summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/system.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-10-08fix an indentation that makes me upsetderaadt1-2/+2
2014-10-07Use strdup() instead of malloc() + memcpy().miod2-16/+6
ok doug@ jsing@
2014-10-07EC_KEY_set_group() does an EC_GROUP_dup() of its argument, so we don'tmiod2-16/+4
need to do it in ec_copy_parameters() prior to invoking EC_KEY_set_group(). ok doug@ jsing@
2014-10-06When verifying whether an IP address is in the commonName of ajca1-1/+15
certificate, do not perform wildcard matching. Suggested by Richard Moore (rich@kde) ok tedu@
2014-10-06If we have to match against a wildcard in a cert, verify that it containsjca1-3/+23
at least a domain label before the tld, as in *.example.org. Suggested by Richard Moore (rich@kde) ok tedu@
2014-10-05The fixes to X509_PURPOSE_add() in r1.18 actually could cause a globalmiod2-54/+58
X509_PURPOSE object (obtained with X509_PURPOSE_get0() instead of being allocated in the function) to be freed if modifying that object would fail due to a low memory condition, while this object would still be referenced elsewhere. Fix this by only cleaning the object if we did not allocate it here. While there, fail early if either `name' or `sname' are NULL, rather than allocating an object and realizing we have nothing to strdup() into it. ok guenther@
2014-10-05Be sure to check the stack push operation for success in v2i_POLICY_MAPPINGS();miod2-34/+38
if it fails, free the object we were about to push. Factor error handling to avoid having four copies of about the same code. ok guenther@
2014-10-05In v2i_AUTHORITY_INFO_ACCESS(), separate object allocation from object pushmiod2-6/+16
on a stack; if the latter fails, we need to free the object before returning failure. ok guenther@
2014-10-05Memory leak upon error in set_dist_point_name().miod2-2/+4
ok guenther@
2014-10-05Be sure to check object allocation for success before using them.miod2-10/+20
Tweaks and ok guenther@
2014-10-05Missing deallocation upon error.miod2-4/+6
ok deraadt@ guenther@
2014-10-05Fix memory leak in the error path of v2i_AUTHORITY_KEYID().miod2-6/+12
ok deraadt@ guenther@
2014-10-05compile with c89 (code / decl ordering); from Joakim.Tjernlund@transmode.sederaadt2-4/+6
ok miod
2014-10-05Use more specific curves/formats naming for local variables injsing2-60/+56
ssl_add_clienthello_tlsext() and ssl_add_serverhello_tlsext(), rather than the current generic naming. ok miod@
2014-10-05Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather thanjsing2-22/+4
hand rolling the same code. ok miod@
2014-10-05Make tls1_get_formatlist() behave the same as tls1_get_curvelist() andjsing2-42/+58
return the client format list if the client_formats flag is specified. Use tls1_get_formatlist()/tls1_get_curvelist() in tls1_check_ec_key(), simplifying the code. ok miod@
2014-10-03verify changes are major changetedu1-2/+2
2014-10-03Bump minor for ECHD auto and other recent changes.jsing1-1/+1
2014-10-03Bump minor version for ECDH auto.jsing2-2/+2
While there are no additional symbols, there is an additional command that clients will potentially depend on.
2014-10-03allow disabling hostname and cert verification separately.tedu4-11/+22
if you're careful, cert only verification can be useful. always enable both though, to avoid accidentally leaving one off. ok jsing
2014-10-03Allow "auto" to be specified as an ECDH curve name and make this thejsing2-7/+13
default. This enables automatic handling of ephemeral EC keys. Discussed with reyk@ and tedu@
2014-10-03Add support for automatic ephemeral EC keys.jsing14-26/+152
This allows an SSL server to enable ECDHE ciphers with a single setting, which results in an EC key being generated using the first preference shared curve. Based on OpenSSL with inspiration from boringssl. ok miod@
2014-10-03Use string literals in printf style calls so gcc's -Wformat works.doug8-40/+38
ok tedu@, miod@
2014-10-01openssl.cnf tweaks following recent changes to usr.bin/openssl:sthen1-44/+3
- don't define default_bits, allowing the compiled-in default (now 2048 bits) to take priority. - add commented-out default_md line in case somebody needs an easy way to change this. - remove some sample sections which aren't really useful in the default file (/etc/examples is the place for a more descriptive config, this file should be barebones). Help/OK jsing@. OKs on earlier diff (openssl.cnf only) from phessler@ aja@.
