summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* first round of unifdef hammeringtedu2014-04-167-188/+2
|
* Remove non-posix support. Why is OPENSSL_isservice even here?tedu2014-04-162-458/+0
| | | | | Is this a crypto library or a generic platform abstraction library? "A hack to make Visual C++ 5.0 work correctly" ... time to upgrade.
* spray the apps directory with anti-VMS napalm.tedu2014-04-1646-449/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | so that its lovecraftian horror is not forever lost, i reproduce below a comment from the deleted code. /* 2011-03-22 SMS. * If we have 32-bit pointers everywhere, then we're safe, and * we bypass this mess, as on non-VMS systems. (See ARGV, * above.) * Problem 1: Compaq/HP C before V7.3 always used 32-bit * pointers for argv[]. * Fix 1: For a 32-bit argv[], when we're using 64-bit pointers * everywhere else, we always allocate and use a 64-bit * duplicate of argv[]. * Problem 2: Compaq/HP C V7.3 (Alpha, IA64) before ECO1 failed * to NULL-terminate a 64-bit argv[]. (As this was written, the * compiler ECO was available only on IA64.) * Fix 2: Unless advised not to (VMS_TRUST_ARGV), we test a * 64-bit argv[argc] for NULL, and, if necessary, use a * (properly) NULL-terminated (64-bit) duplicate of argv[]. * The same code is used in either case to duplicate argv[]. * Some of these decisions could be handled in preprocessing, * but the code tends to get even uglier, and the penalty for * deciding at compile- or run-time is tiny. */
* strncpy(d, s, strlen(s)) is a special kind of stupid. even when it's right,tedu2014-04-164-24/+34
| | | | | it looks wrong. replace with auditable code and eliminate many strlen calls to improve efficiency. (wait, did somebody say FASTER?) ok beck
* Remove disabled code that wouldn't work now that cleanse_ptr wasmatthew2014-04-162-70/+36
| | | | | | | | removed. Also, fix some nearby KNF nits that were bothering me. ok beck
* KNFmcbride2014-04-162-722/+1238
|
* you do not want to do the things this program doestedu2014-04-162-1864/+0
|
* strip this to the bonetedu2014-04-152-134/+6
|
* Three wrappers in this file: OPENSSL_strncasecmp, OPENSSL_strcasecmp,deraadt2014-04-152-186/+8
| | | | | | | | | | | | and OPENSSL_memcmp. All modern systems have strncasecmp. No need to rewrite it. Same with memcmp, call the system one! It is more likely to be hot in the icache, and is specifically optimized for the platform. I thought these OpenSSL people cared about performance? ok tedu
* use explicit_bzero instead of a bizarro "no compiler could ever be smarttedu2014-04-152-140/+6
| | | | enough to optimize this" monstrosity.
* remove BIO_snprintf usage - convert to snprintf.beck2014-04-151-7/+8
| | | | | | Interestingly this fixes a bug, as the code appears to have been assuming that BIO_snprintf returns what snprintf does when it does not. ok tedu@
* remove md2, jpake, and seed clutter.tedu2014-04-1532-4780/+0
|
* don't even pretend to build md2, seed, or jpaketedu2014-04-151-17/+3
| | | | ok beck deraadt
* o_dir.c had a very funny odor. all users of this now use standard functions.beck2014-04-155-250/+0
| | | | | consign it to the Attic. ok deraadt@
* Remove wraparounds for operating systems which lack issetugid().deraadt2014-04-152-162/+30
| | | | | | | I will note that some were missing, looking at you Solaris!!! Anyone home? Using my own copyright on the file now, since this is a rewrite of a trivial wrapper around a system call I invented. ok beck
* All the other old Makefiles are gone, so also remove unused enginesreyk2014-04-151-135/+0
| | | | | Makefile. The directory is empty and will silently disappear in the Attic (but there are more engines in another directory).
* remove ssl2 support even more completely.tedu2014-04-1525-4509/+13
| | | | | | in the process, always include ssl3 and tls1, we don't need config options for them. when the time comes to expire ssl3, it will be with an ax. checked by miod
* the VMS code is legiontedu2014-04-151-395/+0
|
* $infile="/home/eay/ssl/SSLeay/MINFO";tedu2014-04-1524-3708/+0
| | | | I wonder when these scripts were last used...
* we don't use this makefiletedu2014-04-151-106/+0
|
* The more you remove Chtulhu^WVMS tentacles, the more there aremiod2014-04-1526-52/+0
|
* we don't use these files for buildingtedu2014-04-15112-9634/+0
|
* Remove workarounds for ld reaching MAXDSIZ on vax, now that MAXDSIZ ismiod2014-04-151-5/+1
| | | | | more comfortable. Reminded by brad@
* 12 years ago, old_des.h was used to provide compatibility with libdes.tedu2014-04-1511-1627/+8
| | | | | | | | | | | | The man page says "Compatibility des_ functions are provided for a short while" and indeed even the original commit message says "The compatibility functions will be removed in some future release, at the latest in version 1.0." So here we are, a short while later. Now I've only been an OpenBSD developer for 11 years, one year less than this header has existed, but in that brief time, I've learned a thing or two about deleting obsolete code. It doesn't delete itself. And worse, people will continue using it until you force them onto a better path.
