summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/hidden/openssl (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove more ERR crufttb2023-07-281-4/+1
| | | | | | | Ever wondered how many entries populate the various err hashes? Me neither. Remove this garbage. ok jsing
* Remove ERR_{get,set}_implementation()tb2023-07-281-3/+1
| | | | | | | Much like ex_data, applications can make the library use their own error stack implementation. Well, except as of right now they no longer can. ok jsing
* Make ex_data implementations internaltb2023-07-281-4/+1
| | | | | | | | | | | | | To state the obvious: library suffers from way too much extensibility. In theory, applications can implement their own ex_data implementation. In practice, none did. A glance at ex_data.c might give an idea as to why. Make this internal so this particular turd can be replaced with something slightly saner. Also sync up the CRYPTO_EX_INDEX_* defines with OpenSSL - at least the parts we support. ok jsing
* Drop BIO_n{read,write}{,0}()tb2023-07-281-5/+1
| | | | | | | | | | | | | | | | | | This is one of those strange things that should never have made it into a security-oriented libraries. From BIO_s_bio.3: .\" The following non-copying I/O functions are intentionally undocumented .\" because they seem fragile and unused by anything: It was used in a single place: the gorgeous ssltest. I'm not smart enough to follow. Also: /* WARNING: The non-copying interface is largely untested as of yet * and may contain bugs. */ Oh, really? Into the great bitbucket in the sky you go. ok jsing
* Remove the get_rfc*_prime_*() APItb2023-07-281-9/+1
| | | | | | | Inconsistently named with the rest of the API, so OpenSSL 1.1 introduced the same functions with a BN_ prefix. We'll keep the latter. ok jsing
* Make BN_BLINDING internaltb2023-07-282-14/+2
| | | | | | | | | | RSA is pretty bad. In my most optimistic moments I dream of a world that stopped using it. That won't happen during my lifetime, unfortunately. Blinding is one way of making it a little less leaky. Unfortunately this side-channel leak mitigation leaked out of the library for no good reason. Let's at least fix that aspect of it. ok jsing
* Remove ASN1_bn_print() and ASN1_buf_print()tb2023-07-281-3/+1
| | | | | | | | | | ASN1_bn_print() is a hilariously bad API that was replaced with a saner interface internally. ASN1_buf_print() isn't terrible, but it is too specialized to be of real use. It was only exposed because ASN1_bn_print() was already there. Its only use had been in the EdDSA printing code before it was replaced with an internal helper. ok jsing
* Make ASN1_{primitive,template}_* internaltb2023-07-281-7/+1
| | | | | | | These were long removed from the public OpenSSL API, so we can do the same. Remove ASN1_template_{d2i,i2d}() - those are unused internally. ok jsing
* Make ASN.1 BIO internaltb2023-07-282-7/+2
| | | | | | | | | | | | With every bump we can remove a bit more of the ASN.1 BIO and the streaming interface. At some point enough will be internal so that we can rewrite it and bring it in a shape where mere mortals can follow all the twists and turns. This is the next step: BIO_f_asn1(3) goes away and takes BIO_asn1_{get,set}_{prefix,suffix}() with it, a bunch of functions helping along in a write-after-free recently. The getters go away, the setters stay for now. ok jsing
* Set OPENSSL_NO_ENGINE, remove engine codetb2023-07-282-5/+2
| | | | | | | | | | ENGINE was special. It's horrible code even by the low standards of this library. Some ports may now try to use the stubs which will fail, but the fallout from this should be minimal. Of course there are various language bindings that expose the ENGINE API. OpenSSL 3 disabling ENGINE by default will likely help fixing this at some point. ok jsing
* Drop DSO and define OPENSSL_NO_DSOtb2023-07-281-54/+0
| | | | | | | | DSO and in particular dlopen() was used for dynamic engines, which we removed a long time ago and for dynamic conf modules, which we removed only very recently. Now remove this dangerous interface. ok jsing
* Drop the comp moduletb2023-07-281-37/+0
| | | | | | | | | | | opensslfeatures.h has long defined OPENSSL_NO_COMP and the build with ZLIB was broken in openssl(1) since 2015 and in libcrypto since 2022. ZLIB was unifdefed a while ago, now we can retire the public API. The comp.h header stays devoid of code because a number of ports use it for historic reasons. ok jsing
* Merge ecdh.h into ec.htb2023-07-282-32/+3
| | | | | | | The remaining two ECDH interfaces are relocated into ec.h. ecdh.h remains. It does nothing but include ec.h. ok jsing
* Excise ECDH_METHODtb2023-07-281-9/+1
| | | | | | | | Unlike ECDSA_METHOD, this has been unused forever but kind of needed to stay for symmetry with ECDSA_METHOD. Now we can finally take it behind the barn and remove its tendrils into ENGINE. ok jsing
* Merge ecdsa.h into ec.htb2023-07-282-47/+18
| | | | | | | | | Move the remaining ECDSA API into ec.h to match OpenSSL 1.1's interface better. In particular, the EC_KEY sign and verify method accessors are moved to the right header. Whether the rest of the ECDSA stuff belongs there is debatable, but that was upstream's choice. ok jsing
* Remove ECDSA_METHODtb2023-07-281-8/+1
| | | | | | | | After smtpd (in base) and libtls finally switched from ECDSA_METHOD to EC_KEY_METHOD, much of the ECDSA_METHOD code was neutered. Remove the remaining public API as well as numerous tentacles into ENGINE. ok jsing
* Remove ecs_err.ctb2023-07-281-2/+1
| | | | | | | These error codes have been unused for a while, so the public API loading them is pointless. ok jsing
* Make extended ECDSA signing routines internaltb2023-07-281-4/+1
| | | | | | | | | | | | | | | | | | ECDSA_sign_setup() permits precomputing the values of the inverse of the random k and the corresponding r. These can then be fed into the signing routines ECDSA_{do_,}sign_ex() multiple times if needed. This is not a great idea and the interface adds a lot of unwanted complexity. Not to mention that nothing ever used this correctly - if s works out to 0, a special error code is thrown requesting that the caller provide new kinv and r values. Unsurprisingly, nobody ever checked for that special error code. ok jsing This commit marks the start of a libcrypto major bump. Do not build the tree until I bumped the shlib_version and synced file sets (in about 35 commits).
* Hide symbols in dhbeck2023-07-081-0/+74
| | | | ok tb@
* Hide symbols in curve22519beck2023-07-081-0/+34
| | | | ok tb@
* Hide symbols in modes.hbeck2023-07-081-0/+57
| | | | ok tb@
* Hide symbols in gost.beck2023-07-081-0/+71
| | | | ok tb@ after some puking in his mouth.
* hide symbols in dsabeck2023-07-081-0/+94
| | | | ok tb@
* Hide symbols in cmacbeck2023-07-081-0/+38
| | | | ok tb@
* Hide symbols in objectsbeck2023-07-081-0/+61
| | | | ok tb@
* Hide symbols in rsabeck2023-07-081-0/+142
| | | | ok tb@
* Hide symbols in shabeck2023-07-081-0/+52
| | | | ok tb@
* Hide symbols in bnbeck2023-07-081-0/+163
| | | | ok tb@
* Hide symbols in txt_dbbeck2023-07-081-0/+35
| | | | ok tb@
* Hide symbols in md4 and md5beck2023-07-082-0/+68
| | | | ok tb@
* Hide symbols in cast, idea, and ocspbeck2023-07-083-0/+263
| | | | ok tb@
* Hide symbols in crypto.hbeck2023-07-081-0/+79
| | | | ok jsing@
* Hide symbols in cms, comp, conf, and bufferbeck2023-07-084-0/+253
| | | | ok jsing@
* Hide symbols in dso and ctbeck2023-07-082-0/+139
| | | | ok jsing@
* Hide symbols in sm3beck2023-07-081-0/+32
| | | | ok tb@ jsing@
* unbreak build when namespaced, file was here in my tree but didn't managebeck2023-07-081-0/+39
| | | | to cvs add
* Unbreak the namespace build after a broken mk.conf and tool misfire hadbeck2023-07-0716-526/+14
| | | | | | | | me aliasing symbols not in the headers I was procesing. This unbreaks the namespace build so it will pass again ok tb@
* Hide symbols in hkdf, evp, err, ecdsa and ecbeck2023-07-075-0/+769
| | | | ok jsing@
* Hide symbols in lhash, pem, and rc2beck2023-07-073-0/+229
| | | | ok jsing@
* hide symbols in sm, rand, and poly1305beck2023-07-074-0/+140
| | | | ok jsing@
* Hide symbols in tsbeck2023-07-071-0/+219
| | | | ok jsing@
* Hide symbols in asn1 and biobeck2023-07-053-0/+455
| | | | ok jsing@
* upstream hidden file #include_next workaround for MS C compilersbcook2023-07-059-9/+45
| | | | ok beck@, tb@
* Hide symbols in chachabeck2023-07-051-0/+31
| | | | ok jsing@
* Delete some more references to dead policy code.tobhe2023-07-031-12/+1
| | | | | | Fixes -DNAMESPACE ok tb@
* Remove proxy cert api remmnantstb2023-04-301-9/+1
|
* Take X509_POLICY_NODE_print() behind the barntb2023-04-261-2/+1
| | | | | | | | This used to be public API but is now only used for debug code that has certainly never been used since it was released to the public. It drags that debug nonsense with it. ok beck
* Remove SXNETtb2023-04-251-15/+1
| | | | Unused and no authorative information was found online in 2016
* X509_STORE_get1_{certs,crls} become X509_STORE_CTX_*tb2023-04-251-3/+3
| | | | This matches the OpenSSL 1.1 API a bit better.
* Move the policy tree code to internal-onlytb2023-04-251-3/+1
| | | | | A few hooks remain in the legacy validator, which will soon be replaced with something better. The rest of the tentacles are now largely contained.
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-04 10:49:52 +0000