2014-10-01Switch "openssl req" to using SHA256 for hashes and AES256 to encrypt on-disksthen2-12/+12
keys by default (instead of SHA1/3DES) and update documentation to match. Another way to do this is s/NID_sha1/NID_sha256/ in src/crypto/rsa/rsa_ameth.c ("case ASN1_PKEY_CTRL_DEFAULT_MD_NID") but going with the more targetted method above that only affects "openssl req" for now. Help/OK jsing@. OKs on earlier diffs changing openssl.cnf from phessler@ aja@
2014-09-30Clean up EC cipher handling in ssl3_choose_cipher().jsing6-290/+304
The existing code reaches around into various internals of EC, which it should not know anything about. Replace this with a set of functions that that can correctly extract the necessary details and handle the comparisions. Based on a commit to OpenSSL, with some inspiration from boringssl. ok miod@
2014-09-29Previous fix (1.12) would cause a NULL pointer dereference in the error pathmiod2-8/+6
if a NULL stack was passed as argument. Fix this by returning NULL early in that case.
2014-09-29Move cipher configuration handling to the shared SSL configuration functionjsing2-10/+13
so that applies to both the ressl client and server.
2014-09-29Add an option that allows the enabled SSL protocols to be explicitlyjsing6-9/+51
configured. Discussed with several. ok bcook@
2014-09-29When freeing the config, explicitly call ressl_config_clear_keys() ratherjsing1-5/+6
than rerolling our own key clearing code. ok tedu@
2014-09-29check_cert(): be sure to reset ctx->current_crl to NULL before freeing it.miod2-20/+10
X509_STORE_CTX_init(): do not free the X509_STORE_CTX * parameter upon failure, for we did not allocate it and it might not come from the heap, such as in check_crl_path() in this very same file where X509_STORE_CTX_init() gets invoked with a stack address. ok bcook@
2014-09-29X509_NAME_get_text_by_OBJ(): make sure we do not pass a negative size tomiod2-6/+10
memcpy(). ok bcook@
2014-09-29X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the secondmiod2-2/+4
parameter, correctly set param->name to NULL after having freed it. ok bcook@
2014-09-28Wrap long lines and add missing argument name.jsing1-4/+6
2014-09-28Bump minor after adding SSL_CTX_use_certificate_chain().reyk2-2/+2
ok jsing@ miod@
2014-09-28Provide a ressl config function that explicitly clears keys.jsing2-2/+10
Now that ressl config takes copies of the keys passed to it, the keys need to be explicitly cleared. While this can be done by calling the appropriate functions with a NULL pointer, it is simpler and more obvious to call one function that does this for you. ok tedu@
2014-09-28Add a new API function SSL_CTX_use_certificate_chain() that allows toreyk6-54/+111
read the PEM-encoded certificate chain from memory instead of a file. This idea is derived from an older implementation in relayd that was needed to use the function with a privep'ed process in a chroot. Now it is time to get it into LibreSSL to make the API more privsep- friendly and to make it available for other programs and the ressl library. ok jsing@ miod@
2014-09-28X509v3_add_ext(): do not free stuff we did not allocate in the error path.miod2-4/+4
ok bcook@
2014-09-28X509_TRUST_add(): check X509_TRUST_get0() return value before dereferencing it,miod2-30/+46
for it may be NULL. Do not leak memory upon error. ok bcook@
2014-09-28Someone (TM) thought it was smart to save memory by using malloc(1) andmiod2-10/+8
manual field fiddling to create an ASN1_INTEGER object, instead of using M_ASN1_INTEGER_new() which will allocate sizeof(long) bytes. That person had probably never looked into malloc(3) and never heard of allocation size rounding. Thus, replace the obfuscated code with M_ASN1_INTEGER_new() followed by ASN1_INTEGER_set(), to achieve a similar result, without the need for /* version == 0 */ comments. ok bcook@
2014-09-28revamp the config interface to own memory. easier to use correctly withouttedu3-49/+99
caller worrying about leaks or lifetimes. after feedback from jsing
2014-09-27Revert r1.5 and reenable assembler version of ghash now that it has beenmiod2-6/+6
fixed.
2014-09-27Doh, rev 1.4 had left out one routine with both 32-bit and 64-bit code, wheremiod2-0/+4
the 64-bit code has to be disabled under OpenBSD/hppa.
2014-09-27Disable assembler code for ghash on hppa, causes wrong computations in somemiod4-8/+8
cases and breaks TLS 1.2; crank libcrypto.so minor version out of safety and to be able to tell broken versions apart easily.
2014-09-27There is not much point checking ecdhp is not NULL... twice.jsing4-28/+10
ok miod@
2014-09-27Check that the specified curve is one of the client preferences.jsing10-16/+140
Based on OpenSSL. ok miod@
2014-09-27Fix mmap() calls that check for a result other than MAP_FAILED.doug1-1/+1
ok tedu@
2014-09-26X509_STORE_new(): do not leak memory upon error.miod2-28/+34
X509_STORE_get1_certs(), X509_STORE_get1_crls(): check the result of allocations. ok tedu@
2014-09-26X509_issuer_and_serial_hash(): do not leak memory if an error occurs duringmiod2-2/+6
the first EVP block. ok tedu@
2014-09-26X509at_add1_attr(): do not free stuff we did not allocate in the error path.miod2-6/+6
ok tedu@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-27 02:00:53 +0000