summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/hidden/openssl (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Make ASN.1 BIO internaltb2023-07-282-7/+2
| | | | | | | | | | | | With every bump we can remove a bit more of the ASN.1 BIO and the streaming interface. At some point enough will be internal so that we can rewrite it and bring it in a shape where mere mortals can follow all the twists and turns. This is the next step: BIO_f_asn1(3) goes away and takes BIO_asn1_{get,set}_{prefix,suffix}() with it, a bunch of functions helping along in a write-after-free recently. The getters go away, the setters stay for now. ok jsing
* Set OPENSSL_NO_ENGINE, remove engine codetb2023-07-282-5/+2
| | | | | | | | | | ENGINE was special. It's horrible code even by the low standards of this library. Some ports may now try to use the stubs which will fail, but the fallout from this should be minimal. Of course there are various language bindings that expose the ENGINE API. OpenSSL 3 disabling ENGINE by default will likely help fixing this at some point. ok jsing
* Drop DSO and define OPENSSL_NO_DSOtb2023-07-281-54/+0
| | | | | | | | DSO and in particular dlopen() was used for dynamic engines, which we removed a long time ago and for dynamic conf modules, which we removed only very recently. Now remove this dangerous interface. ok jsing
* Drop the comp moduletb2023-07-281-37/+0
| | | | | | | | | | | opensslfeatures.h has long defined OPENSSL_NO_COMP and the build with ZLIB was broken in openssl(1) since 2015 and in libcrypto since 2022. ZLIB was unifdefed a while ago, now we can retire the public API. The comp.h header stays devoid of code because a number of ports use it for historic reasons. ok jsing
* Merge ecdh.h into ec.htb2023-07-282-32/+3
| | | | | | | The remaining two ECDH interfaces are relocated into ec.h. ecdh.h remains. It does nothing but include ec.h. ok jsing
* Excise ECDH_METHODtb2023-07-281-9/+1
| | | | | | | | Unlike ECDSA_METHOD, this has been unused forever but kind of needed to stay for symmetry with ECDSA_METHOD. Now we can finally take it behind the barn and remove its tendrils into ENGINE. ok jsing
* Merge ecdsa.h into ec.htb2023-07-282-47/+18
| | | | | | | | | Move the remaining ECDSA API into ec.h to match OpenSSL 1.1's interface better. In particular, the EC_KEY sign and verify method accessors are moved to the right header. Whether the rest of the ECDSA stuff belongs there is debatable, but that was upstream's choice. ok jsing
* Remove ECDSA_METHODtb2023-07-281-8/+1
| | | | | | | | After smtpd (in base) and libtls finally switched from ECDSA_METHOD to EC_KEY_METHOD, much of the ECDSA_METHOD code was neutered. Remove the remaining public API as well as numerous tentacles into ENGINE. ok jsing
* Remove ecs_err.ctb2023-07-281-2/+1
| | | | | | | These error codes have been unused for a while, so the public API loading them is pointless. ok jsing
* Make extended ECDSA signing routines internaltb2023-07-281-4/+1
| | | | | | | | | | | | | | | | | | ECDSA_sign_setup() permits precomputing the values of the inverse of the random k and the corresponding r. These can then be fed into the signing routines ECDSA_{do_,}sign_ex() multiple times if needed. This is not a great idea and the interface adds a lot of unwanted complexity. Not to mention that nothing ever used this correctly - if s works out to 0, a special error code is thrown requesting that the caller provide new kinv and r values. Unsurprisingly, nobody ever checked for that special error code. ok jsing This commit marks the start of a libcrypto major bump. Do not build the tree until I bumped the shlib_version and synced file sets (in about 35 commits).
* Hide symbols in dhbeck2023-07-081-0/+74
| | | | ok tb@
* Hide symbols in curve22519beck2023-07-081-0/+34
| | | | ok tb@
* Hide symbols in modes.hbeck2023-07-081-0/+57
| | | | ok tb@
* Hide symbols in gost.beck2023-07-081-0/+71
| | | | ok tb@ after some puking in his mouth.
* hide symbols in dsabeck2023-07-081-0/+94
| | | | ok tb@
* Hide symbols in cmacbeck2023-07-081-0/+38
| | | | ok tb@
* Hide symbols in objectsbeck2023-07-081-0/+61
| | | | ok tb@
* Hide symbols in rsabeck2023-07-081-0/+142
| | | | ok tb@
* Hide symbols in shabeck2023-07-081-0/+52
| | | | ok tb@
* Hide symbols in bnbeck2023-07-081-0/+163
| | | | ok tb@
* Hide symbols in txt_dbbeck2023-07-081-0/+35
| | | | ok tb@
* Hide symbols in md4 and md5beck2023-07-082-0/+68
| | | | ok tb@
* Hide symbols in cast, idea, and ocspbeck2023-07-083-0/+263
| | | | ok tb@
* Hide symbols in crypto.hbeck2023-07-081-0/+79
| | | | ok jsing@
* Hide symbols in cms, comp, conf, and bufferbeck2023-07-084-0/+253
| | | | ok jsing@
* Hide symbols in dso and ctbeck2023-07-082-0/+139
| | | | ok jsing@
* Hide symbols in sm3beck2023-07-081-0/+32
| | | | ok tb@ jsing@
* unbreak build when namespaced, file was here in my tree but didn't managebeck2023-07-081-0/+39
| | | | to cvs add
* Unbreak the namespace build after a broken mk.conf and tool misfire hadbeck2023-07-0716-526/+14
| | | | | | | | me aliasing symbols not in the headers I was procesing. This unbreaks the namespace build so it will pass again ok tb@
* Hide symbols in hkdf, evp, err, ecdsa and ecbeck2023-07-075-0/+769
| | | | ok jsing@
* Hide symbols in lhash, pem, and rc2beck2023-07-073-0/+229
| | | | ok jsing@
* hide symbols in sm, rand, and poly1305beck2023-07-074-0/+140
| | | | ok jsing@
* Hide symbols in tsbeck2023-07-071-0/+219
| | | | ok jsing@
* Hide symbols in asn1 and biobeck2023-07-053-0/+455
| | | | ok jsing@
* upstream hidden file #include_next workaround for MS C compilersbcook2023-07-059-9/+45
| | | | ok beck@, tb@
* Hide symbols in chachabeck2023-07-051-0/+31
| | | | ok jsing@
* Delete some more references to dead policy code.tobhe2023-07-031-12/+1
| | | | | | Fixes -DNAMESPACE ok tb@
* Remove proxy cert api remmnantstb2023-04-301-9/+1
|
* Take X509_POLICY_NODE_print() behind the barntb2023-04-261-2/+1
| | | | | | | | This used to be public API but is now only used for debug code that has certainly never been used since it was released to the public. It drags that debug nonsense with it. ok beck
* Remove SXNETtb2023-04-251-15/+1
| | | | Unused and no authorative information was found online in 2016
* X509_STORE_get1_{certs,crls} become X509_STORE_CTX_*tb2023-04-251-3/+3
| | | | This matches the OpenSSL 1.1 API a bit better.
* Move the policy tree code to internal-onlytb2023-04-251-3/+1
| | | | | A few hooks remain in the legacy validator, which will soon be replaced with something better. The rest of the tentacles are now largely contained.
* Remove i2d_PKCS7_NDEF from the hidden version as welltb2023-04-251-2/+1
|
* Introduce X509_get0_uids() accessor functionjob2023-02-231-1/+2
| | | | | | | By introducing X509_get0_uids(), one can add RPKI profile compliance checks to conform the absence of the issuerUID and subjectUID. OK tb@ jsing@
* Prepare to provide UI_null()tb2022-12-171-1/+2
| | | | | | | | | | xmlsec needs this, nothing else. Our linkers link libxmlsec1-openssl, only warns and since nothing uses this library in ports, this wasn't noticed for a long time. Reported by Thomas Mitterfellner ok jsing
* Getters and setters for the check_issued() callbacktb2022-12-011-1/+4
| | | | | | | | | | | | | | | Open62541 uses X509_STORE_CTX_get_check_issued(), so provide it along with X509_STORE_{get,set}_check_issued(). As you would expect, they all return or take an X509_STORE_CTX_check_issued_fn. The getters aren't const in OpenSSL 1.1, but they now are in OpenSSL 3... These will be made available in the next minor bump and will ship in the stable release of LibreSSL 3.7 Part of OpenSSL commit 1060a50b See also https://github.com/libressl-portable/portable/issues/748 ok beck jsing
* Hide public symbols in libcrypto/x509 .c filesbeck2022-11-143-0/+724
| | | | ok tb@
* Hide symbols in libcrypto/uibeck2022-11-121-0/+78
| | | | ok jsing@
* Hide symbols in libcrypto/pkcs12beck2022-11-121-0/+102
| | | | ok jsing@
* Hide symbols in libcrypto/pkcs7beck2022-11-121-0/+126
| | | | | | | | This applies the guentherizer 9000(tm) to pkcs7, after moving several pkcs7 funcitions back to pkcs7 that were in x509/x_all.c for reasons known only to the miasma. ok jsing@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-09-09 16:24:55 +0000