.h for __BEGIN_HIDDEN_DECLSrobert2023-09-042-2/+6
| | | | | | /usr/src/lib/libcrypto/whrlpool/wp_local.h:5:1: error: unknown type name '__BEGIN_HIDDEN_DECLS' ok tb@
* whitespacetb2023-09-021-2/+2
|
* Align EVP_PKEY_get1_RSA() with EVP_PKEY_get0_RSA()tb2023-09-021-6/+7
|
* Many improvements, almost amounting to a partial rewrite:schwarze2023-09-011-48/+109
| | | | | | | | | | | | | * more precision what the CIPHER_CTX functions do * more precision what an NID is * avoid talking about RC2, use AES-256 for an example instead * clarify that block sizes are measured in bytes * mention additional restrictions regarding valid block sizes * add the missing description of the *_flags(3) functions * mention the public mask constant EVP_CIPH_MODE * add three missing modes that can occur as return values * add the missing entries for *_flags(3) and *_mode(3) below RETURN VALUES * tweak various wordings for precision and conciseness
* Fix EVP_PKEY_get0_RSA() for RSA-PSStb2023-09-011-6/+6
| | | | | | It currently returns NULL. This is OpenSSL 4088b926 + De Morgan. ok jsing
* fix an obvious typo in the OBJ_NAME_add(3) prototypeschwarze2023-09-011-3/+3
|
* Split three new manual pages EVP_CIPHER_nid(3), EVP_CIPHER_CTX_ctrl(3),schwarze2023-08-316-451/+727
| | | | | | | | | | | and EVP_CIPHER_CTX_set_flags(3) out of the excessively large and unwieldy EVP_EncryptInit(3). This causes a number of inaccuracies and gaps to stand out, but i'm not mixing text changes or content additions into this split. Using very useful feedback from tb@ regarding what belongs together and how important the various functions are. I refrained from bothering him with the complete patch, but he likes the general direction.
* Ensure no memory is leaked after passing NULL to ASN1_TIME_normalize()libressl-v3.8.1job2023-08-302-2/+7
| | | | OK tb@
* Document EVP_{CIPHER,MD}_do_all{,_sorted}(3)tb2023-08-303-3/+139
| | | | | | | | | | The function prototypes in the SYNOPSIS don't look great, but schwarze assures me that this is how it is supposed to be. It is rather strange that OpenSSL chose to sprinkle OPENSSL_init_crypto() calls into these four functions rather than two inside OBJ_NAME_do_all{,_sorted}(3). Surely there was a good reason for that. With input and fixes from schwarze
* Fix leaks in copy_issuer()tb2023-08-301-8/+14
| | | | | | | | | | | | | | The stack of subject alternative names from the issuer is parsed using X509V3_EXT_d2i(), so it must be freed with sk_GENERAL_NAME_pop_free(). It's not worth doing complicated ownership handling when the individual alternative names can be copied with GENERAL_NAME_dup(). Previously, ialt and its remaining members would be leaked when the call to sk_GENERAL_NAME_push() failed halfway through. This is only reachable via the issuer:copy x509v3.cnf(5) directive. ok jsing
* Replace last ecdh.h and ecdsa.h occurrences with ec.htb2023-08-294-16/+12
| | | | | | Except if backward compatibility with older LibreSSL and OpenSSL versions is explicitly needed, ecdsa.h and ecdh.h should no longer be used. They are now trivial wrappers of ec.h.
* Move the weak SHA-1 and MD5 hashes out of EVP_DigestInit(3)schwarze2023-08-274-46/+138
| | | | | into a new EVP_sha1(3) manual page, and also mention EVP_md4(3) there. Using input from tb@ and jsing@, who like the general direction.
* document the return value of EVP_PKEY_asn1_find(3) andschwarze2023-08-271-4/+20
| | | | the "len" argument and the return value of EVP_PKEY_asn1_find_str(3)
* EVP_PKEY_set_type_str(3) is now documented, so switch from .Fn to .Xrschwarze2023-08-271-3/+3
|
* document EVP_PKEY_set_type_str(3)schwarze2023-08-271-7/+46
|
* add the missing information that and how flags can be combined,schwarze2023-08-261-3/+7
| | | | and add the missing link to evp(3)
* Write documentation for EVP_CIPHER_CTX_buf_noconst(3) from scratch.schwarze2023-08-261-5/+42
| | | | | | | Put it here rather than into EVP_EncryptInit(3) because similar to EVP_CIPHER_CTX_get_cipher_data(3), application software should not use it. These functions will likely not be needed except by people implementing custom encryption algorithms.
* write documentation for EVP_CIPHER_CTX_copy(3)schwarze2023-08-261-4/+86
| | | | and EVP_CIPHER_CTX_encrypting(3) from scratch
* transfering -> transferringjsg2023-08-261-3/+3
|
* Remove two unnecessary local variablestb2023-08-261-9/+3
|
* make the one-line description read betterschwarze2023-08-251-3/+13
| | | | | and be more specific below RETURN VALUES; OK tb@
* In evp.h rev.s 1.90 and 1.97, tb@ provided EVP_CIPHER_CTX_get_cipher_data(3)schwarze2023-08-253-3/+114
| | | | | | and EVP_CIPHER_CTX_set_cipher_data(3). Import the manual page from the OpenSSL 1.1 branch, which is still under a free licence, with several improvements by me.
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-12 16:37:40 +0000