summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/objects/obj_dat.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2024-03-02Remove most PBEPARAM stuff from public visibilitytb6-50/+40
The struct itself needs to remain public, unfortunately. ok jsing
2024-03-02Remove a lot of PKCS12 garbage from the public APItb13-205/+94
PKCS12 is a hot mess. Please participate in the survey at the end of https://www.cs.auckland.ac.nz/~pgut001/pubs/pfx.html to increase its credibility and unanimity. ok jsing
2024-03-02Remove RC4-HMAC-MD5 and AES-{128,256}-CBC-HMAC-SHA-1tb6-951/+3
"Stitched" mode AEADs were removed from libssl a long time ago. Nothing uses these CIPHERs anymore. ok jsing
2024-03-02Make legacy cipher methods internaltb3-14/+8
These are ASN.1 handlers for CIPHERs, still used by CMS and its predecessors. They should never have been public. ok jsing
2024-03-02Remove EVP_PBE_* API from public visibilitytb4-67/+6
You can no longer add your custom PBE algorithm. Pity. EVP_PBE_CipherInit() stays for internal use, the rest goes away copmletely. ok jsing
2024-03-02Remove EVP_PKEY_meth_*() APItb3-260/+2
After ameth, the second bit of custom EVP_PKEY API removal. ok jsing
2024-03-02Remove the ameth libtb4-239/+2
This is accessor API for ASN.1 methods needed for custom PKEYs. Nothing has ever used this. This has been neutered for months. The EVP_PKEY_asn1_* API that needs to stay was moved elsewhere. ok jsing
2024-03-02Remove EVP_MD_meth* againtb3-145/+2
Erlang upstream disabled the otp_test_engine for LibreSSL >= 3.5 without explanation. It was the only reason we added this garbage API in the first place. Meanwhile libfido2 started using it for a mock up of OpenSSL 3's broken fetch design with old API. This is pointless, so all this garbage goes away again (in particular we can remove the absolutely horrifying EVP_MD_meth_set_app_datasize() again). ok jsing
2024-03-02Fix signature and semantics of EVP_{CIPHER,MD}_CTX_init()tb3-13/+13
When the EVP_CIPHER_CTX and the EVP_MD_CTX were still expected to live on the stack, these initialization APIs were wrappers around memset. In OpenSSL 1.1, somebody removed them and carelessly made _init() an alias of _reset() aka _cleanup(). As a consequence, both signature and semantics changed. Unsurprisingly, there is now code out there that actually uses the new semantics, which causes leaks on LibreSSL and older OpenSSL. This aligns our _init() with OpenSSL 1.1 semantics. ok jsing
2024-03-02Remove unused OBJ_create_and_add_object()tb1-3/+1
This is an alias for OBJ_create(). I haven't dug into its history. ok jsing
2024-03-02Remove no longer supported OBJ_NAME_TYPEstb1-4/+2
OBJ_NAME_TYPE_PKEY_METH and OBJ_NAME_TYPE_COMP_METH were never used as far as I can tell. Unfortunately, PHP and Python still use the weirdly named OBJ_NAME_do_all*() API to list available ciphers and digests, so the MD and CIPHER variants need to remain public. ok jsing
2024-03-02Make OBJ_add_object() statictb5-9/+4
This is another implementation detail that should never have leaked out of the library. Only OBJ_create() ever used this. ok jsing
2024-03-02Remove OBJ_bsearch_()tb6-36/+7
The only reason this has still been part of the public API was that libssl used it for cipher lookup. This was fixed by replacing the lookup by proper bsearch() -- why OpenSSL felt the need to reinvent ANSI C API badly will forever remain a mystery. The stack code in libcrypto still uses a version of this. This should be rewritten. It will be a bit easier once sk_find_ex() is removed. ok jsing
2024-03-02Switch name member of OBJ_NAME to const void *tb2-5/+5
Because this is the type it should have had from the get go. ok jsing
2024-03-02Remove unused public OBJ_NAME_* APItb5-82/+3
This functionality has been disabled for a few months. Now it is high time to garbage collect it. ok jsing
2024-03-02Remove EVP_{add,delete}_{cipher,digest}_alias()tb1-10/+1
These are macro wrappers around the neutered OBJ_NAME_{add,remove}() API (notice the consistency), which will be removed shortly. Only security/xca used to use this. ok jsing
2024-03-02Remove EVP_add_{cipher,digest}() from public APItb3-19/+2
Ciphers and digests are now handled in a static lookup table and no longer by the associative array that used to underlie the OBJ_NAME API. Adding ciphers is no longer possible. What uses this API does so for historic reasons coming from a time where SHA-2 and some AES variants needed to be enabled explicitly. Ports doing this (PHP and DANE code) were fixed. ok jsing
2024-03-02Remove DSA_generate_parameterstb5-33/+3
This was deprecated in 0.9.8 and used until recently by rust-openssl and by keynote (keynote has the excuse that it was written before the deprecation). Fortunately Paul Kehrer fixed this in rust-openssl, so we can garbage collect this turd. (It was replaced with the less ergonomic DSA_generate_parameters_ex() to expose a new fancy way of displaying dots, stars and pluses on key generation). ok jsing
2024-03-02Remove CMAC_resume()tb6-46/+5
While it is a neat design detail of CMAC that you can resume it after having finalized it, nothing uses this functionality and it adds some gross things such as retaining intermediate secrets in the CMAC ctx. Once this is gone, we can simplify the CMAC code a bit. ok jsing
2024-03-02Make BN_mod_exp2_mont() and BN_mod_exp_mont_word() internaltb6-17/+10
The former could be useful but nothing uses it. The latter is a dangerous implementation detail of Montgomery exponentiation that should never have been leaked out of the library. Fix this. ok jsing
2024-03-02Make BN_mod_exp_simple() internaltb6-10/+7
This function is very slow and useful for testing purposes only. It should never have been part of the public API. Remove it from there. ok jsing
2024-03-02Remove BIO_set()tb5-15/+3
This used to be a dangerous implementation detail of BIO_new() that was never used outside of libcrypto. ok jsing
2024-03-02Remove BIO_dump_*{cb,fp}()tb5-53/+5
These were disabled and the internals that need to remain were fixed. Time for this garbage to go. ok jsing
2024-03-02Remove BIO_{sn,v,vsn}printf(3)tb8-138/+18
Unsued printing functionality. If something should need this we can readily add it back. ok jsing
2024-03-02Expose OPENSSL_{gmtime,posix_to_tm,timegm,tm_to_posix}()tb2-3/+5
Apart from OPENSSL_gmtime(), which is OpenSSL API, this is BoringSSL's interface to deal with the time related portability and code mess. ok jsing
2024-03-02Garbage collect ASN1_TIME_set_tm()tb2-13/+2
This was a public helper that is no longer used internally either. ok jsing
2024-03-02Remove beck's ASN.1 time API from public visibilitytb7-20/+10
This API was needed since OpenSSL didn't have one. We now have variants of OpenSSL's API and will also expose BoringSSL's complementary API. The users of this API were ported to the OpenSSL variants and some may switch to BoringSSL's in the future. Part of it is still used internally. ASN1_time_tm_clamp_notafter() is still used by libtls (and only libtls). This will be fixed in a future bump. ok jsing
2024-03-02Remove ASN1_PCTX nonsensetb5-144/+3
This is only used by the fuzzing code. Another bit of poorly thought out extensibility that makes people pass NULL pointers to a bunch of APIs. ok jsing
2024-03-02Make ASN1_add_oid_module internaltb6-17/+5
ok jsing
2024-03-02Remove unused M_ASN1_* macrostb1-14/+1
The last comsumer, telephony/asterisk, was adjusted a few months back. pointed out by brad ok jsing
2024-03-02Remove unused, incomplete ub_* macrostb1-12/+1
The only consumer, a_strnid.c, has its own, slightly more complete, up to date, and less incorrect, version of these. ok jsing
2024-03-02Remove DECLARE_STACK_OF(ASN1_STRING_TABLE)tb1-4/+1
Another remnant of the unused ASN1_STRING_TABLE extensibility goes away. ok jsing
2024-03-02Remove ASN1_STRING_TABLE_{add,cleanup}tb5-27/+3
This was API for the ASN1_STRING_TABLE extensibility which has been neutered for months and was completely unused in the ecosystem. ok jsing
2024-03-02const correct ASN1_STRING_TABLE_get()tb2-7/+6
The ability of modifying the ASN1_STRING_TABLE was removed and the table is now static. Stop casting away const. The only consumer, security/xca, is already fixed. ok jsing
2024-03-01Add mkdtemps(3), like mkdtemp(3) but with a suffix.millert2-8/+32
OK deraadt@ tb@
2024-03-01Fix OPENSSL_{gmtime,timegm} in namespace buildtb2-4/+3
These were incorrectly added to asn1.h. OPENSSL_gmtime is in crypto.h and OPENSSL_timegm is already in posix_time.h
2024-03-01Remove the ciphers_by_values_test()tb1-56/+0
2024-03-01exporter: use the atrocious SSL_CIPHER_find() rather than get_by_id()tb1-2/+5
2024-03-01ssltest: drop another use of CRYPTO_mem_leaks()tb1-2/+1
2024-02-29Detect OPENSSL_NO_GOST correctlytb1-1/+2
2024-02-29CRYPTO_mem_leaks* will go away. Remove calls in legacy teststb3-6/+3
2024-02-29Link x509_algor test statically and switch to the internaltb2-9/+18
X509_ALGOR_set0_evp_md()
2024-02-29OBJ_NAME_TYPE_PKEY_METH is no longer supportedtb1-5/+1
2024-02-29Stop testing EVP_PKEY_GOST{IMIT,R01}tb1-3/+1
2024-02-29Prepare freenull test for GOST removaltb1-1/+3
2024-02-28Expand only ever user of PBEPARAM_free() outside of libcryptotb1-2/+3
2024-02-28Small tweak for X509_check_purpose()tb1-4/+6
ok jsing
2024-02-28Use an accessor instead of reaching into X509_PURPOSEtb1-2/+2
ok jsing
2024-02-27align read-only sections on masm/windows to 64 bytesbcook1-1/+9
Avoid conflicts where alignment is specified later in the underlying assembly. ok tb@
2024-02-26Neuter OBJ_bsearch{_,ex_}()tb2-31/+40
Make these functions always fail. A copy of OBJ_bsearch_ex_() is kept in stack.c, where it is still used by internal_find() for sk_find{,_ex}(). sk_find_ex() will be removed in the upcoming bump, and then we can simplify or rewrite what's still needed. ok jsing
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-05-02 14:43:38 +0000