| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Install the new manual pages documenting the majority of them.
|
|
|
|
| |
but it is growing to excessive size, so split out RSA_pkey_ctx_ctrl(3).
|
| |
|
| |
|
|
|
|
| |
OpenSSL 1.1.1 pages, which are still under a free license
|
|
|
|
| |
still under a free license, tweaked by me
|
| |
|
| |
|
|
|
|
|
|
| |
as in OpenSSL 1.1.1. I rewrote most of the text for clarity, precision,
and conciseness and added some additional information. A few sentences
from Paul Yang remain.
|
| |
|
|
|
|
| |
feedback and OK tb@
|
| |
|
|
|
|
| |
still under a free license, tweaked by me
|
|
|
|
|
|
| |
The algorithm is insecure and yet its description would spread over
three paragraphs in the cipher list, including remarkable advice
like using a 40 bit key length.
|
|
|
|
|
| |
this moves a large number of functions out of the way that are no
longer the latest and greatest. Also mention a few that were missing.
|
|
|
|
|
|
|
|
|
|
|
|
| |
both resulting pages are still long.
Mention a number of missing functions.
Add some text from the OpenSSL 1.1.1 EVP_aes.pod manual page,
which is still under a free license.
Add missing HISTORY information.
Triggered by tb@ providing EVP_aes_{128,192,256}_wrap(3)
in evp.h rev. 1.74.
|
| |
|
|
|
|
|
|
|
| |
because CRYPTO_set_locking_callback() is now a no-op
and was never documented in the first place;
no text change;
requested by jmc@ long ago
|
|
|
|
| |
from OpenSSL, fixing many bugs and polishing many details
|
| |
|
|
|
|
|
|
| |
covering the remaining functions that were documented in engine(3),
except for seven functions that are completely pointless and that
were merely listed but not really documented.
|
|
|
|
|
| |
covering 60% of the documented functions). The old, abominable
engine(3) manual page shall die soon.
|
|
|
|
|
|
| |
15:19:12, tb@ provided a subset of the DSA_meth_*(3) and RSA_meth_*(3)
functions. Merge the relevant parts of the manual pages from
OpenSSL, heavily tweaked by me, in particular for conciseness.
|
|
|
|
|
|
| |
provided OPENSSL_init_crypto(3) and OPENSSL_init_ssl(3).
Write the documentation from scratch
because the text OpenSSL provides is full of bloat.
|
|
|
|
| |
scratch, tweaks and OK jsing@ and jmc@.
|
|
|
|
|
|
|
| |
X509_OBJECT_get0_X509(3) and X509_OBJECT_get0_X509_CRL(3).
Since they are undocumented in OpenSSL, write a new manual
page from scratch, also documenting five closely related
public functions that have already been available before.
|
|
|
|
|
|
| |
X509_STORE_up_ref(3). X509_STORE_new(3) and X509_STORE_free(3)
have already been available earlier. Import the documentation from
OpenSSL, adding some precision.
|
|
|
|
|
| |
BIO_get_data(3), BIO_set_data(3), and BIO_set_init(3).
Import the documentation from OpenSSL.
|
|
|
|
|
|
| |
X509_get0_signature(3). Merge the documentation from OpenSSL.
Rename the file from X509_get_signature_nid.3 to X509_get0_signature.3
for consistency because we are not losing any history yet.
|
|
|
|
|
| |
BIO_meth_*(). Import the documentation from OpenSSL, with extensive
tweaks by me.
|
|
|
|
|
| |
EVP_PKEY_get0_{DH,DSA,RSA}(3), and RSA_{g,s}et0_key(3)
that tb@ just provided.
|
|
|
|
| |
removing parts that don't apply to OpenBSD.
|
|
|
|
| |
fixing half a dozen bugs and typos and also tweaking the wording a bit.
|
|
|
|
|
|
|
|
|
|
|
|
| |
provided X509_get0_notBefore(3) and its three friends.
Write a manual page from scratch because what OpenSSL has
is confusing and incomplete.
By the way, providing two identical functions differing only
in the constness of the returned structure is crazy.
Are application programmers expected to be too stupid to write
const ASN1_TIME *notBefore = X509_getm_notBefore(x)
if that's what they want?
|
|
|
|
|
| |
X509_get_signature_nid(3). Add a new manual page for it
based on the relevant parts of OpenSSL X509_get0_signature.pod.
|
|
|
|
|
|
|
|
|
|
|
| |
via OpenSSL commit 751148e2 Oct 27 00:11:11 2017 +0200,
including only the parts related to functions that exist
in OpenBSD.
The design of these interfaces is not particularly pretty,
they are not particularly easy to document, and the manual
page does not look particularly good when formatted,
but what can we do, things are as they are...
|
|
|
|
|
|
|
|
| |
from the OpenSSL manual and from code inspection.
Use my own Copyright and license because no Copyright-worthy amount
of text from OpenSSL remains.
And, no, these functions do *NOT* check private keys, not at all.
|
|
|
|
| |
dropping the secmem stuff that we don't want
|
|
|
|
| |
don't have, which implies renaming the file to EVP_PKEY_meth_get0_info.3
|
|
|
|
|
|
|
|
|
| |
the OpenSSL manual page committed on July 27, 2017, and on source
code inspection. Use my own Copyright and license because no
copyright-worthy amount of text from OpenSSL remains.
NOTA BENE:
BUGS Most aspects of the semantics considerably differ from OpenSSL.
|
|
|
|
| |
from Dr. Stephen Henson <steve@openssl.org>, OpenSSL commit d218f3c3
|
| |
|
|
|
|
| |
from Rich Salz <rsalz@openssl.org>, OpenSSL commit 3e5d9da5 etc.
|
|
|
|
|
| |
from Emilia Kasper <emilia@openssl.org>, OpenSSL commit 80770da3,
tweaked by me
|
|
|
|
|
| |
in commit 2ca2e917. Document it here, too, but do not use their
text. Be more concise and more precise at the same time.
|
|
|
|
|
| |
and document ERR_asprintf_error_data as their replacement.
ok jsing@, ingo@
|
|
|
|
| |
jsing@ confirmed that these are public and worth documenting.
|
|
|
|
| |
jsing@ confirmed that these macros are public and worth documenting.
|
|
|
|
|
|
|
|
|
|
|
| |
Not documented by OpenSSL, but listed in <openssl/x509_vfy.h>
and referenced from X509_LOOKUP_hash_dir(3), and clearly more
important than the latter. Fixes three dead links reported by jmc@.
Most of the information from SSL_CTX_load_verify_locations(3) should
probably be moved here, but not all, since the SSL page also talks
about SSL servers and clients and the like. As i'm not completely
sure regarding the boundaries, i'm leaving that as it is for now.
|
|
|
|
|
|
| |
All 36 functions listed in <openssl/asn1.h>
and in OpenSSL doc/man3/d2i_X509.pod,
six of them with wrong prototypes.
|