* imake died in a fire a long time agotedu2014-04-152-70/+0
|
* repair some whitespacetedu2014-04-152-100/+88
|
* Crank major for libcrypto and libssl; more symbol removals to occur during themiod2014-04-154-6/+6
| | | | | next few moments, don't rush your update. Requested by deraadt@
* The NO_ASN1_OLD define was introduced in 0.9.7, 8 years ago, to allow formiod2014-04-1521-1618/+2
| | | | | | | | | | obsolete (and mostly internal) routines to be compiled out. We don't expect any reasonable software to stick to these interfaces, so better clean up the view and unifdef -DNO_ASN1_OLD. The astute reader will notice the existence of NO_OLD_ASN1 which serves a similar purpose, but is more entangled. Its time will come, soon.
* convert BIO_snprintf to snprintfbeck2014-04-151-2/+6
| | | | ok deraadt@ tedu@
* Just like every web browser expands until it can read mail, every modularmiod2014-04-1515-4299/+5
| | | | | | | | | | | | | | | library expands until it has its own dlfcn wrapper, and libcrypto is no exception. Remove the non-dlfcn DSO methods. This causes public DSO_METHOD_{beos,dl,vms,win32} to disappear (major bump coming soon). Note that portable software ought to use DSO_METHOD_openssl instead of picking the backend directly (which makes one wonder why the backends are exposed, as it is unlikely that more than one can work on your system). ok beck@ deraadt@
* remove FIPS mode support. people who require FIPS can buy something thattedu2014-04-15131-1955/+15
| | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt
* Q: How would you like your lies, sir?miod2014-04-151-7030/+0
| | | | A: Rare.
* Go home, VMS, you're drunkmiod2014-04-157-13468/+0
|
* remove FIPS mode support. people who require FIPS can buy something thattedu2014-04-1516-245/+4
| | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok miod
* In EC_POINT_invert(), actually check the correct function pointer for NULLmiod2014-04-152-2/+2
| | | | | before attempting to invoke it; trivial one-liner in OpenSSL RT #2569 ignored for 2.5 years.
* No longer mention OPENSSL_EC_BIN_PT_COMP being required to allow formiod2014-04-152-6/+0
| | | | | | | | | | | `compressed' EC point representation. First, as researched by djb, quoting from http://cr.yp.to/ecdh/patents.html : ``It should, in any case, be obvious to the reader that a patent cannot cover compression mechanisms published seven years before the patent was filed.'' Second, that define was actually removed from the code in in OpenSSL 1.0.0.
* No licence.miod2014-04-1510-1926/+0
|
* Moved to regress/lib/libcrypto.miod2014-04-1546-18922/+0
|
* Remove the GOST engine: It is not compiled or used and depends on thereyk2014-04-1537-6469/+1
| | | | | | | | "dynamic engine" feature that is not enabled in our build. People who need it can still pull it out of the Attic; if it is to have a Russian engine just because it's a Russian engine. OK deraadt@ beck@
* This commit was generated by cvs2git to track changes on a CVS vendormiod2014-04-1548-0/+9639
|\ | | | | branch.
| * Import the OpenSSL libcrypto tests in a form suitable for our rergressmiod2014-04-1548-0/+9639
| | | | | | | | | | | | infrastructure. The following tests have not been imported, for their code lacks a licence: asn1, rsa, sha256, sha512, wp.
* | Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternitybeck2014-04-1577-1606/+9
| | | | | | | | | | with the bearded ones... some API's that nobody should be using will dissapear with this commit.
* | Toss a `unifdef -U OPENSSL_SYS_WINDOWS' bomb into crypto/bio.jsing2014-04-1510-338/+6
| | | | | | | | ok miod@
* | First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-156-1400/+1478
| | | | | | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.
* | As we now remove it permanently, we no longer need NO_WINDOWS_BRAINDEATHbeck2014-04-153-10/+2
| | | | | | | | | | as a build time option... ok deraadt@ miod@
* | No need to define DEVRANDOM and DEVRANDOM_EGD any longer.miod2014-04-151-12/+0
| |
* | Remove VMS code.jsing2014-04-152-640/+0
| | | | | | | | ok miod@ beck@
* | Replace the old OpenSSL PRNG by direct use of arc4random_buf(), keeping themiod2014-04-1523-3417/+137
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | existing RAND interfaces unchanged. All interfaces allowing external feed or seed of the RNG (either from a file or a local entropy gathering daemon) are kept for ABI compatibility, but are no longer do anything. While the OpenSSL PRNG was required 15+ years ago when many systems lacked proper entropy collection, things have evolved and one can reasonably assume it is better to use the kernel (system global) entropy pool rather than trying to build one's own and having to compensate for thread scheduling... <RANT> Whoever thought that RAND_screen(), feeding the PRNG with the contents of the local workstation's display, under Win32, was a smart idea, ought to be banned from security programming. </RANT> ok beck@ deraadt@ tedu@
* | remove a test directory. If anyone wants something this again, this isderaadt2014-04-1522-3652/+0
| | | | | | | | | | | | the wrong place and it will need heavy lifting. Love the .bat files and the reference to pre-draft pthreads code at MIT. ok beck
* | First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-1544-9338/+9352
| | | | | | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.