| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2024-05-27 | openssl: avoid shadowed pkeys in x509.c | tb | 1 | -12/+10 | |
| ok job jsing | |||||
| 2024-05-27 | remove unused typedefs with structs that were removed | jsg | 2 | -14/+2 | |
| ENGINE, SSL and SSL_CTX remain even though the structs in the typedefs don't exist as they are used as incomplete types. feedback, ports bulk build and ok tb@ | |||||
| 2024-05-26 | Remove documentation of optional md in one-step hashes | tb | 4 | -28/+47 | |
| This functionality will be removed, so stop documenting it. Instead mention that another implementation still supports this. | |||||
| 2024-05-25 | Eliminate last timegm() correctly this time | tb | 1 | -5/+25 | |
| Also add a test case with a generalized time representing the moment one second past the 32-bit epoch wrap. | |||||
| 2024-05-25 | sync inclusion of <stdlib.h> from libcrypto | tb | 3 | -3/+6 | |
| 2024-05-25 | Include <stdint.h> in the bytestring .c files | tb | 3 | -3/+6 | |
| They currently depend on bytestring.h pulling that in. discussed with jsing | |||||
| 2024-05-25 | Revert previous | tb | 1 | -10/+4 | |
| It wasn't quite right, but I also think the test is bogus. | |||||
| 2024-05-25 | asn1time: another use of gmtime was hiding here | tb | 1 | -4/+10 | |
| 2024-05-24 | des_local.h: Remove some unused macros | tb | 1 | -20/+1 | |
| 2024-05-24 | Remove documentation of DES_enc_{read,write} and DES_rw_mode | tb | 1 | -89/+4 | |
| ok jsing | |||||
| 2024-05-24 | Stub out DES_enc_{read,write}(3) | tb | 3 | -321/+14 | |
| The most terrible code in OpenSSL has its roots in libdes, which came before SSLeay. Hello, LHASH. Hello speed app. Hello DES (obviously). There are some diary-style changelog comments dating all the way back to 1990. /* This has some uglies in it but it works - even over sockets. */ Well, kind of: * - This code cannot handle non-blocking sockets. Also: /* >output is a multiple of 8 byes, if len < rnum * >we must be careful. The user must be aware that this * >routine will write more bytes than he asked for. * >The length of the buffer must be correct. * FIXED - Should be ok now 18-9-90 - eay */ Or /* This is really a bad error - very bad * It will stuff-up both ends. */ Or #ifdef _LIBC extern unsigned long time(); extern int write(); #endif I can't even... Delete, delete, delete. ok jsing | |||||
| 2024-05-23 | Make signature of SSL_COMP_add_compression_method(3) match reality | tb | 1 | -3/+3 | |
| 2024-05-23 | x509_v3.c: indent labels | tb | 1 | -4/+4 | |
| 2024-05-23 | x509_v3.c: remove an unnecessary else | tb | 1 | -3/+3 | |
| 2024-05-23 | x509_v3.c: consistently call STACK_OF(X509_EXTENSIONS) arguments sk | tb | 1 | -12/+12 | |
| (where it doesn't conflict with a local variable) | |||||
| 2024-05-23 | x509_v3.c: zap another pointless local variable | tb | 1 | -7/+2 | |
| 2024-05-23 | x509_v3.c: add a few empty lines | tb | 1 | -1/+9 | |
| 2024-05-23 | X509v3_get_ext_by_NID: make obj const, test & assign | tb | 1 | -4/+4 | |
| 2024-05-23 | x509_v3.c: remove a pointless local variable | tb | 1 | -5/+3 | |
| 2024-05-23 | x509_v3.c: mechanically replace ex with ext and new_ex with new_ext | tb | 1 | -42/+42 | |
| 2024-05-22 | Exercise EVP_chacha20_poly1305() with in-place decryption | tb | 1 | -2/+143 | |
| This needs quite a bit of cleanup but let's have some tests rather than none. | |||||
| 2024-05-22 | Fix in-place decryption for EVP_chacha20_poly1305() | tb | 1 | -3/+3 | |
