summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/Makefile (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Merge remainder of rsa_crpt.c into rsa_eay.ctb2023-08-091-2/+1
| | | | | Most of these are one line wrappers around methods implemented in rsa_eay.c by default.
* Move bn_blind.c to rsa_blinding.ctb2023-08-091-2/+2
| | | | discussed with jsing
* Move HAVE_FUNOPEN out of !NOPICtb2023-07-291-5/+1
| | | | | | | | Due to some historic accident, HAVE_FUNOPEN was grouped with DSO_DLFCN and HAVE_DLFCN_H inside !defined(NOPIC). While the two DLFCN bits belong there, HAVE_FUNOPEN doesn't. ok jsing, millert agrees
* Combine ripemd into a single C file.jsing2023-07-281-3/+2
|
* Combine md5 into a single C file.jsing2023-07-281-3/+2
|
* Combine md4 into a single C file.jsing2023-07-281-3/+2
|
* Remove various ${thing}_optionstb2023-07-281-2/+1
| | | | | | | | | | Various, ancient ciphers exposed some of their innards via an _options() API. Apart from openssl version/speed, only some lua thingie in nmap ever looked at these. Go figure. hppa testing by miod, i386 testing by sthen. Thanks! ok jsing
* Remove BUF_[a-z]* APItb2023-07-281-2/+1
| | | | | | | | This are a bunch of strange string handlers with NULL checks that make no real sense except to some devs who like to sprinkle them everywhere. Fortunately, nothing uses these anymore, so they can go. ok jsing
* Remove ASN1_bn_print() and ASN1_buf_print()tb2023-07-281-2/+1
| | | | | | | | | | ASN1_bn_print() is a hilariously bad API that was replaced with a saner interface internally. ASN1_buf_print() isn't terrible, but it is too specialized to be of real use. It was only exposed because ASN1_bn_print() was already there. Its only use had been in the EdDSA printing code before it was replaced with an internal helper. ok jsing
* Set OPENSSL_NO_ENGINE, remove engine codetb2023-07-281-26/+1
| | | | | | | | | | ENGINE was special. It's horrible code even by the low standards of this library. Some ports may now try to use the stubs which will fail, but the fallout from this should be minimal. Of course there are various language bindings that expose the ENGINE API. OpenSSL 3 disabling ENGINE by default will likely help fixing this at some point. ok jsing
* Drop DSO and define OPENSSL_NO_DSOtb2023-07-281-11/+2
| | | | | | | | DSO and in particular dlopen() was used for dynamic engines, which we removed a long time ago and for dynamic conf modules, which we removed only very recently. Now remove this dangerous interface. ok jsing
* Drop the comp moduletb2023-07-281-7/+1
| | | | | | | | | | | opensslfeatures.h has long defined OPENSSL_NO_COMP and the build with ZLIB was broken in openssl(1) since 2015 and in libcrypto since 2022. ZLIB was unifdefed a while ago, now we can retire the public API. The comp.h header stays devoid of code because a number of ports use it for historic reasons. ok jsing
* Excise ECDH_METHODtb2023-07-281-3/+1
| | | | | | | | Unlike ECDSA_METHOD, this has been unused forever but kind of needed to stay for symmetry with ECDSA_METHOD. Now we can finally take it behind the barn and remove its tendrils into ENGINE. ok jsing
* Remove ECDH errorstb2023-07-281-2/+1
| | | | | | | Much like the ECDSA errors, the ECDH errors have been unused for a while. Garbage collect them. ok jsing
* Remove ECDSA_METHODtb2023-07-281-3/+1
| | | | | | | | After smtpd (in base) and libtls finally switched from ECDSA_METHOD to EC_KEY_METHOD, much of the ECDSA_METHOD code was neutered. Remove the remaining public API as well as numerous tentacles into ENGINE. ok jsing
* Remove ecs_err.ctb2023-07-281-2/+1
| | | | | | | These error codes have been unused for a while, so the public API loading them is pointless. ok jsing
* Provide a bunch of always failing ENGINE APItb2023-07-211-1/+2
