Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | GOST crypto algorithms (well, most of them), ported from the removed GOST | miod | 2014-11-09 | 1 | -2/+322 | |
| | | | | | | | | | | | | engine to regular EVP citizens, contributed by Dmitry Eremin-Solenikov; libcrypto bits only for now. This is a verbatim import of Dmitry's work, and does not compile in this state; the forthcoming commits will address these issues. None of the GOST code is enabled in libcrypto yet, for it still gets compiled with OPENSSL_NO_GOST defined. However, the public header gost.h will be installed. | |||||
* | EC_KEY_set_group() does an EC_GROUP_dup() of its argument, so we don't | miod | 2014-10-07 | 1 | -8/+2 | |
| | | | | | need to do it in ec_copy_parameters() prior to invoking EC_KEY_set_group(). ok doug@ jsing@ | |||||
* | Fix memory leak. | logan | 2014-07-13 | 1 | -1/+2 | |
| | | | | OK from beck@ and miod@ | |||||
* | if (x) FOO_free(x) -> FOO_free(x). | miod | 2014-07-12 | 19 | -276/+151 | |
| | | | | | | | Improves readability, keeps the code smaller so that it is warmer in your cache. review & ok deraadt@ | |||||
* | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 3 | -11/+14 | |
| | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | |||||
* | Explicitly include <openssl/opensslconf.h> in every file that references | jsing | 2014-07-10 | 16 | -29/+59 | |
| | | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. | |||||
* | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 2 | -2/+6 | |
| | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | |||||
* | remove unused, private version strings except SSL_version_str | bcook | 2014-07-09 | 1 | -4/+1 | |
| | | | | | | Also remove unused des_ver.h, which exports some of these strings, but is not installed. ok miod@ tedu@ | |||||
* | Avoid a NULL deref in i2d_ECPrivateKey() when an EC_KEY lacks the public key | miod | 2014-07-01 | 1 | -2/+2 | |
| | | | | | | member (which is perfectly acceptable). From BoringSSL (Adam Langley), commit f71a27920a903c9c36bcb31e68781b17674d3fd2 | |||||
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 26 | -24/+26 | |
| | ||||||
* | malloc() result does not need a cast. | deraadt | 2014-06-07 | 7 | -7/+7 | |
| | | | | ok miod | |||||
* | copy a comment placed in other files; req from miod | deraadt | 2014-05-31 | 1 | -1/+3 | |
| | ||||||
* | more: no need for null check before free | deraadt | 2014-05-30 | 7 | -32/+15 | |
| | | | | ok tedu guenther | |||||
* | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -6/+3 | |
| | ||||||
* | ok, next pass after review: when possible, put the reallocarray arguments | deraadt | 2014-05-29 | 1 | -1/+1 | |
| | | | | in the "size_t nmemb, size_t size" | |||||
* | convert 53 malloc(a*b) to reallocarray(NULL, a, b). that is 53 | deraadt | 2014-05-29 | 5 | -13/+20 | |
| | | | | | | | | | potential integer overflows easily changed into an allocation return of NULL, with errno nicely set if need be. checks for an allocations returning NULL are commonplace, or if the object is dereferenced (quite normal) will result in a nice fault which can be detected & repaired properly. ok tedu | |||||
* | Everything sane has stdio, and FILE *. we don't need ifdefs for this. | beck | 2014-05-29 | 2 | -6/+0 | |
| | | | | ok to firebomb from tedu@ | |||||
* | calloc instead of malloc/memset. from Benjamin Baier | tedu | 2014-05-25 | 3 | -12/+6 | |
| | ||||||
* | if (x) free(x) -> free(x); semantic patch generated with coccinelle, carefully | miod | 2014-05-22 | 2 | -10/+5 | |
| | | | | eyeballed before applying. Contributed by Cyril Roelandt on tech@ | |||||
* | Stop being a dummy... presumably these are left overs from pedantic mode | jsing | 2014-05-15 | 4 | -8/+0 | |
| | | | | | | that were not wrapped with #if PEDANTIC. ok miod@ | |||||
* | Typo in C99 field initializer introduced in r1.3; | miod | 2014-05-09 | 1 | -1/+1 | |
| | | | | reported by Steven Chamberlain | |||||
