summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Sync the list of man pages with doc/crypto and doc/ssl. MLINKS willmpi2014-04-141-85/+120
| | | | | | follow soon. Tweaks from an ok jim@
* Don't bother compiling files which end up containingmiod2014-04-149-2584/+2
| | | | | | #if OPENSSL_SYS_NOTYOURS <whole file> #endif
* remove last vestiges of OPENSSL_SYS_XXX from src/sslbeck2014-04-145-25/+0
| | | | ok deraadt@
* two SHUTDOWN2 got away; noticed by beckderaadt2014-04-144-4/+8
|
* Use shutdown(s, SHUT_RDWR) instead of shutdown(s, 2).matthew2014-04-134-4/+4
| | | | ok beck deraadt
* Cope with the removal of openssl/symhacks.hderaadt2014-04-1331-46/+1
|
* Remove various horrible socket syscall wrappers, especially SHUTDOWN*deraadt2014-04-1321-186/+179
| | | | | | which did shutdown + close, all nasty and surprising. Use the raw syscalls that everyone knows the behaviour of. ok beck matthew
* Flense a variety of windows support stuff, and a strange gettimeofday function.beck2014-04-1312-785/+0
| | | | ok deraadt@
* Fix the gettimeofday function that I broke with my last commit.beck2014-04-132-12/+0
| | | | | noticed by mattheew and deraadt ok deraadt@
* symhacks for vms are no longer neededbeck2014-04-132-962/+0
| | | | ok deraadt@
* Remove vms support stuff.beck2014-04-1317-386/+4
| | | | ok deraadt@
* Do not include "e_os.h" anymore. Simply pull in the necessary headers.mpi2014-04-1333-69/+89
| | | | ok miod@, deraadt@
* remove more cases of MS_STATIC, MS_CALLBACK, and MS_FAR. Did youderaadt2014-04-1321-69/+61
| | | | | | | know that MS_STATIC doesn't mean it is static? How far can lies and half-truths be layered? I wonder if anyone got fooled, and actually returned a pointer.. ok beck
* We don't use this build system.deraadt2014-04-134-4201/+0
|
* /dev/null does not move aroundderaadt2014-04-131-1/+0
|
* Remove unneded OS portability cruft that we will never use.beck2014-04-131-169/+0
| | | | ok deraadt@
* We do not need historical shared library build goo for other operatingderaadt2014-04-1315-498/+0
| | | | | systems, most of which in any sane world will want to do something more modern anyways.
* no doxyderaadt2014-04-132-217/+0
|
* Remove some stuff that isn't needed.beck2014-04-1313-657/+72
| | | | ok miod@ deraadt@
* Remove the AEP engine: it is not standalone and doesn't seem to bereyk2014-04-1312-1617/+4
| | | | | | | | | relevant anymore. OpenSSL should have a better way to include 3rd party engines: either completely and free or external. But including a wrapper for a non-free wrapper in the code base does not make much sense and could also be provided by the vendor. ok deraadt@
* Remove the Atalla engine: It is not standalone and depends on externalreyk2014-04-1313-940/+1
| | | | | | | | | non-free libraries. OpenSSL should have a better way to include 3rd party engines: either completely free or external. But including a wrapper for a non-free wrapper in the code base does not make much sense and could also be provided by the vendor. ok deraadt@
* Remove the cswift engine: it is not standalone and we don't have thereyk2014-04-1312-1650/+1
| | | | | | | | | | | | | hardware. The vendor_defns/cswift.h does not specify a copyright and theoretically defaults to the OpenSSL license, but it also mentions that it includes parts that have been "clipped" from CryptoSwift's proprietary headers. This file should better include an explicit copyright statement or mention OpenSSL's library instead of the ambiguous "Attribution notice". ok deraadt@
* Remove the "sureware" engine:reyk2014-04-1312-1587/+1
| | | | | | | | | | | | The vendor_defns/sureware.h file by Baltimore Technologies Ltd. has a copyright that does not grant rights! Vendor files should either include a compatible license in the copyright statement or use OpenSSL's defaults, but adding a copyright statement without any terms is not acceptable. It should not have been included in the first place. ok deraadt@
* Remove the Broadcom ubsec engine:reyk2014-04-1314-1460/+1
| | | | | | | | | | | | | The vendor_defns/hw_ubsec.h file has a copyright that does not grant rights! Vendor files should either include a compatible license in the copyright statement or use OpenSSL's defaults, but adding a copyright statement without any terms is not acceptable. It should not have been included in the first place. (The ubsec(4) kernel driver is not affected by this change) ok deraadt@
* Remove the IBM 4758 engine: we don't have this hardware and it is anreyk2014-04-1314-1422/+4
| | | | | | old PCI accelerator that was EOL'ed in 2005. ok deraadt@
* Don't edit on cvs. 23.1 as intended.miod2014-04-132-4/+4
|
* Irrelevant.deraadt2014-04-1310-1603/+0
|
* historical benchmark results. irrelevant.deraadt2014-04-1364-2163/+0
| | | | ok miod
* send this directory of observations from 20 years to oblivionderaadt2014-04-138-451/+0
| | | | ok miod
* Do not install e_os.h, it is not an external header and should not be usedmiod2014-04-131-2/+1
| | | | by anything in userland.
