summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/engine (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Explicitly include <openssl/opensslconf.h> in every file that referencesjsing2014-07-109-12/+27
| | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.
* Stop including standard headers via cryptlib.h - pull in the headers thatjsing2014-07-108-9/+24
| | | | | | are needed in the source files that actually require them. ok beck@ miod@
* remove unused dynamic_cmd_defns_empty structure.bcook2014-07-091-4/+1
| | | | ok miod@ deraadt@ guenther@
* correct issetugid sense as spotted by Stijn van Drongelen.deraadt2014-06-291-3/+7
| | | | Substantially expand the conditional to reduce potential for error.
* Since this is a library, place issetugid() before every getenv()deraadt2014-06-231-2/+3
| | | | ok miod
* More KNF.jsing2014-06-221-5/+5
|
* KNF.jsing2014-06-223-208/+203
|
* KNF.jsing2014-06-226-961/+1081
|
* More KNF.jsing2014-06-223-9/+9
|
* tags as requested by miod and teduderaadt2014-06-1228-15/+28
|
* c-file-style hints, begone; ok beckderaadt2014-06-111-1/+1
|
* Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receivesderaadt2014-06-103-1365/+1
| | | | | | | | | | | | | collateral damage. The syncronous nature of this mechanism has hampered performance for symmetric crypto relative to brute-force cpu. The assymetric crypto support never really materialized in drivers. So abandon the complexity. ok tedu beck mikeb some disagrement from djm but if he wants to test /dev/crypto ciphers he should do it without this this gigantic API in the way
* KNF.jsing2014-06-108-756/+756
|
* KNF.jsing2014-06-1011-435/+516
|
* use memset instead of bzeroderaadt2014-06-091-2/+2
|
* malloc() result does not need a cast.deraadt2014-06-072-4/+3
| | | | ok miod
* A few months back there was a big community fuss regarding direct-usederaadt2014-06-023-143/+0
| | | | | | | | | | | | of the intel RDRAND instruction. Consensus was RDRAND should probably only be used as an additional source of entropy in a mixer. Guess which library bends over backwards to provide easy access to RDRAND? Yep. Guess which applications are using this support? Not even one... but still, this is being placed as a trap for someone. Send this support straight to the abyss. ok kettenis
* more: no need for null check before freederaadt2014-05-301-8/+4
| | | | ok tedu guenther
* no need for null check before free. from Brendan MacDonelltedu2014-05-301-2/+1
|
* convert 53 malloc(a*b) to reallocarray(NULL, a, b). that is 53deraadt2014-05-291-1/+1
| | | | | | | | | potential integer overflows easily changed into an allocation return of NULL, with errno nicely set if need be. checks for an allocations returning NULL are commonplace, or if the object is dereferenced (quite normal) will result in a nice fault which can be detected & repaired properly. ok tedu
* if (x) free(x) -> free(x); semantic patch generated with coccinelle, carefullymiod2014-05-221-2/+1
| | | | eyeballed before applying. Contributed by Cyril Roelandt on tech@
* Expand the OPENSSL_{GLOBAL,EXPORT,IMPORT,EXTERN} macros - this rids thejsing2014-05-222-6/+6
| | | | | | libssl tree from all uses of these defines. ok miod@
* kill some more VMS ifdefsgiovanni2014-05-081-4/+0
| | | | ok miod@
* add additional includes from eng_cryptodev.cjsg2014-05-071-0/+5
| | | | | makes this compile with OPENSSL_NO_DEPRECATED defined. ok deraadt@
* Remove WIN32, WIN64 and MINGW32 tentacles.miod2014-04-283-14/+1
| | | | | | | | Also check for _LP64 rather than __arch64__ (the former being more reliable than __LP64__ or __arch64__) to tell 64-bit int platforms apart from 32-bit int platforms. Loosely based upon a diff from Martijn van Duren on tech@
* Use C99 initializers for the various FOO_METHOD structs. More readable, andmiod2014-04-274-62/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@
* Put explicit (void) in function declarations and shuffle keywords in somemiod2014-04-2710-10/+10
| | | | | declaration to pass -Wextra, should we want to add it to CFLAGS. No binary change.
* Replace all use of ERR_add_error_data with ERR_asprintf_error_data.beck2014-04-263-6/+6
| | | | | | | | This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@
* Make libssl and libcrypto compile with -Werrorbeck2014-04-231-1/+1
| | | | ok miod@
* Restore beck's rev 1.3: snprintf() was reviewedguenther2014-04-201-1/+1
|
* We'll interpret a (void) cast on snprintf() to mean it's been verified thatguenther2014-04-191-1/+1
| | | | | | truncation is either desirable, not an issue, or is detected and handled later ok deraadt@
* kill REF_PRINT/REF_CHECK debugging framework noone would usederaadt2014-04-172-14/+2
| | | | ok miod
* Get rid of MS Visual C compiler and Intel C compiler specific defines.miod2014-04-171-132/+1
|
* fix BIO_snprintf usage in here.beck2014-04-171-8/+19
| | | | ok tedu@
* Change library to use intrinsic memory allocation functions instead ofbeck2014-04-174-20/+20
| | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
* move enginetest to regress as was done with the other testsjsg2014-04-171-283/+0
|
* we don't use these files for buildingtedu2014-04-151-91/+0
|
* Remove the GOST engine: It is not compiled or used and depends on thereyk2014-04-152-6/+0
| | | | | | | | "dynamic engine" feature that is not enabled in our build. People who need it can still pull it out of the Attic; if it is to have a Russian engine just because it's a Russian engine. OK deraadt@ beck@
* Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversionsbeck2014-04-151-1/+1
| | | | | where the return value is ignored changing to (void) snprintf. ok deraadt@
* Remove eng_cryptodev.c (merged into old-name hw_cryptodev.c); movemiod2014-04-144-1460/+38
| | | | | | | undo the move of crypto/engines/eng_padlock to engines/e_padlock. Requested by reyk@. Note that eng_padlock is not compiled in currently.
* remove auto-generated dependencies from the old unused build system, soderaadt2014-04-141-362/+0
| | | | | that it is easier to find code pieces. They are getting in the way. ok miod
* Remove the GMP engine: It was an experimental engine using libgmp asreyk2014-04-142-6/+0
| | | | | | | an alternative backend for BIGNUM calculations. It is PoC code that is not enabled in OpenSSL and probably not used by anymore. ok deraadt@
* Remove the CAPI engine: It is a backend for the Windows CryptoAPI andreyk2014-04-142-4/+0
| | | | | | could be maintained in an external package. "it should probably go" beck@
* Remove the nuron engine. The static engine is not standalone and thereyk2014-04-142-4/+0
| | | | FPGA-based device is long obsolete.
* Remove the nCipher CHIL engine. It is not standalone and depends onreyk2014-04-142-20/+0
| | | | external libraries that aren't covered by the same license.
* Cope with the removal of openssl/symhacks.hderaadt2014-04-131-1/+0
|
* Remove the AEP engine: it is not standalone and doesn't seem to bereyk2014-04-132-4/+0
| | | | | | | | | relevant anymore. OpenSSL should have a better way to include 3rd party engines: either completely and free or external. But including a wrapper for a non-free wrapper in the code base does not make much sense and could also be provided by the vendor. ok deraadt@
* Remove the Atalla engine: It is not standalone and depends on externalreyk2014-04-132-4/+0
| | | | | | | | | non-free libraries. OpenSSL should have a better way to include 3rd party engines: either completely free or external. But including a wrapper for a non-free wrapper in the code base does not make much sense and could also be provided by the vendor. ok deraadt@
* Remove the cswift engine: it is not standalone and we don't have thereyk2014-04-132-4/+0
| | | | | | | | | | | | | hardware. The vendor_defns/cswift.h does not specify a copyright and theoretically defaults to the OpenSSL license, but it also mentions that it includes parts that have been "clipped" from CryptoSwift's proprietary headers. This file should better include an explicit copyright statement or mention OpenSSL's library instead of the ambiguous "Attribution notice". ok deraadt@
* Remove the "sureware" engine:reyk2014-04-132-4/+0
| | | | | | | | | | | | The vendor_defns/sureware.h file by Baltimore Technologies Ltd. has a copyright that does not grant rights! Vendor files should either include a compatible license in the copyright statement or use OpenSSL's defaults, but adding a copyright statement without any terms is not acceptable. It should not have been included in the first place. ok deraadt@