| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
| |
|
|
|
|
| |
from OpenSSL, fixing many bugs and polishing many details
|
|
|
|
| |
to the argument of UI_create_method(3). Adjust the manual.
|
|
|
|
|
| |
to the ASN1_OBJECT argment of X509_NAME_add_entry_by_OBJ(3).
Adjust the manual.
|
|
|
|
| |
to the input argument of ASN1_STRING_to_UTF8(3). Adjust the manual.
|
|
|
|
| |
to the input argument of i2o_ECPublicKey(3). Adjust the manual.
|
|
|
|
| |
to both arguments of X509_check_private_key(3). Adjust the manual.
|
|
|
|
|
| |
tb@ added const qualifiers to the pointer arguments of some X509_get_ext*(3)
and X509_REVOKED_get_ext*(3) functions. Adjust the manual.
|
|
|
|
|
| |
tb@ added a const qualifier to the X509_NAME argument of these output
functions. Adjust the manual.
|
|
|
|
|
| |
tb@ added const qualifiers to some arguments of X509_NAME read accessors.
Adjust the manual.
|
|
|
|
|
|
|
| |
to the X509_NAME_ENTRY argument of X509_NAME_add_entry(3) and in
x509.h rev. 1.55 2018/05/18 18:02:07 to the "bytes" argument of
X509_NAME_add_entry_by_OBJ(3) and X509_NAME_add_entry_by_NID(3).
Adjust the manual.
|
|
|
|
|
| |
added const qualifiers to some arguments of some X509_NAME_ENTRY functions.
Adjust the manual.
|
|
|
|
|
| |
to one argument each of X509_EXTENSION_set_object(3)
and X509_EXTENSION_get_critical(3). Adjust the manual.
|
| |
|
|
|
|
| |
More logical ordering of EVP_PKEY_base_id(3) and EVP_PKEY_id(3) while here.
|
|
|
|
|
|
|
|
|
|
| |
It makes no sense to have method enumerators public, but the function
to retrieve the method of a specific public key undocumented.
Besides, it is confusing to have EVP_PKEY_asn1_get0(3) documented
without mentioning the very different EVP_PKEY_get0_asn1(3).
Remove a duplicate .Xr while here,
and reference the related accessor EVP_PKEY_base_id(3).
Triggered by tb@ adding a const qualifier to the argument.
|
|
|
|
|
|
|
| |
It is clearly public because it is declared in <openssl/evp.h>,
refenced from EVP_PKEY_asn1_set_public(3), and similar to the
documented functions DH_bits(3) and RSA_bits(3).
Triggered by tb@ adding a const qualifier to its argument.
|
|
|
|
| |
to the "pass" and "name" arguments of PKCS12_create(3). Adjust the manual.
|
|
|
|
|
| |
to the "name", "header", and "data" arguments of PEM_write(3) and
PEM_write_bio(3). Adjust the manual.
|
|
|
|
|
| |
to the "url" argument of OCSP_crlID_new(3) and to the "urls"
argument of OCSP_url_svcloc_new(3). Adjust the manuals.
|
|
|
|
|
| |
to the argument of X509_get_subject_name(3) and X509_get_issuer_name(3).
Adjust the manual.
|
|
|
|
| |
to the arguments of OCSP_cert_id_new(3). Adjust the manual.
|
|
|
|
| |
to the "obj" argument of X509v3_get_ext_by_OBJ(3). Adjust the manual.
|
|
|
|
| |
to the "sig" argument of EVP_DigestVerifyFinal(3). Adjust the manual.
|
|
|
|
|
| |
to the argument of BIO_new_accept(3), BIO_new_connect(3), and
BIO_new_mem_buf(3). Update the documentation.
|
|
|
|
| |
to return value of BIO_s_mem(3). Update the manual page.
|
|
|
|
|
| |
to the return value of BIO_f_base64(3), BIO_f_cipher(3), and
BIO_f_base64(3). Update the documentation.
|
|
|
|
| |
to some function arguments. Update the documentation.
|
|
|
|
| |
to the prototypes of several functions. Update the documentation.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
carefully document constant time vs. non-constant time operation
of BN_div(3), BN_mod_exp(3), and BN_mod_inverse(3).
Until the work that is required on the ill-designed BN_exp(3) and
BN_gcd(3) interfaces can be undertaken, also document the imperfections
in their behaviour, for now. Finally, mention BN_mod_exp(3) behaviour
for even moduli.
Delete the vague statement about some functions automatically
setting BN_FLG_CONSTTIME. It created a false sense of security.
Do not rely on it: not all relevant functions do that.
Topic brought up by beck@, significant feedback and OK jsing@.
|
|
|
|
|
| |
to some parameters of some functions. Update the documentation.
Add a few additional missing const qualifiers while here.
|
|
|
|
|
| |
While here, include a patch from tb@
adding the missing return type to ENGINE_ctrl() in the SYNOPSIS.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
* Correct documentation of DH_new(3), DH_free(3), DSA_new(3), DSA_free(3),
RSA_new(3), and RSA_free(3) with respect to reference counting.
* Stop referencing engine(3).
|
|
|
|
|
|
|
| |
and more concise.
* Correct the description of the return values of DH_set_method(3)
and DSA_set_method(3).
* Stop referencing engine(3).
|
|
|
|
|
|
|
|
|
|
| |
* Add three missing const qualifiers to function prototypes.
* Correct the argument type of RSA_new_method(3).
* Remove duplicate decsription of RSA_flags(3) and RSA_new_method(3).
* Make the description of method selection simpler, more precise,
and more concise.
* Correct description of the return value of RSA_set_method(3).
* Stop referencing engine(3).
|
| |
|
|
|
|
|
|
| |
covering the remaining functions that were documented in engine(3),
except for seven functions that are completely pointless and that
were merely listed but not really documented.
|
|
|
|
|
| |
covering 60% of the documented functions). The old, abominable
engine(3) manual page shall die soon.
|
|
|
|
|
|
| |
to accept a NULL argument. Document that.
While here, make the related sentences more precise and less verbose.
Tweaks and OK tb@.
|
|
|
|
|
| |
triggered by OpenSSL commit a73d990e Feb 27 19:02:24 2018 +0100,
but with different content
|
| |
|
|
|
|
|
| |
suppresses any future config file loading.
ok schwarze@ with a nit from jsing@
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Tighten up checks for various X509_VERIFY_PARAM functions, and
allow for the verify param to be poisoned (preculding future
successful cert validation) if the setting of host, ip, or email
for certificate validation fails. (since many callers do not
check the return code in the wild and blunder along anyway)
Inspired by some discussions with Adam Langley.
ok jsing@
|
|
|
|
| |
From Edgar Pettijohn
|