* Move undocumented internal OPENSSL_DIR interface from libcrypto to libssl,miod2014-04-1318-1191/+5
| | | | | | so that libssl no longer need to access the non-external headers of libcrypto to build. No library bump, riding upon the recent update.
* Crank libcrypto minor (addition of BN_consttime_swap and CRYPTO_memcmp)miod2014-04-134-4/+4
| | | | and libssl major (ssl_check_clienthello_tlsext split into two functions)
* No longer define OPENSSL_NO_EC_NISTP_64_GCC_128 on amd64; requested by djmmiod2014-04-132-6/+0
|
* Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.miod2014-04-13466-35459/+3284
|
* This commit was generated by cvs2git to track changes on a CVS vendormiod2014-04-1370-279/+639
|\ | | | | branch.
| * Import OpenSSL 1.0.1gmiod2014-04-13176-963/+2294
| |
| * This commit was manufactured by cvs2git to create branch 'unlabeled-1.1.1'.cvs2svn2013-02-141-0/+790
| |
* | This commit was generated by cvs2git to track changes on a CVS vendormiod2014-04-13111-1172/+3427
|\ \ | | | | | | branch.
| * | Import OpenSSL 1.0.1gmiod2014-04-13134-1395/+3912
| | |
| * | This commit was manufactured by cvs2git to create branch 'OPENSSL'.cvs2svn2013-02-141-0/+790
| | |
* | | This commit was generated by cvs2git to track changes on a CVS vendormiod2014-04-135-5/+18
|\ \ \ | | | | | | | | branch.
| * | | Import OpenSSL 1.0.1gmiod2014-04-13182-1088/+3051
| | | |
* | | | Move build machinery for libcrypto from libssl/crypto to libcrypto, as wellmiod2014-04-1142-977/+4998
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | as configuration files; split manpages and .pc files between libcrypto and libssl. No functional change, only there to make engineering easier, and libcrypto sources are still found in libssl/src/crypto at the moment. ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects.
* | | | oops, typo, spotted by Matthias Schelerderaadt2014-04-101-2/+2
| | | |
* | | | Piotr Sikora pointed me at a more refined diff for the buffer releasetedu2014-04-102-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | issue. Apply that version. Maybe someday upstream will wake up and then we can have the same code. https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest
* | | | crank major; struct ssl_ctx_st changes; ok teduderaadt2014-04-102-2/+2
| | | |
* | | | Disable Segglemann's RFC520 hearbeat.deraadt2014-04-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I am completely blown away that the same IETF that cannot efficiently allocate needed protocol, service numbers, or other such things when they are needed, can so quickly and easily rubber stamp the addition of a 64K Covert Channel in a critical protocol. The organization should look at itself very carefully, find out how this this happened, and everyone who allowed this to happen on their watch should be evicted from the decision making process. IETF, I don't trust you. ok tedu markus
* | | | disable buf freelists. we'll see what happens next.tedu2014-04-101-1/+2
| | | | | | | | | | | | | | | | ok deraadt
* | | | don't release the read buffer if we're not done reading from it.tedu2014-04-102-4/+0
| | | | | | | | | | | | | | | | ok benno deraadt
* | | | Remove CA certificates which are not listed in Mozilla's certdata.txt.sthen2014-04-091-1823/+0
| | | | | | | | | | | | | | | | | | | | | | | | Notably this removes CAcert who it turns out have strict requirements on redistribution (http://www.cacert.org/policy/RootDistributionLicense.php) which we don't meet.