| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2015-01-13 | Add the possibility to use the openssl s_client tool with an http | bluhm | 1 | -4/+24 | |
| proxy. Implement the -proxy feature in the same hackish way as -starttls. OK jsing@ | |||||
| 2015-01-13 | Implement more thorough error checks: | lteo | 1 | -12/+38 | |
| - Check the return value of every relevant function call. - If BIO_new() returns NULL instead of a valid BIO, do not attempt to blindly use the NULL value as a BIO throughout the rest of the code. - Ensure that bio_out is freed by BIO_free_all() at the end of all error paths. ok doug@ | |||||
| 2015-01-12 | rename blocks to words. bcrypt "blocks" are unrelated to blowfish blocks, | tedu | 1 | -9/+9 | |
| nor are they the same size. | |||||
| 2015-01-12 | Fix a memory leak in bss_dgram. | doug | 2 | -6/+26 | |
| Free data->saved_message.data. Based on OpenSSL commit: 41cd41c4416f545a18ead37e09e437c75fa07c95 except this version sets a->ptr to NULL to avoid accidental reuse and handles malloc failing. ok beck@, input + ok miod@ | |||||
| 2015-01-08 | Convert spkac.c to the new option handling code. | doug | 1 | -100/+137 | |
| input + ok jsing@ | |||||
| 2015-01-08 | Convert pkcs8.c to the new option handling code. | doug | 1 | -157/+220 | |
| Minor KNF in a few places too. input + ok jsing@ | |||||
| 2015-01-08 | Convert asn1pars.c to the new option handling. | doug | 1 | -137/+206 | |
| Also, removed a few useless if null checks. input from bcook@ input + ok jsing@ | |||||
| 2015-01-08 | missing , found by Dongsheng Song | deraadt | 1 | -3/+3 | |
| 2015-01-08 | Avoid a double-free in an error path. | doug | 2 | -2/+4 | |
| ok jsing@ beck@ | |||||
| 2015-01-07 | stupid me. need errno.h | tedu | 1 | -1/+2 | |
| 2015-01-07 | set errno = EINVAL for invalid salts and hashes in most functions. | tedu | 1 | -12/+20 | |
| remember to set EACCES in bcrypt_checkpass for hash differences. the higher level crypt_checkpass function will reset errno to EACCES in all cases, which is probably the right behavior, but this change gives code working with the lower level functions the correct errno if they care. | |||||
| 2015-01-07 | mix in more virtual memory and process information | bcook | 2 | -4/+8 | |
| 2015-01-06 | add initial HP-UX getentropy/arc4random support. | bcook | 4 | -0/+992 | |
| patch from Kinichiro Inoguchi, tested on HP-UX 11.31 ok deraadt@ | |||||
| 2015-01-05 | rename kern enter/exit macros to malloc enter/leave to better reflect | tedu | 1 | -7/+7 | |
| what's going on. | |||||
| 2015-01-05 | Convert openssl(1) passwd to new option handling. | jsing | 1 | -119/+151 | |
| ok doug@ | |||||
| 2015-01-05 | convert clock() to clock_gettime() for improved precision (and accuracy?) | tedu | 1 | -7/+9 | |
| guenther suggested using thread time, which actually may improve accuracy if somebody puts this in a threaded program. | |||||
| 2015-01-05 | Zap a reference to .rnd, which is likely the last RANDFILE remnant on | lteo | 1 | -3/+2 | |
| this man page. ok jsing@ | |||||
| 2015-01-03 | Fix incorrect OPENSSL_assert() usage. | doug | 2 | -48/+106 | |
| Instead of asserting, return an error code for I/O errors. This is based on OpenSSL commit 2521fcd8527008ceb3e4748f95b0ed4e2d70cfef. Added checks for two calloc()s while I'm here. ok miod@ | |||||
| 2015-01-03 | Check the return values of several reallocarray() calls. While here, | lteo | 3 | -3/+17 | |
| also check the return value of an adjacent malloc() call. ok jsing@ | |||||
| 2015-01-02 | Rename the tls_connect_socket() parameter 'socket' to 's' to avoid | bluhm | 1 | -4/+4 | |
| a compiler warning about shadowing a global declaration. OK jsing@ | |||||
| 2015-01-02 | Remove ifdef statements for TIMES and USE_TOD; they don't do anything, | lteo | 1 | -5/+1 | |
| apart from introducing a bug where the -elapsed option is not listed in the usage output when it should be. feedback/ok bcook@ jsing@ | |||||
| 2015-01-01 | Provide option types for binary AND, binary OR and silently discarding an | jsing | 2 | -2/+13 | |
| option. | |||||
| 2015-01-01 | Convert the openssl(1) enc command to the new option parsing and usage. | jsing | 1 | -250/+382 | |
| With input from doug@ | |||||
| 2015-01-01 | Revert previous; tls_accept_socket() was intentionally undocumented | schwarze | 1 | -7/+1 | |
| because the API design isn't fully settled. Requested by jsing@ and tedu@. | |||||
| 2015-01-01 | minimally document tls_accept_socket(); | schwarze | 1 | -2/+8 | |
| patch from Sunil at Nimmagadda dot net | |||||
| 2014-12-30 | copy bcrypt autotune from encrypt(1) and expose via crypt_newhash | tedu | 2 | -5/+43 | |
| ok deraadt miod | |||||
| 2014-12-29 | don't leak timing info about padding errors by generating a fake key | tedu | 2 | -10/+20 | |
| afterwards. openssl has a more complicated fix, but it's less intrusive for now to simply hoist the expensive part (fake key generation) up without sweating a branch or two. ok bcook jsing | |||||
| 2014-12-28 | Fix subtle typo. | jsing | 1 | -2/+2 | |
| 2014-12-28 | Add regress tests for default option handling. | jsing | 1 | -1/+48 | |
| 2014-12-28 | Allow a default option to be specified by having a NULL name, but a valid | jsing | 1 | -4/+4 | |
| option type. In this case process the option as per normal. | |||||
| 2014-12-28 | Add regress tests for multiple argument callback functions. | jsing | 1 | -1/+38 | |
| 2014-12-28 | Provide an option type that allows for a callback function to consume an | jsing | 2 | -3/+12 | |
| arbitrary number of arguments. This will allow for more complex option handling as required by some of the openssl(1) applications. | |||||
| 2014-12-28 | Add option parsing regress tests with end of options handling. | jsing | 1 | -17/+50 | |
| 2014-12-28 | Teach option parsing that a single hyphen denotes the end of named options | jsing | 1 | -2/+14 | |
| (as currently only implemented by some of the openssl(1) applications). | |||||
| 2014-12-28 | Add regress tests for option parsing with multiple unnamed arguments. | jsing | 1 | -3/+45 | |
| 2014-12-28 | Provide a mechanism for option parsing to return the number of arguments | jsing | 7 | -14/+22 | |
| that it has consumed. This allows for the handling of multiple unnamed arguments, including lists of filenames. | |||||
| 2014-12-28 | Update regress to match change in unnamed argument handling. | jsing | 1 | -6/+5 | |
| 2014-12-28 | Only accept a single unnamed argument - the existing behaviour is to | jsing | 1 | -1/+12 | |
| silently accept multiple unnamed arguments, ignoring all except the last. This behaviour was already inconsistent between openssl(1) applications; apply the principal of least surprise. This will also simplify the addition of upcoming functionality. | |||||
| 2014-12-28 | Slightly simplify options parsing logic. | jsing | 1 | -65/+58 | |
| 2014-12-28 | Update options regress to match option function pointer change. | jsing | 1 | -4/+4 | |
| 2014-12-28 | Provide two different function pointers for option function callbacks. This | jsing | 4 | -13/+14 | |
| allows for simpler code in the common cases and will allow for further extension to support the complex cases. | |||||
| 2014-12-28 | Provide initial regress tests for the complex option parsing that is needed | jsing | 3 | -1/+239 | |
| for openssl(1), which is also variable in behaviour between applications (and currently inconsistent). | |||||
| 2014-12-27 | include netinet/in.h to define struct in6_addr. | bcook | 1 | -1/+2 | |
| Noticed while testing libtls on FreeBSD. | |||||
| 2014-12-24 | simplify crypt_checkpass. The API promise is that this function doesn't | tedu | 1 | -11/+5 | |
| use global data. The simplest fix is to only check blowfish passwords, and implicitly lock out DES passwords. crypt_checkpass is currently only used in one place, passwd, to verify the local user's password, so this is probably acceptable. Gives people a little more time to migrate away from DES before introduing checkpass into more places. | |||||
| 2014-12-24 | Clean up CIPHERS and related sections: | lteo | 1 | -154/+10 | |
| - Sync cipher strings with the ones that are actually implemented. - Remove CIPHERS SUITE NAMES (the actual cipher suites can be obtained via "openssl ciphers -v"), CIPHERS NOTES, and CIPHERS HISTORY sections. - Stop mentioning export cipher suites since they have already been removed. feedback from deraadt@ and jmc@ ok jmc@ | |||||
| 2014-12-19 | CA.sh and CA.pl are gone | lteo | 1 | -6/+1 | |
| 2014-12-19 | Sync message digest algorithms with the ones actually implemented in | lteo | 1 | -9/+29 | |
| "openssl dgst". feedback/ok jmc@ | |||||
| 2014-12-17 | Add size_t to int checks for SSL functions. | doug | 3 | -8/+39 | |
| libtls accepts size_t for lengths but libssl accepts int. This verifies that the input does not exceed INT_MAX. It also avoids truncating size_t when comparing with int and adds printf-style attributes for tls_set_error(). with input from deraadt@ and tedu@ ok tedu@ | |||||
| 2014-12-16 | typo; ok deraadt | sthen | 2 | -3/+3 | |
| 2014-12-16 | warn for correct symbol | deraadt | 1 | -2/+2 | |
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |