Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2018-09-01 | Tweak comment. | tb | 1 | -5/+2 | |
2018-09-01 | Remove RSA-PSS from todo-list | tb | 1 | -2/+2 | |
2018-09-01 | Run Wycheproof RSASSA-PSS testvectors against libcrypto. | tb | 1 | -2/+144 | |
2018-08-31 | Remove unused argument to tls1_change_cipher_state_cipher(). | jsing | 1 | -7/+4 | |
2018-08-31 | Instead of enumerating the files to clean by hand, set PROGS=${TESTS}. | tb | 2 | -5/+7 | |
Suggested by jsing | |||||
2018-08-30 | Make sure to clean up the .d files with 'make clean' | tb | 1 | -2/+2 | |
2018-08-30 | Nuke ssl_pending/ssl_shutdown function pointers. | jsing | 9 | -56/+14 | |
ssl3_pending() is used for all protocols and dtls1_shutdown() just calls ssl3_shutdown(), so just call the appropriate function directly instead. ok beck@ inoguchi@ tb@ | |||||
2018-08-29 | AES is now done also. | tb | 1 | -3/+3 | |
2018-08-29 | Pass algorithm as a string to all *TestGroup functions for consistency. | tb | 1 | -22/+22 | |
2018-08-29 | Run Wycheproof AES-GCM testvectors against libcrypto. | tb | 1 | -42/+83 | |
2018-08-29 | Calculate and check tag during AES-CCM encryption test. | tb | 1 | -1/+25 | |
2018-08-29 | typo | tb | 1 | -2/+2 | |
2018-08-29 | Don't fatal on keys of invalid sice, just print an INFO. | tb | 1 | -2/+3 | |
2018-08-28 | Run Wycheproof AES-CMAC testvectors against libcrypto. | tb | 1 | -2/+116 | |
2018-08-28 | remove some extra parens and fix some other formatting issues | tb | 1 | -17/+17 | |
pointed out by gofmt (thanks anton) | |||||
2018-08-28 | Remove extra "and" in "These functions and have been available" | tb | 1 | -3/+3 | |
2018-08-28 | zap trailing whitespace | tb | 1 | -7/+7 | |
2018-08-28 | Drop SSLv2, SSLv3 support. | cheloha | 1 | -6/+2 | |
No need to check for SSLv2/3 sessions when printing the tally mark. Also do SSLv23_client_method -> TLS_client_method. ok jsing@ | |||||
2018-08-28 | Check for SSL_write(3) error. | cheloha | 1 | -3/+4 | |
jsing@ notes that this is not a complete solution, as we don't account for retries or partial writes, but that this is a step in a right direction. May want to revisit this later to provide a complete solution. ok jsing@ | |||||
2018-08-27 | tweak failure messages | tb | 1 | -9/+9 | |
2018-08-27 | dedup AES-CBC-PKCS5 encryption and decryption checks | tb | 1 | -66/+24 | |
2018-08-27 | 2x missing "..." | tb | 1 | -3/+3 | |
2018-08-27 | Run Wycheproof AES-CCM testvectors against libcrypto. | tb | 1 | -2/+200 | |
2018-08-27 | n2s and l2n3 finally bite the dust! | jsing | 1 | -7/+1 | |
2018-08-27 | Convert ssl3_get_cert_verify() to CBS and clean up somewhat. | jsing | 1 | -74/+72 | |
ok inoguchi@ | |||||
2018-08-27 | Dedup DTLS header writing code and convert to CBB. | jsing | 1 | -25/+35 | |
There are three versions of the DTLS header writing code, which primarily differ by the fragment offset and fragment length values that differ. Rework dtls1_write_message_header() such that it can be used in all three cases and convert it to CBB in the process. ok inoguchi@ tb@ | |||||
2018-08-27 | Add some missing statics. | jsing | 2 | -5/+5 | |
2018-08-27 | Simplify new session ticket encoding/generation. | jsing | 3 | -84/+90 | |
The original code did a crazy encode/malloc/encode/decode/modify/encode dance, in order to encode a session in the form needed to encrypt then add to a session ticket. By modifying the encoding functions slightly, we can do this entire dance as a single encode. Inspired by similar changes in BoringSSL. ok inoguchi@ tb@ | |||||