| | | | | | | | | | | | | | | This commit adds a few symbols under OPENSSL_NO_ENGINE. They will be used after the main ENGINE code is disabled in the next bump. The ecosystem is mostly prepared for dealing with a libcrypto compiled with OPENSSL_NO_ENGINE. There are a few stragglers like M2Crypto, dovecot and the latest apr-util release (fixed in their development branch). To avoid intrusive patching in these ports, we need to keep a bunch of ENGINE symbols around despite adding OPENSSL_NO_ENGINE. This of course meant patching some other ports, but that was way easier. ok jsing
* Remove some ancient cruft that hasn't been used in agestb2023-07-201-3/+1
| | | | discussed with jsing
* One source file per line.jsing2023-07-071-5/+10
|
* Add bn_printf(), a replacement for ASN1_bn_print()tb2023-07-061-1/+2
| | | | | | | | | | ASN1_bn_print() will be removed in an upcoming bump. This adds an internal API that covers the same functionality but doesn't require that the caller pass in a sufficiently large scratch space that ASN1_bn_print() may or may not use. In addition, this takes a format string, which allows us to ditch some extra dances. ok jsing
* Merge ECDH code that will stay into ecdh.ctb2023-07-051-3/+2
|
* Merge ECDSA code that will stay into ecdsa.ctb2023-07-051-3/+2
| | | | discussed with jsing
* Drop the no longer necessary -DLIBRESSL_CRYPTO_INTERNALtb2023-06-291-2/+2
| | | | ok miod
* With ech_local.h gone, we no longer need to -I ecdhtb2023-06-251-2/+1
|
* Make BN_num_bits() independent of bn->top.jsing2023-06-211-1/+2
| | | | | | | | Provide bn_bitsize(), which performs a constant time scan of a BN in order to determine the bit size of the BN value. Use this for BN_num_bits() such that it is no longer dependent on the bn->top value. ok tb@
* Unifdef ZLIBtb2023-06-111-2/+1
| | | | | | | This has long been unused code and compilation with -DZLIB was broken for a long time after BIO was made opaque. ok jsing
* Recommit -Wshadow now that the warning on BIG_ENDIAN is fixedtb2023-05-071-2/+2
|
* Backout -Wshadow, it breaks build on powerpc64.bluhm2023-05-071-2/+2
|
* Use -Wshadow with clangtb2023-05-051-2/+2
| | | | ok jsing (a very long time ago)
* Link rsa_x931.c to buildtb2023-05-051-1/+2
|
* Unifdef LIBRESSL_HAS_POLICY_DAG and remove it from the Makefiletb2023-04-281-2/+1
| | | | with beck
* Take the old policy code behind the barntb2023-04-281-7/+1
| | | | | | | | It can go play in the fields with all the other exponential time policy "code". discussed with jsing ok & commit message beck
* Enable the new policy checking code in x509_policy.ctb2023-04-281-4/+2
| | | | ok beck jsing
* Allow compiling with -DHAS_DAG to enable the policy check with a DAG.tb2023-04-261-1/+4
| | | | ok beck
* Add the new policy code to the build.beck2023-04-261-1/+2
| | | | ok tb@ jsing@
* Remove the now unused bio_pk7.ctb2023-04-261-2/+1
|
* Remove e_old.c againtb2023-04-261-2/+1
| | | | | | | | | Also remove nonexistent symbols #defined to other symbols that confuse some linkers in -portable. This commit entails no ABI change on OpenBSD. Discussed with jsing
* Reinstate e_old.c it is still used by -portabletb2023-04-251-1/+2
|
* e_old can also gotb2023-04-251-2/+1
|
* GF2m bites the dust. It won't be missed.tb2023-04-251-5/+1
|
* Remove proxy cert remnantstb2023-04-251-3/+1
|
* Remove NETSCAPE_CERT_SEQUENCEtb2023-04-251-2/+1
|
* Remove SXNETtb2023-04-251-2/+1
| | | | Unused and no authorative information was found online in 2016
* Remove CTS modetb2023-04-251-2/+1
| | | | ok jsing
* Remove the horror show that is bn_nist and ecp_nisttb2023-04-251-3/+1
| | | | | | This code is full of problematic C and is also otherwise of questionable quality. It is far from constant time and jsing informs me it also isn't faster. Good riddance.
* Remove X9.31 supporttb2023-04-251-3/+1
| | | | ok jsing
* Comment out a few now unused files from Makefiletb2023-04-251-14/+14
|
* Remove the now unused x509_enum.ctb2023-04-211-2/+1
|
* Hook sha3 up to build.jsing2023-04-171-1/+3
| | | | ok tb@
* Move BN_bn2mpi()/BN_mpi2bn() into bn_convert.cjsing2023-04-171-2/+1
|