Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2014-04-17 | RAND_seed now does nothing, so skip the operation | deraadt | 2 | -12/+0 | |
2014-04-17 | Do not feed RSA private key information to the random subsystem as | deraadt | 6 | -22/+0 | |
entropy. It might be fed to a pluggable random subsystem.... What were they thinking?! ok guenther | |||||
2014-04-17 | remove duplicated tests in if statements | jsg | 2 | -8/+8 | |
ok krw@ sthen@ deraadt@ | |||||
2014-04-17 | Fix for ", " issue in jsing's knf script | guenther | 1 | -2/+2 | |
2014-04-17 | Do not need to map to another silly name for unistd.h here either | deraadt | 1 | -1/+0 | |
2014-04-17 | unistd.h is always in the same place; no need to #include the result of | deraadt | 27 | -52/+29 | |
a maze of conditional #define's | |||||
2014-04-17 | minimal fix for ', ' issue in jsing's indent script | deraadt | 1 | -8/+9 | |
2014-04-17 | OpenSSL PR#3309: when looking for an extension, set the last found position | sthen | 2 | -6/+6 | |
to -1 to properly search all extensions. ok tedu@ From http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=300b9f0b70 | |||||
2014-04-17 | Remove the ossltests target, these are now all in libcrypto regress | jsg | 1 | -208/+2 | |
except sha256t/sha512t which are likely to be removed for license reasons. | |||||
2014-04-17 | move enginetest to regress as was done with the other tests | jsg | 4 | -284/+9 | |
2014-04-17 | call the correct decrypt function in aes_cbc_cipher() | jsg | 2 | -2/+2 | |
From: commit e9c80e04c1a3b5a0de8e666155ab4ecb2697a77d Author: Andy Polyakov <appro@openssl.org> Date: Wed Dec 18 21:42:46 2013 +0100 evp/e_[aes|camellia].c: fix typo in CBC subroutine. It worked because it was never called. Our e_camellia.c does not have this problem. ok miod@ deraadt@ | |||||
2014-04-17 | tag some functions with bounded. idea and ok djm | tedu | 2 | -6/+12 | |
2014-04-16 | TANSTAAFL - delete the buf freelist code. if you need a better malloc, get | tedu | 9 | -260/+9 | |
a better malloc. ok beck deraadt | |||||
2014-04-16 | add back SRP. i was being too greedy. | tedu | 23 | -2/+1804 | |
2014-04-16 | Clean up dangerous strncpy use. This included a use where the resulting | beck | 18 | -150/+34 | |
string was potentially not nul terminated and a place where malloc return was unchecked. while we're at it remove dummytest.c ok miod@ | |||||
2014-04-16 | - Why do we hide from the OpenSSL police, dad? | miod | 12 | -228/+46 | |
- Because they're not like us, son. They use macros to wrap stdio routines, for an undocumented (OPENSSL_USE_APPLINK) use case, which only serves to obfuscate the code. ok tedu@ | |||||
2014-04-16 | > As I walk through the valley of the shadow of death | tedu | 20 | -1212/+8 | |
> I take a look at my life and realize there's nothin' left > Cause I've been blasting and laughing so long, > That even my mama thinks that my mind is gone Remove even more unspeakable evil being perpetuated in the name of VMS. (and lesser evils done in the name of others.) ok miod | |||||
2014-04-16 | lots of ifdef cleanup | tedu | 3 | -400/+1 | |
2014-04-16 | repair knf | tedu | 1 | -1/+1 | |
2014-04-16 | No need to define ANSI_SOURCE and NO_ERR. TERMIOS kept until ui/ui_openssl.c | miod | 1 | -2/+2 | |
gets a second trim. | |||||
2014-04-16 | No need to build with -DOPENSSL_NO_CAPIENG and -DOPENSSL_NO_HW_xxx for all | miod | 1 | -10/+1 | |
now removed engines. | |||||
2014-04-16 | quoth the readme: | tedu | 128 | -16802/+0 | |
NOTE: Don't expect any of these programs to work with current OpenSSL releases, or even with later SSLeay releases. ok miod | |||||
2014-04-16 | delete a few leftovers | tedu | 2 | -10/+2 | |
2014-04-16 | fix a few bugs observed on http://www.viva64.com/en/b/0250/ | tedu | 7 | -7/+5 | |
ok krw miod | |||||
2014-04-16 | Thanks to the knobs in http://tools.ietf.org/html/rfc5746, we have a knob | beck | 4 | -14/+6 | |
to say "allow this connection to negotiate insecurely". de-fang the code that respects this option to ignore it. ok miod@ | |||||
2014-04-16 | disentangle SRP code from TLS | tedu | 23 | -1804/+2 | |
2014-04-16 | whack the ifdef pinata: | tedu | 2 | -520/+10 | |
OPENSSL_SYSNAME_VXWORKS OPENSSL_SYS_VMS OPENSSL_SYS_MSDOS OPENSSL_UNISTD OPENSSL_SYS_WIN16 WIN_CONSOLE_BUG OPENSSL_SYS_WINCE SGTTY OPENSSL_SYS_MACINTOSH_CLASSIC MAC_OS_GUSI_SOURCE OPENSSL_SYS_NETWARE OPENSSL_SYS_SUNOS __DJGPP__ OPENSSL_SYS_BEOS OPENSSL_SYS_WIN32 | |||||
2014-04-16 | SSLv3_client_method() doesn't support TLSv1.*; use SSLv23_client_method() | guenther | 2 | -4/+4 | |
the for anything where version negotiation would be useful. Also, constipate a couple formatting strings to make compilers and linkers happier. ok tedu@ | |||||
2014-04-16 | Zero-pad usec format to handle values less than 100,000 correctly | guenther | 2 | -2/+2 | |
ok matthew@ tedu@ | |||||
2014-04-16 | Initial KNF. | jsing | 5 | -1143/+1006 | |
2014-04-16 | Initial KNF. | jsing | 4 | -1035/+825 | |
2014-04-16 | Mandatory Surgeon Guenther's Warning: This code could not possibly be | tedu | 2 | -48/+48 | |
correct because it doesn't zerofill the front of usecs, but that's the way I found it. a more thorough emulation of the old code, but with fewer whacky snprintf pointer arithmetic antics. ok beck guenther | |||||
2014-04-16 | Initial KNF. | jsing | 2 | -1903/+1662 | |
2014-04-16 | More KNF. | jsing | 2 | -100/+119 | |
2014-04-16 | First pass for KNF. | jsing | 2 | -1294/+1235 | |
2014-04-16 | revert. the full horror has only now revealed itself. | tedu | 2 | -52/+42 | |
2014-04-16 | replace some bio_snprintf crazy with regular snprintf. | tedu | 2 | -42/+52 | |
beck had a diff to convert to strftime, but it's easier to verify this is functionally the same. ok beck. | |||||
2014-04-16 | Kill the bogus "send an SSLv3/TLS hello in SSLv2 format" crap from | guenther | 14 | -650/+346 | |
the SSLv23_* client code. The server continues to accept it. It also kills the bits for SSL2 SESSIONs; even when the server gets an SSLv2-style compat handshake, the session that it creates has the correct version internally. ok tedu@ beck@ | |||||
2014-04-16 | More KNF. | jsing | 20 | -208/+218 | |
2014-04-16 | Make this byzantine horror a shell of it's former self by stubbing the | beck | 2 | -1320/+34 | |
functions. The ability to set the debug mem functions died with mem.c, but some of the rest of this is still exposed API so we can't delete it.. yet... ok tedu@ | |||||
2014-04-16 | Some software expects RAND_status() to return 1 for success, so always | reyk | 2 | -4/+20 | |
return 1 in the arc4random backend because there is no possible error condition. Unbreaks lynx, git and friends. ok miod@ dcoppa@ | |||||
2014-04-16 | Clean up non-fatal error handling - we know which error numbers we have | jsing | 6 | -210/+0 | |
defined. ok miod@ beck@ | |||||
2014-04-16 | unbreak install; /usr/share/man/man3/EVP_PKEY_print_private.3 should link to | sthen | 1 | -2/+2 | |
/usr/share/man/man3/EVP_PKEY_print_public.3 not itself, from deraadt | |||||
2014-04-16 | Sync the list of man pages for libcrypto, explicity rename conflicting | mpi | 25 | -179/+1662 | |
pages instead of doing it in the Makefiles and move a libssl page where it belongs. ok miod@ | |||||
2014-04-16 | Remove pointless man pages that were not installed. | mpi | 4 | -383/+0 | |
ok miod@ | |||||
2014-04-16 | adapt to test file moves | jsg | 1 | -63/+50 | |
md2test and rsatest targets removed as the files have been removed | |||||
2014-04-16 | adapt to the less old des api | jsg | 1 | -49/+49 | |
2014-04-16 | Remove _CRAY references. Note that this pleads for the use of <stdint.h> | miod | 12 | -80/+10 | |
fixed-width types instead of choosing int or long depending upon what we think the architecture support. | |||||
2014-04-16 | Remove DES_read_password and DES_read_2passwords which are `modern' flavours | miod | 5 | -290/+1 | |
of des_old.h routines, acting as wrappers about the OpenSSL UI API. Nothing should use these functions directly. Riding the recent libcrypto major bump (in a `des' car). | |||||
2014-04-16 | Your operating system memory allocation functions are your friend. If they | beck | 5 | -884/+400 | |
are not please fix your operating system. Replace mem.c with an API-compatible wrapper that just calls the system functions and does not allow a one word modification of a variable in a running shared library to turn on memory debug functions that expose things that should not be seen. ok tedu@ |