2018-08-27 | Fix formatting and grammatical issues with the description of how to use | jsing | 1 | -19/+17 | |
i2d_SSL_SESSION. Also rework the example code so that it is clearer and uses more appropriate names. Input from and ok schwarze@, tb@ | |||||
2018-08-27 | Add protocol and cipher patterns in regress appstest.sh | inoguchi | 1 | -18/+88 | |
2018-08-26 | fix the same "an non" issue found by tb in EVP_EncryptInit.3; | jmc | 1 | -3/+3 | |
2018-08-26 | Check return value of EVP_CipherInit_ex() | tb | 1 | -6/+15 | |
2018-08-26 | Run Wycheproof AES-CBC-PKCS5 testvectors against libcrypto. | tb | 1 | -1/+189 | |
2018-08-26 | Remove some redundant info from log.Fatalf | tb | 1 | -2/+2 | |
2018-08-26 | simplify returned value | tb | 1 | -2/+2 | |
2018-08-26 | Some of the functions in this manual need <openssl/dsa.h>, others | tb | 1 | -3/+45 | |
need <openssl/x509.h>. The functions {d2i,i2d}_DSA_params_{bio,fp}(3) were missing from the manual, so document them. The return values of the i2d_* functions are left undocumented, as these still need to be audited. ok schwarze (lots of input and help as usual) | |||||
2018-08-26 | typo: an nonce -> a nonce | tb | 1 | -3/+3 | |
2018-08-26 | Stop s_server if error occurs in regress appstest.sh | inoguchi | 1 | -4/+13 | |
2018-08-25 | Also run DSA tests with the PEM encoded public key. | tb | 1 | -2/+22 | |
2018-08-24 | update usage for pkcs8; | jmc | 1 | -10/+9 | |
ok tb | |||||
2018-08-24 | tweak previous; | jmc | 1 | -3/+3 | |
2018-08-24 | crank majors after symbol addition/modification/removal | tb | 3 | -6/+6 | |
2018-08-24 | Adjust documentation for SSL_copy_session_id() | tb | 1 | -8/+7 | |
ok jsing | |||||
2018-08-24 | Let SSL_copy_session_id() return an int for error checking. | tb | 3 | -28/+31 | |
Accordingly, add some error checking to SSL_copy_session_id(), BIO_ssl_copy_session_id(), and SSL_dup(). Prompted by OpenSSL commit 17dd65e6e1f Tested in a bulk build by sthen ok jsing | |||||
2018-08-24 | Add const to EVP_PKCS82PKEY(). | tb | 2 | -4/+4 | |
tested in a bulk by sthen ok jsing | |||||
2018-08-24 | Add consts to EVP_PKEY_asn1_set_private() | tb | 8 | -16/+16 | |
Requires adding a const to the priv_decode() member of EVP_PKEY_ASN1_METHOD and adjusting all *_priv_decode() functions. All this is already documented this way. tested in a bulk build by sthen ok jsing | |||||
2018-08-24 | After removing support for broken PKCS#8 formats (it was high time), | tb | 7 | -22/+19 | |
we can add const to PKCS8_pkey_get0(). In order for this to work, we need to sprinkle a few consts here and there. tested in a bulk by sthen ok jsing | |||||
2018-08-24 | The broken pkcs8 formats generated by openssl pkcs -{embed,nooct,nsdb} | tb | 1 | -22/+2 | |
are no longer supported. Remove their documentation. ok jsing | |||||
2018-08-24 | Stop handling broken PKCS#8 formats in openssl(1). | tb | 1 | -52/+2 | |
ok jsing | |||||
2018-08-24 | Remove EVP_PKEY2PKCS8_broken() and PKCS8_set_broken() | tb | 5 | -98/+46 | |
Provide PKCS8_pkey_add1_attr_by_NID() and PKCS8_pkey_get0_attrs(). Remove the whole broken code and simplify pkcs8_priv_key_info_st accordingly. Based on OpenSSL commit 54dbf42398e23349b59f258a3dd60387bbc5ba13 plus some const that was added later. tested in a bulk build by sthen ok jsing |