* | Replace Apache v2 license with ISC license. | matthew | 2014-05-09 | 4 | -50/+50 | |
| | | | | | Thanks to Google for agreeing to offer the code under more agreeable licensing terms! | |||||
* | kill some more VMS ifdefs | giovanni | 2014-05-08 | 3 | -12/+0 | |
| | | | | ok miod@ | |||||
* | don't free memory unless we allocated it. | tedu | 2014-05-07 | 1 | -2/+4 | |
| | | | | | reported to openssl by David Ramos (rt 3338) stealing commit from logan, who's run away. ok miod. | |||||
* | knf approximation | tedu | 2014-05-06 | 24 | -8619/+9136 | |
| | ||||||
* | Add support for the french ANSSI FRP256v1 elliptic curve. | miod | 2014-05-01 | 1 | -1/+33 | |
| | | | | | | | | | | While not to be considered a good choice of elliptic curve (refer to http://safecurves.cr.yp.to/ for more details), it is nevertheless deemed a good decision to allow developers with requirements to use such a curve, to be able to do this via a crypto library allowing for much better choices to be made, without having to change (much of) their code to get better crypto. ok beck@ deraadt@ | |||||
* | Add Brainpool elliptic curves. From OpenSSL RT#2239 via ${DAYJOB}. | miod | 2014-05-01 | 1 | -1/+444 | |
| | | | | | Be sure to rerun `make includes' after updating. ok tedu@ beck@ deraadt@ | |||||
* | Use C99 initializers for the various FOO_METHOD structs. More readable, and | miod | 2014-04-27 | 9 | -347/+329 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@ | |||||
* | return after error instead of plowing ahead. noticed by mancha1 at zoho | tedu | 2014-04-20 | 1 | -0/+1 | |
| | ||||||
* | kill REF_PRINT/REF_CHECK debugging framework noone would use | deraadt | 2014-04-17 | 1 | -20/+0 | |
| | | | | ok miod | |||||
* | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 12 | -113/+113 | |
| | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||||
* | we don't use these files for building | tedu | 2014-04-15 | 1 | -84/+0 | |
| | ||||||
* | remove FIPS mode support. people who require FIPS can buy something that | tedu | 2014-04-15 | 5 | -41/+0 | |
| | | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt | |||||
* | In EC_POINT_invert(), actually check the correct function pointer for NULL | miod | 2014-04-15 | 1 | -1/+1 | |
| | | | | | before attempting to invoke it; trivial one-liner in OpenSSL RT #2569 ignored for 2.5 years. | |||||
* | Moved to regress/lib/libcrypto. | miod | 2014-04-15 | 1 | -1489/+0 | |
| | ||||||
* | remove auto-generated dependencies from the old unused build system, so | deraadt | 2014-04-14 | 1 | -179/+0 | |
| | | | | | that it is easier to find code pieces. They are getting in the way. ok miod | |||||
* | Cope with the removal of openssl/symhacks.h | deraadt | 2014-04-13 | 3 | -3/+0 | |
| | ||||||
* | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 4 | -17/+24 | |
| | ||||||
* | This commit was generated by cvs2git to track changes on a CVS vendor | miod | 2014-04-13 | 5 | -17/+33 | |
|\ | | | | | branch. | |||||
| * | Import OpenSSL 1.0.1g | miod | 2014-04-13 | 8 | -33/+56 | |
| | | ||||||
* | | resolve conflicts | djm | 2012-10-13 | 10 | -887/+463 | |
| | | ||||||
* | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2012-10-13 | 1 | -2/+34 | |
|\ \ | | | | | | | branch. | |||||
| * | | import OpenSSL-1.0.1c | djm | 2012-10-13 | 2 | -95/+282 | |
| | | | ||||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2012-10-13 | 14 | -85/+7337 | |
|\ \ \ | | |/ | |/| | branch. | |||||
| * | | import OpenSSL-1.0.1c | djm | 2012-10-13 | 23 | -879/+7552 | |
| | | | ||||||
| * | | OpenSSL 1.0.0f: import upstream source | djm | 2012-01-05 | 1 | -1/+1 | |
| | | | ||||||
* | | | OpenSSL 1.0.0f: merge | djm | 2012-01-05 | 1 | -1/+1 | |
| | | | ||||||
* | | | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 3 | -2/+10 | |
| | | | ||||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2011-11-03 | 2 | -5/+16 | |
|\| | | | | | | | | branch. | |||||
| * | | import OpenSSL 1.0.0e | djm | 2011-11-03 | 5 | -7/+26 | |
| | | |