summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/system.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2016-11-06add an .Xr that was missingschwarze1-1/+2
2016-11-05document BN_set_negative() and BN_is_negative();schwarze6-516/+69
feedback and OK bcook@, OK jsing@
2016-11-05Part one of the alt chains changes, bring in newer modifications tobeck3-73/+411
VERIFY_PARAMS - based on boringssl. ok jsing@ miod@
2016-11-05Add objects for X25519, X448, Ed25519 and Ed448.jsing2-0/+15
ok miod@
2016-11-05One of the error paths would attempt to access not-yet-initialized locals.miod1-2/+2
Simply return since there is nothing more to do. Spotted by coverity. ok jsing@ beck@
2016-11-05Do a partial CBB conversion of ssl3_send_server_key_exchange(), which willjsing1-52/+67
make it easier to do further clean up. ok beck@ miod@
2016-11-05fix misplaced quote by tls_peer_ocsp_this_updatebcook1-2/+2
2016-11-05zap trailing whitespace, and add -o to usage() and help (-h);jmc2-6/+9
2016-11-05tweak previous;jmc1-6/+6
2016-11-05move manual pages from doc/ to man/ for consistency with otherschwarze85-169/+169
libraries, in particular considering that there are unrelated files in doc/; requested by jsing@ and beck@
2016-11-05Check BIO_new*() for failure.miod2-4/+9
ok beck@ jsing@
2016-11-05More X509_STORE_CTX_set_*() return value checks.miod3-12/+16
ok beck@ jsing@
2016-11-05bump minors for symbol addition for ocsp and x25519 symbol additionsbeck3-3/+3
2016-11-05Add support for server side OCSP stapling to libtls.beck9-16/+98
Add support for server side OCSP stapling to netcat.
2016-11-05Add regress for X25519, converted from BoringSSL.jsing3-1/+150
2016-11-05after getting rid of the pod files, clean up the Makefiles; ok bcook@schwarze4-41/+23
2016-11-05Add support for X25519.jsing5-1/+5136
This brings in code from BoringSSL, which is mostly taken from SUPERCOP. ok beck@ bcook@
2016-11-05rename ocsp_ctx to ocspbeck3-68/+68
ok jsing@
2016-11-05minor mandoc -Tlint nitsschwarze3-9/+8
2016-11-05add the missing content, sorry for committing an empty fileschwarze1-0/+69
2016-11-05Stricter validation of inputs of OPENSSL_asc2uni() and OPENSSL_uni2asc().miod1-17/+34
While there, try to make these slightly less obfuscated. ok beck@ jsing@
2016-11-05convert the remaining manual pages from pod to mdocschwarze25-1650/+3615
2016-11-05X509_STORE_CTX_set_*() may fail, so check for errors.miod1-4/+14
ok beck@
2016-11-05Do not leak the ressources possibly allocated by EVP_MD_CTX_init() in themiod1-2/+3
trivial error path of PKCS12_key_gen_uni(). ok beck@ jsing@
2016-11-05Set PROG so that the binary correctly gets recompiled when the librariesmiod1-11/+5
it is linked against change. ok beck@ jsing@
2016-11-05Make sure PEM_SealInit() will correctly destroy the PEM_ENCODE_SEAL_CTXmiod1-8/+22
upon error, as there is no way to do this outside of PEM_SealFinal(), which can only work if PEM_SealInit() succeeded... ok beck@ jsing@
2016-11-05No need to duplicate definitions from evp.h locally.miod2-14/+2
ok bock@ jsing@
2016-11-05Stop abusing the ternary operator to decide which function to call in amiod1-3/+6
return statement. ok beck@ jsing@
2016-11-05further tweakage, with an improvement from joel;jmc1-5/+5
ok jsing schwarze
2016-11-05Convert ssl3_get_server_kex_ecdhe() to CBS, simplifying tls1_check_curve()jsing3-62/+41
in the process. This also fixes a long standing bug where tls1_ec_curve_id2nid() is called with only one byte of the curve ID. ok beck@ miod@
2016-11-05Remove generated Symbols.map on make clean.jsing2-3/+5
ok guenther@
2016-11-04tweak previousschwarze1-34/+39
2016-11-04Move pqueue regress from libcrypto to libssl, since that's where the pqueuejsing5-5/+5
code now lives. Also unbreak the regress following the symbol hiding changes in libssl.
2016-11-04Rename ssl3_get_key_exchange() to ssl3_get_server_key_exchange(), sincejsing3-7/+7
that's what it really is. ok miod@
2016-11-04Build with WARNINGS=Yes.jsing1-1/+3
2016-11-04Avoid shadowing the socket global.jsing1-3/+3
ok miod@
2016-11-04Make the tls_keypair_new() function a valid prototype.jsing1-2/+2
2016-11-04Avoid another signed vs unsigned comparison.jsing1-2/+6
ok miod@
2016-11-04Tidy up the usage of peer_ecdh_tmp, following the fixed ECDH removal.jsing1-13/+5
ok beck@
2016-11-04Kill a bunch of OLD_ASN1 usage by replacing ASN1_{d2i,i2d}_* withjsing7-53/+107
ASN1_item_{d2i,i2d}_* equivalents. ok guenther@ miod@
2016-11-04Mark a couple local functions as staticguenther2-4/+4
ok jsing@ beck@
2016-11-04The *_method_data structures can be staticguenther6-21/+21
ok jsing@
2016-11-04Add an explict list of exported symbols with just the functionsguenther5-11/+289
declared in the public headers, and use __{BEGIN,END}_HIDDEN_DECLS in the internal headers to optimize internal functions ok jsing@
2016-11-04Add an explict list of exported symbols with just the functions declaredguenther3-2/+85
in <tls.h>, and use __{BEGIN,END}_HIDDEN_DECLS in tls_internal.h to optimize internal functions ok jsing@
2016-11-04Nuke the KRB5 ASN.1 code from orbit.jsing3-984/+1
ok beck@
2016-11-04Ride the current major bump and enable assembler code for nist 256p curve,miod4-3/+19
on amd64 only for now. Stanzas to enable it on arm, i386 and sparc64 are provided but commented out for lack of testing due to the machine room being currently in storage. ok jsing@
2016-11-04make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hiddenbeck14-43/+133
functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@
2016-11-04Make do_dtls1_write() static to d1_pkt.c and delete declarations forguenther2-8/+6
three functions that were removed a while ago ok jsing@
2016-11-04Fix some linewrapping glitchesguenther1-7/+5
ok jsing@
2016-11-04Some tests require internal symbols; have them link with the staticguenther4-8/+10
libssl or libtls so they can continue to see them after the shared library namespace is cleaned up ok jsing@