| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2015-10-07 | tame "stdio inet rpath cpath wpath proc" seems to be sufficient for | deraadt | 1 | -1/+7 | |
| all the wading in here. "proc" is for the speed command, which fork()'s. ok doug | |||||
| 2015-10-06 | prefer limits.h over sys/limits.h | bcook | 2 | -6/+6 | |
| ok deraadt@ | |||||
| 2015-10-06 | these do not use ioctl.h | deraadt | 2 | -4/+2 | |
| 2015-10-05 | Make sure dot is not set after tz - fixes incorrect handling, which allows | jsing | 2 | -4/+4 | |
| 20151005171301+1.09Z to be treated as a valid time. ok beck@ | |||||
| 2015-10-05 | Wrap <resolv.h> so that internal calls go direct | guenther | 3 | -5/+11 | |
| ok millert@ | |||||
| 2015-10-04 | Apply some style(9), tweak a few things for readability and add some | jsing | 2 | -72/+80 | |
| additional bounds checks. ok beck@ | |||||
| 2015-10-04 | wrap __ivaliduser_sa() so the internal call is direct (at least until we | guenther | 1 | -0/+2 | |
| stop exporting it) | |||||
| 2015-10-04 | recv() and send() aren't overriden by libpthread (vs recvfrom() and sendto()!) | guenther | 2 | -2/+4 | |
| so wrap them to make internal calls go direct | |||||
| 2015-10-03 | SSL_new(): fix ref counting and memory leak in error path. | doug | 2 | -16/+6 | |
| Rather than a half-hearted attempt to free up resources and fix ref counting at the SSL_CTX level, let SSL_free() do its job. This diff got lost in the shuffle somewhere. It's from last year. Ref counting error reported by Parakleta in github ticket #51. Thanks! ok jsing@, beck@ | |||||
| 2015-10-03 | BIO_get_fd() could return fd 0; fix error condition. Found at | deraadt | 1 | -2/+2 | |
| http://marc.info/?l=openssl-dev&m=144374015404899&w=2 ok doug | |||||
| 2015-10-02 | avoid sys/param.h, by using PATH_MAX | deraadt | 1 | -1/+1 | |
| 2015-10-02 | Add another invalid time, which is currently accepted. | jsing | 1 | -1/+4 | |
| 2015-10-02 | Flense the greasy black guts of unreadble string parsing code out of three areas | beck | 15 | -543/+666 | |
| in asn1 and x509 code, all dealing with an ASN1_TIME. This brings the parsing together in one function that converts into a struct tm. While we are at it this also brings us into conformance with RFC 5280 for times allowed in an X509 cert, as OpenSSL is very liberal with what it allows. input and fixes from deraadt@ jsing@ guethther@ and others. ok krw@, guenther@, jsing@ | |||||
| 2015-10-02 | s/ssl3_client_kex/ssl3_send_client_kex/ for consistency with the caller. | jsing | 2 | -18/+22 | |
| 2015-10-01 | include <sys/types.h> for ssize_t | bcook | 1 | -1/+3 | |
| ok jsing@, deraadt@ | |||||
| 2015-10-01 | Another s/M_ASN1_INTEGER_free/ASN1_INTEGER_free/. | jsing | 1 | -2/+2 | |
| Found the hard way by Mark Patruck. | |||||
| 2015-10-01 | Eliminate the last of the LINTEDn and PRINTFLIKEn comments. In one | guenther | 6 | -15/+7 | |
| case, by deleting some useless '& of an array' we also eliminate the need for the casts which prompted the original lint warnings ok deraadt@ | |||||
| 2015-09-30 | Place all of the ASN1 M_ macros under #ifndef LIBRESSL_INTERNAL. | jsing | 2 | -60/+74 | |
| 2015-09-30 | Expand M_i2d_ASN1_OCTET_STRING macros - no change in generated assembly, | jsing | 2 | -6/+10 | |
| aside from line numbers. | |||||
| 2015-09-30 | s/M_ASN1_ENUMERATED_free/ASN1_ENUMERATED_free/ | jsing | 2 | -4/+4 | |
| 2015-09-30 | Replace M_ASN1_ENUMERATED_(free|new) with ASN1_ENUMERATED_(free|new). | jsing | 2 | -6/+6 | |
| 2015-09-30 | Replace M_ASN1_OCTET_STRING_(free|new) with ASN1_OCTET_STRING_(free|new). | jsing | 30 | -98/+98 | |
| 2015-09-30 | Replace M_ASN1_UTCTIME_(new|free) with ASN1_UTCTIME_(new|free). | jsing | 2 | -6/+6 | |
| 2015-09-30 | Replace M_ASN1_IA5STRING_(new|free) with ASN1_IA5STRING_(new|free). Same | jsing | 6 | -18/+18 | |
| with one s/M_ASN1_VISIBLESTRING_new/ASN1_VISIBLESTRING_new/. | |||||
| 2015-09-30 | Replace M_ASN1_GENERALIZEDTIME_(new|free) with | jsing | 6 | -14/+14 | |
| ASN1_GENERALIZEDTIME_(new|free). | |||||
| 2015-09-30 | s/M_ASN1_TIME_free/ASN1_TIME_free/ | jsing | 4 | -14/+14 | |
| 2015-09-30 | Replace M_ASN1_INTEGER_(new|free) with ASN1_INTEGER_(new|free) - this is | jsing | 24 | -82/+82 | |
| different from the macro expansion, but the result is the same. Also replace some ASN1_STRING_dup() with ASN1_INTEGER_dup(). ok beck@ doug@ | |||||
| 2015-09-30 | Remove unnecessary type assignments - M_ASN1_INTEGER_new() already sets | jsing | 2 | -6/+2 | |
| the type to V_ASN1_INTEGER. ok doug@ | |||||
| 2015-09-30 | fix two typos. | sobrado | 1 | -2/+2 | |
| 2015-09-30 | Fix a bug in the regress, and be much more pedantic about what is allowed | beck | 1 | -22/+46 | |
| per RFC 5380 in an X509. RFC 5280 states that all times before 2050 must be specified as a UTCtime, not a Generalized time, and all times after must be a UTC time. By extension this also means the smallest time allowed per RFC 5280 is 500101000000Z and the largest is 99991231235959Z.. | |||||
| 2015-09-30 | Remove support for NO_ASN1_TYPEDEFS. | doug | 2 | -42/+2 | |
| This ifdef was introduced 15 years ago and was known to cause problems with STACK_OF() back then. ok jsing@, beck@, jca@ | |||||
| 2015-09-29 | convert "last_time" to a time_t, to handle beyond Y2038 | deraadt | 2 | -14/+14 | |
| ok guenther miod | |||||
| 2015-09-29 | Replace remaining M_ASN1_BIT_STRING_(new|free) macros with calls to | jsing | 6 | -18/+18 | |
| ASN1_BIT_STRING_(new|free). ok beck@ doug@ | |||||
| 2015-09-29 | Instead of declaring a union in multiple places, move it to tls_internal.h. | jsing | 3 | -15/+14 | |
| ok deraadt@ | |||||
| 2015-09-29 | clean some ugly intendation warts | deraadt | 5 | -12/+21 | |
| 2015-09-29 | Add an rfc5280 test suite to test x509_cmp_time. | beck | 2 | -2/+362 | |
| Note some of these will yet fail with the current libcrypto as the current X509_cmp_time is not RFC5280 compliant ok jsing@ | |||||
| 2015-09-29 | Fix sha2 regression test for libcrypto. | doug | 1 | -2/+2 | |
| By default, "openssl sha" used SHA-0. However, it was possible to use the form "openssl sha -sha256" to run SHA-256 instead. The regression test used this form. Since we removed SHA-0 support, the regress tests should now call "openssl <digest>". ok guenther@, bcook@ | |||||
| 2015-09-28 | remove excessive brackets on pointer math | deraadt | 2 | -16/+16 | |
| 2015-09-28 | Explicit NULL checks and style(9) tweaks. | jsing | 1 | -7/+7 | |
| 2015-09-27 | Redo 1.25, without the NULL deref. | miod | 2 | -44/+62 | |
| ok sthen@ bcook@ | |||||
| 2015-09-27 | check if openssl(1) actually works before proceeding | bcook | 1 | -0/+2 | |
| It was possible for this test to pass even if the openssl command itself was missing. | |||||
| 2015-09-27 | bump to 2.3.1 | bcook | 2 | -6/+6 | |
| 2015-09-26 | Use ASN1_item_dup() instead of ASN1_dup(). | jsing | 4 | -14/+10 | |
| ok bcook@ | |||||
| 2015-09-26 | lint is dead: delete useless LINTLIBRARY comments | guenther | 2 | -4/+2 | |
| ok millert@ | |||||
| 2015-09-26 | We don't need no stinking "EXAMPLE OF THE DSA" or README (the credits are | jsing | 4 | -252/+0 | |
| already in the code). ok beck@ miod@ | |||||
| 2015-09-25 | Add DER encoding/decoding coverage for ASN.1 GENERALIZEDTIME and UTCTIME. | jsing | 1 | -39/+158 | |
| 2015-09-25 | Add initial regress tests for ASN.1 times. | jsing | 3 | -1/+372 | |
| 2015-09-25 | avoid trailing .Ns, reduce .Xo and .Sm, drop redundant .Bk | schwarze | 1 | -12/+4 | |
| 2015-09-22 | typos in documentation; better wording, suggested by jmc@libressl-v2.3.0 | sobrado | 51 | -88/+88 | |
| ok jmc@ | |||||
| 2015-09-21 | add a missing NULL check | bcook | 1 | -1/+5 | |
| noted by Bill Parker (dogbert2) on github | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |