summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/hidden/openssl (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Excise ECDH_METHODtb2023-07-281-9/+1
| | | | | | | | Unlike ECDSA_METHOD, this has been unused forever but kind of needed to stay for symmetry with ECDSA_METHOD. Now we can finally take it behind the barn and remove its tendrils into ENGINE. ok jsing
* Merge ecdsa.h into ec.htb2023-07-282-47/+18
| | | | | | | | | Move the remaining ECDSA API into ec.h to match OpenSSL 1.1's interface better. In particular, the EC_KEY sign and verify method accessors are moved to the right header. Whether the rest of the ECDSA stuff belongs there is debatable, but that was upstream's choice. ok jsing
* Remove ECDSA_METHODtb2023-07-281-8/+1
| | | | | | | | After smtpd (in base) and libtls finally switched from ECDSA_METHOD to EC_KEY_METHOD, much of the ECDSA_METHOD code was neutered. Remove the remaining public API as well as numerous tentacles into ENGINE. ok jsing
* Remove ecs_err.ctb2023-07-281-2/+1
| | | | | | | These error codes have been unused for a while, so the public API loading them is pointless. ok jsing
* Make extended ECDSA signing routines internaltb2023-07-281-4/+1
| | | | | | | | | | | | | | | | | | ECDSA_sign_setup() permits precomputing the values of the inverse of the random k and the corresponding r. These can then be fed into the signing routines ECDSA_{do_,}sign_ex() multiple times if needed. This is not a great idea and the interface adds a lot of unwanted complexity. Not to mention that nothing ever used this correctly - if s works out to 0, a special error code is thrown requesting that the caller provide new kinv and r values. Unsurprisingly, nobody ever checked for that special error code. ok jsing This commit marks the start of a libcrypto major bump. Do not build the tree until I bumped the shlib_version and synced file sets (in about 35 commits).
* Hide symbols in dhbeck2023-07-081-0/+74
| | | | ok tb@
* Hide symbols in curve22519beck2023-07-081-0/+34
| | | | ok tb@
* Hide symbols in modes.hbeck2023-07-081-0/+57
| | | | ok tb@
* Hide symbols in gost.beck2023-07-081-0/+71
| | | | ok tb@ after some puking in his mouth.
* hide symbols in dsabeck2023-07-081-0/+94
| | | | ok tb@
* Hide symbols in cmacbeck2023-07-081-0/+38
| | | | ok tb@
* Hide symbols in objectsbeck2023-07-081-0/+61
| | | | ok tb@
* Hide symbols in rsabeck2023-07-081-0/+142
| | | | ok tb@
* Hide symbols in shabeck2023-07-081-0/+52
| | | | ok tb@
* Hide symbols in bnbeck2023-07-081-0/+163
| | | | ok tb@
* Hide symbols in txt_dbbeck2023-07-081-0/+35
| | | | ok tb@
* Hide symbols in md4 and md5beck2023-07-082-0/+68
| | | | ok tb@
* Hide symbols in cast, idea, and ocspbeck2023-07-083-0/+263
| | | | ok tb@
* Hide symbols in crypto.hbeck2023-07-081-0/+79
| | | | ok jsing@
* Hide symbols in cms, comp, conf, and bufferbeck2023-07-084-0/+253
| | | | ok jsing@
* Hide symbols in dso and ctbeck2023-07-082-0/+139
| | | | ok jsing@
* Hide symbols in sm3beck2023-07-081-0/+32
| | | | ok tb@ jsing@
* unbreak build when namespaced, file was here in my tree but didn't managebeck2023-07-081-0/+39
| | | | to cvs add
* Unbreak the namespace build after a broken mk.conf and tool misfire hadbeck2023-07-0716-526/+14
| | | | | | | | me aliasing symbols not in the headers I was procesing. This unbreaks the namespace build so it will pass again ok tb@
* Hide symbols in hkdf, evp, err, ecdsa and ecbeck2023-07-075-0/+769
| | | | ok jsing@
* Hide symbols in lhash, pem, and rc2beck2023-07-073-0/+229
| | | | ok jsing@
* hide symbols in sm, rand, and poly1305beck2023-07-074-0/+140
| | | | ok jsing@
* Hide symbols in tsbeck2023-07-071-0/+219
| | | | ok jsing@
* Hide symbols in asn1 and biobeck2023-07-053-0/+455
| | | | ok jsing@
* upstream hidden file #include_next workaround for MS C compilersbcook2023-07-059-9/+45
| | | | ok beck@, tb@
* Hide symbols in chachabeck2023-07-051-0/+31
| | | | ok jsing@
* Delete some more references to dead policy code.tobhe2023-07-031-12/+1
| | | | | | Fixes -DNAMESPACE ok tb@
* Remove proxy cert api remmnantstb2023-04-301-9/+1
|
* Take X509_POLICY_NODE_print() behind the barntb2023-04-261-2/+1
| | | | | | | | This used to be public API but is now only used for debug code that has certainly never been used since it was released to the public. It drags that debug nonsense with it. ok beck
* Remove SXNETtb2023-04-251-15/+1
| | | | Unused and no authorative information was found online in 2016
* X509_STORE_get1_{certs,crls} become X509_STORE_CTX_*tb2023-04-251-3/+3
| | | | This matches the OpenSSL 1.1 API a bit better.
* Move the policy tree code to internal-onlytb2023-04-251-3/+1
| | | | | A few hooks remain in the legacy validator, which will soon be replaced with something better. The rest of the tentacles are now largely contained.
* Remove i2d_PKCS7_NDEF from the hidden version as welltb2023-04-251-2/+1
|
* Introduce X509_get0_uids() accessor functionjob2023-02-231-1/+2
| | | | | | | By introducing X509_get0_uids(), one can add RPKI profile compliance checks to conform the absence of the issuerUID and subjectUID. OK tb@ jsing@
* Prepare to provide UI_null()tb2022-12-171-1/+2
| | | | | | | | | | xmlsec needs this, nothing else. Our linkers link libxmlsec1-openssl, only warns and since nothing uses this library in ports, this wasn't noticed for a long time. Reported by Thomas Mitterfellner ok jsing
* Getters and setters for the check_issued() callbacktb2022-12-011-1/+4
| | | | | | | | | | | | | | | Open62541 uses X509_STORE_CTX_get_check_issued(), so provide it along with X509_STORE_{get,set}_check_issued(). As you would expect, they all return or take an X509_STORE_CTX_check_issued_fn. The getters aren't const in OpenSSL 1.1, but they now are in OpenSSL 3... These will be made available in the next minor bump and will ship in the stable release of LibreSSL 3.7 Part of OpenSSL commit 1060a50b See also https://github.com/libressl-portable/portable/issues/748 ok beck jsing
* Hide public symbols in libcrypto/x509 .c filesbeck2022-11-143-0/+724
| | | | ok tb@
* Hide symbols in libcrypto/uibeck2022-11-121-0/+78
| | | | ok jsing@
* Hide symbols in libcrypto/pkcs12beck2022-11-121-0/+102
| | | | ok jsing@
* Hide symbols in libcrypto/pkcs7beck2022-11-121-0/+126
| | | | | | | | This applies the guentherizer 9000(tm) to pkcs7, after moving several pkcs7 funcitions back to pkcs7 that were in x509/x_all.c for reasons known only to the miasma. ok jsing@
* Hide symbols in libcrypto/stackbeck2022-11-111-0/+46
| | | | | | | Automated change from the first attempts at the semi automated Guentherizer 2000. ok jsing@ tb@ joshua@
* Add support for symbol hiding disabled by default.beck2022-11-111-0/+36
Fully explained in libcrypto/README. TL;DR make sure libcrypto and libssl's function calls internally and to each other are via symbol names that won't get overridden by linking other libraries. Mostly work by guenther@, which will currently be gated behind a build setting NAMESPACE=yes. once we convert all the symbols to this method we will do a major bump and pick up the changes. ok tb@ jsing@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-26 02:11:34 +0000