| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
| |
jmc@ dislikes a comma before "then" in a conditional, so leave those
untouched.
ok jmc@
|
|
|
|
|
|
|
| |
we no longer have, focus on what our implementation now does, but
keep short warnings in how far other implementations might be more
fragile. Some improvements to wordings and clarity while here.
OK tb@
|
| |
|
|
|
|
| |
OK tb@
|
| |
|
| |
|
|
|
|
| |
ok inoguchi@ tb@
|
| |
|
|
|
|
| |
ok gnezdo@ miod@ jmc@
|
|
|
|
| |
ok jmc@
|
| |
|
|
|
|
| |
CRL's signature is invalid, not the certificate's.
|
|
|
|
| |
spotted by/ok jmc
|
|
|
|
| |
to claudio
|
|
|
|
|
|
|
|
|
|
|
| |
freeing of what they return despite being get0 functions: the stack
of X509s that they return must be freed with sk_X509_free(). The get0
thus probably refers to the individual certs, but not to the stack
itself.
The libcrypto and libssl APIs never cease to amaze with new traps.
ok inoguchi
|
|
|
|
| |
ok tb@
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
to internal only soon. Stop documenting them.
ok inoguchi jsing
|
|
|
|
| |
looks good to jsing
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
BN_mod_lshift_quick(3), BN_mod_lshift1(3), and BN_mod_lshift1_quick(3)
|
|
|
|
| |
but what i have so far is already better than nothing
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
While here, add the missing "const" qualifier to the second parameter
of BN_is_word(3) - even though i doubt that marking an integral type
parameter as "const" serves any significant purpose...
Note that the OpenSSL documentation for this function that Billy
Brumley committed on August 4, 2021 is actually wrong. Essentially,
it says "BN_abs_is_word() test[s] if a equals ... |w|." Now pray
tell me, what exactly is the point of taking the absolute value of
an unsigned integer number? To compensate for the obvious absurdity
of his patch, Billy made a point of getting *three* OKs from rather
notable people: Pauli Dale, Nicola Tuveri, and Dmitry Belyavskiy.
I believe this is a striking example of the cavalier attitude some
projects put on display when it comes to documentation, and also a
striking example of how bad documentation can occasionally be worse
than no documentation at all, because the OpenSSL manual page will
now thoroughly confuse anyone reading it.
SCNR pointing out this (hopefully unintentional) hilarity - or is
this an attempt at trolling the readers of their documentation?
If it is, they certainly got me.
|
|
|
|
| |
fixing a minibug found with check_complete.pl
|
| |
|
| |
|
|
|
|
| |
while here, repair a typo in the lh_retrieve(3) synopsis
|
| |
|
|
|
|
| |
mark OBJ_create_and_add_object() as intentionally undocumented
|
|
|
|
|
| |
because OBJ_nid2obj(3) is already long and
more functions related to OBJ_create(3) have to be documented.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
While it was probably a mistake that steve@ made some i2c_*() and c2i_*()
functions public back in 2000 and while we would like to delete them from
the API, it may not be possible to delete this particular function because
in contrast to the others (which are already marked as intentionally
undocumented), this one is used by various real-world software, so for now,
explain what it does, just in case people find it in existing code.
While here, use the familiar term "byte" that we generally use
throughout all our manual pages, even though the ASN.1 standard
uses the term "octet" instead, which is more precise only in theory.
|
| |
|
|
|
|
| |
that are intentionally undocumented
|
| |
|
| |
|
|
|
|
| |
using parts of the text from SMIME_read_CMS(3) and SMIME_read_PKCS7(3)
|
|
|
|
|
| |
certainly not perfect, but arguably better than the even terser
PEM_write_bio_CMS_stream(3) and PEM_write_bio_PKCS7_stream(3)
|
|
|
|
| |
still vague in various respects, but it's a start
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
The API surrounding this is so complicated and streaming is so rarely
used in practice that describing this in more detail is not a priority
right now. The documentation of the wrapper BIO_new_CMS(3) is also
rather vague, and BIO_new_PKCS7() isn't described at all so far.
|