| Take the MAC before clobbering the input value on decryption. Fixes hangs during the QUIC handshake with HAProxy using TLS_CHACHA20_POLY1305_SHA256. Found, issue pinpointed, and initial fix tested by Lucas Gabriel Vuotto: Let me take this opportunity to thank the HAProxy team for going out of their way to keep supporting LibreSSL. It's much appreciated. See https://github.com/haproxy/haproxy/issues/2569 tweak/ok jsing | |||||
| 2024-05-22 | crib better wording from schwarze's EVP_PKEY_get_attr_by_NID(3) | tb | 1 | -5/+4 | |
| 2024-05-22 | Fix incorrect X509v3_get_ext_by_NID(3) return values | tb | 1 | -9/+17 | |
| This error comes from upstream, where it is still wrong. | |||||
| 2024-05-21 | remove prototypes with no matching function and externs with no var | jsg | 1 | -2/+1 | |
| partly checked by millert@ | |||||
| 2024-05-20 | cmac: zero_iv should be const | tb | 1 | -2/+2 | |
| 2024-05-19 | unwrap a line | tb | 1 | -3/+2 | |
| 2024-05-19 | Add space after commas | tb | 2 | -6/+6 | |
| 2024-05-19 | KNF for dh_err and dsa_err | tb | 2 | -63/+59 | |
| 2024-05-19 | remove prototypes with no matching function | jsg | 8 | -39/+9 | |
| feedback and ok tb@ | |||||
| 2024-05-18 | remove extern with no matching var; ok tb@ | jsg | 1 | -2/+1 | |
| 2024-05-18 | remove prototypes with no matching function; ok tb@ | jsg | 3 | -6/+3 | |
| 2024-05-17 | asn1_str2tag(): no need for tntmp to be static | tb | 1 | -2/+3 | |
| 2024-05-17 | The long primitive function table can be const | tb | 1 | -2/+2 | |
| 2024-05-17 | The bignum primitive function table (bignum_pf) can be const | tb | 1 | -2/+2 | |
| 2024-05-16 | x509_v3.c: remove superfluous parentheses | tb | 1 | -39/+39 | |
| No change in the generated assembly | |||||
| 2024-05-16 | SSL_CTX_set_keylog_callback: copy-paste error _set_ -> _get_ | tb | 1 | -3/+3 | |
| 2024-05-15 | Improve X509V3_get0_uids() documentation | tb | 1 | -11/+19 | |
| Use less horrcble variable names and make it explicit that both output arguments are allowed to be NULL. | |||||
| 2024-05-15 | X509_check_akid: zap stray space | tb | 1 | -2/+2 | |
| 2024-05-14 | x509_ext.c: remove unnecessary includes | tb | 1 | -5/+1 | |
| 2024-05-14 | x509_ext.c: remove lots of extraneous parentheses | tb | 1 | -23/+23 | |
| No change in the generated assembly | |||||
| 2024-05-14 | Fix last sentence of CAVEATS which I got the wrong way around | tb | 1 | -4/+3 | |
| 2024-05-12 | Be more specific about X509V3_ADD_APPEND and X509V3_ADD_DELETE | tb | 1 | -3/+6 | |
| 2024-05-12 | Tweak wording | tb | 1 | -1/+4 | |
| 2024-05-12 | Remove a 'built-in' that was left in by accident | tb | 1 | -2/+2 | |
| 2024-05-12 | Install X509V3_EXT_get_nid.3 | tb | 1 | -1/+2 | |
| 2024-05-12 | Add minimal manpage documenting the misnamed X509V3_EXT_get_nid() | tb | 2 | -2/+92 | |
| This avoids a dangling reference in i2s_ASN1_ENUMERATED_TABLE. To complete this manual, someone will need to document X509V3_EXT_METHOD, but that's for a much more rainy day than today. | |||||
| 2024-05-12 | Avoid .Xr to no longer public X509_LOOKUP_by_subject(3) | tb | 1 | -7/+4 | |
| looks good to jmc | |||||
| 2024-05-11 | Move X509V3_add_standard_extensions out of the way | tb | 1 | -8/+8 | |
| This function is only used by OpenLDAP and it's been a noop since forever. It has no business to be squeezed in between a number of other, quite unrelated functions. It's distracting. | |||||
| 2024-05-11 | Make two NULL checks more explicit | tb | 1 | -3/+3 | |
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |