| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | spelling; from miod | jmc | 2018-11-25 | 1 | -2/+2 |
| | | |||||
| * | Add const to two arguments of OCSP_cert_to_id() | tb | 2018-08-24 | 2 | -6/+7 |
| | | | | | | tested in a bulk by sthen ok jsing | ||||
| * | wrap an overlong line | tb | 2018-05-14 | 1 | -2/+3 |
| | | |||||
| * | Add const qualifier to the path and url{,s} parameters of | tb | 2018-05-13 | 4 | -15/+16 |
| | | | | | | | | | OCSP_crlID_new(3), OCSP_parse_url(3), OCSP_sendreq_bio(3), OCSP_sendreq_new(3), and OCSP_url_svcloc_new(3). tested in a bulk build by sthen ok jsing (as part of a larger diff) | ||||
| * | Add const qualifier to the X509_NAME *, ASN1_BIT_STRING *, and | tb | 2018-05-13 | 2 | -6/+6 |
| | | | | | | | | ASN1_INTEGER * arguments of OCSP_cert_id_new(3). tested in a bulk build by sthen ok jsing (as part of a larger diff) | ||||
| * | Add const qualifier to the ASN1_OBJECT * argument of: | tb | 2018-05-13 | 2 | -11/+12 |
| | | | | | | | | | OCSP_REQUEST_get_ext_by_OBJ(3), OCSP_ONEREQ_ext_by_OBJ(3) OCSP_BASICRESP_get_ext_by_OBJ(3), OCSP_SINGLERESP_get_ext_by_OBJ(3) tested in a bulk build by sthen ok jsing (as part of a larger diff) | ||||
| * | Provide OCSP_SINGLERESP_get0_id(). | jsing | 2018-03-17 | 2 | -2/+9 |
| | | |||||
| * | Send the function codes from the error functions to the bit bucket, | beck | 2017-01-29 | 6 | -87/+43 |
| | | | | | | | as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ | ||||
| * | Expand ASN1_ITEM_rptr macros - no change in preprocessor output. | jsing | 2016-12-30 | 1 | -6/+6 |
| | | |||||
| * | Expand ASN1_ITEM_rptr macros - no change in generated assembly. | jsing | 2016-12-30 | 2 | -4/+4 |
| | | |||||
| * | Remove all DECLARE_ASN1_SET_OF macro usage - since 2000 these have been | jsing | 2016-12-27 | 1 | -3/+1 |
| | | | | | | nothing but markers for utils/mkstack.pl... and we removed the code that generated more macros from these markers in 2014. | ||||
| * | Kill some #if 0 code that uses old-style ASN.1 encoding. | jsing | 2016-12-27 | 1 | -45/+1 |
| | | |||||
| * | rewrite OCSP_parse_url to be sligthly less nasty and not have one byte ↵ | beck | 2016-12-21 | 1 | -78/+34 |
| | | | | | | | buffer overreads helpful nitpicking and ok tb@ miod@ | ||||
| * | Check BIO_new*() for failure. | miod | 2016-11-05 | 1 | -2/+5 |
| | | | | | ok beck@ jsing@ | ||||
| * | X509_STORE_CTX_set_*() may fail, so check for errors. | miod | 2016-11-05 | 1 | -4/+14 |
| | | | | | ok beck@ | ||||
| * | Kill a bunch of OLD_ASN1 usage by replacing ASN1_{d2i,i2d}_* with | jsing | 2016-11-04 | 2 | -15/+30 |
| | | | | | | | ASN1_item_{d2i,i2d}_* equivalents. ok guenther@ miod@ | ||||
| * | make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden | beck | 2016-11-04 | 1 | -10/+7 |
| | | | | | | | functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@ | ||||
| * | Expand DECLARE_ASN1_.*FUNCTIONS macros. | jsing | 2016-09-04 | 1 | -17/+81 |
| | | | | | No change in preprocessed output, ignoring whitespace and line numbers. | ||||
| * | Clean up OCSP_check_validity() a bit more. | beck | 2016-07-16 | 1 | -11/+10 |
| | | | | | | | - Return on first failure rather than continuing. - Don't compare times by comparing strings that possibly were not parsable as a time. ok deraadt@ | ||||
| * | remove unneeded duplicate call - spotted by jsing@ | beck | 2016-07-05 | 1 | -3/+1 |
| | | |||||
| * | Add several fixes from OpenSSL to make OCSP work with intermediate | beck | 2016-07-05 | 1 | -10/+24 |
| | | | | | | | certificates provided in the response. - makes our newly added ocsp regress test pass too.. ok bcook@ | ||||
| * | Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP uses | beck | 2016-06-25 | 1 | -2/+2 |
| | | | | | Generalized Time on requests as per RFC6960 | ||||
| * | Fix the ocsp code to actually check for errors when comparing time values | beck | 2016-06-25 | 1 | -7/+31 |
| | | | | | | | | | | which was not being done due to a lack of checking of the return code for X509_cmp_time. Ensure that we only compare GERNERALIZEDTIME values because this is what is specified by RFC6960. Issue reported, and fix provided by Kazuki Yamaguchi <k@rhe.jp> ok bcook@ | ||||
| * | Use ASN1_item_dup() instead of ASN1_dup(). | jsing | 2015-09-26 | 1 | -4/+3 |
| | | | | | ok bcook@ | ||||
| * | Expand ASN.1 template macros - no change in generated assembly. | jsing | 2015-07-25 | 1 | -76/+496 |
| | | |||||
| * | Drop stupid (int) casts for the arguments of malloc() and friends. This is | miod | 2015-07-19 | 1 | -3/+3 |
| | | | | | | not 16-bit MS-DOS anymore. ok bcook@ tedu@ | ||||
| * | Check return value of all used functions in OCSP_REQUEST_print(); covers | miod | 2015-07-16 | 1 | -5/+9 |
| | | | | | Coverity CID 78796; ok beck@ | ||||
| * | Manually expand ASN1_ITEM_rptr macros that should have been expanded with | jsing | 2015-02-10 | 1 | -2/+2 |
| | | | | | the IMPLEMENT_ASN1_DUP_FUNCTION macro. | ||||
| * | Expand the IMPLEMENT_ASN1_DUP_FUNCTION macro so that the code is visible | jsing | 2015-02-10 | 1 | -2/+7 |
| | | | | | | | | | | and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@ | ||||
| * | Expand the IMPLEMENT_ASN1_FUNCTIONS macro so that the code is visible and | jsing | 2015-02-09 | 1 | -16/+376 |
| | | | | | | | | | functions can be readily located. Change has been scripted and there is no change to the generated assembly. Discussed with beck@ miod@ tedu@ | ||||
| * | Check the result of sk_*_push() operations for failure. | miod | 2014-10-28 | 1 | -2/+5 |
| | | | | | ok doug@ jsing@ | ||||
| * | Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). | jsing | 2014-10-22 | 1 | -3/+3 |
| | | | | | | | | | arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@ | ||||
| * | None of these need to include <openssl/rand.h> | jsing | 2014-10-18 | 3 | -6/+3 |
| | | |||||
| * | Use string literals in printf style calls so gcc's -Wformat works. | doug | 2014-10-03 | 1 | -8/+4 |
| | | | | | ok tedu@, miod@ | ||||
| * | BIO_free() returns immediately when the sole input is NULL. | doug | 2014-07-25 | 1 | -3/+2 |
| | | | | | | | Remove unnecessary NULL check. ok miod@ | ||||
| * | The bell tolls for BUF_strdup - Start the migration to using | beck | 2014-07-13 | 1 | -6/+6 |
| | | | | | | | intrinsics. This is the easy ones, a few left to check one at a time. ok miod@ deraadt@ | ||||
| * | Principle of least surprise: make CMAC_CTX_free(), OCSP_REQ_CTX_free() and | miod | 2014-07-12 | 1 | -1/+4 |
| | | | | | | X509_STORE_CTX_free() accept NULL pointers as input without dereferencing them, like all the other well-behaved *_CTX_free() functions do. | ||||
| * | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 4 | -16/+17 |
| | | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | ||||
| * | Explicitly include <openssl/opensslconf.h> in every file that references | jsing | 2014-07-10 | 2 | -2/+7 |
| | | | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. | ||||
| * | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 2 | -4/+8 |
| | | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | ||||
| * | reset host, port, path to null after freeing so the caller doesn't | tedu | 2014-07-09 | 1 | -1/+4 |
| | | | | | | accidentally free them again. actually a bug in the caller and (hey hey) apps/ocsp.c has exactly that bug, but it's easier/safer to fix here. | ||||
| * | ocsp_check_ids says "If algoritm mismatch let caller deal with it" before | tedu | 2014-07-09 | 1 | -6/+1 |
| | | | | | | | returning 2. The one and only caller doesn't check for that, so... Stop returning it. ok miod | ||||
| * | tags as requested by miod and tedu | deraadt | 2014-06-12 | 10 | -10/+10 |
| | | |||||
| * | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -2/+1 |
| | | |||||
| * | Not OPENSSL_SYS_SUNOS. | jsing | 2014-05-23 | 1 | -3/+0 |
| | | |||||
| * | Plug memory leaks upon error in OCSP_url_svcloc_new(). | miod | 2014-05-18 | 1 | -6/+9 |
| | | | | | ok jsing@ | ||||
| * | In OCSP_sendreq_bio(), cope with OCSP_sendreq_new() returning NULL. | miod | 2014-05-18 | 1 | -4/+6 |
| | | | | | ok jsing@ | ||||
| * | More KNF. | jsing | 2014-05-18 | 10 | -193/+208 |
| | | |||||
| * | unchecked malloc() return value in OCSP_sendreq_new(). | miod | 2014-05-17 | 1 | -0/+2 |
| | | |||||
| * | KNF | miod | 2014-05-17 | 8 | -1274/+1332 |
| | | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |