Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | remove unused, private version strings except SSL_version_str | bcook | 2014-07-09 | 1 | -3/+1 | |
| | | | | | | Also remove unused des_ver.h, which exports some of these strings, but is not installed. ok miod@ tedu@ | |||||
* | Be more strict in RSA_padding_check_X931(), and thus avoid a possible | miod | 2014-07-09 | 1 | -2/+2 | |
| | | | | | memcpy() with a negative size. ok tedu@ | |||||
* | In the old days (not in this century), SSLeay 0.4.5 would create X.509 RSA | miod | 2014-07-09 | 1 | -14/+3 | |
| | | | | | | | | | signatures using the wrong oid for the signature type. The signature verification code has thus been modified to allow these signatures to be accepted, with a printf to stderr to notify the user something was fishy. Remove this chunk; these signatures will no longer get accepted. ok deraadt@ guenther@ jsing@ tedu@ | |||||
* | Remove RSA_memory_lock(). This undocumented function sort-of serializes your | miod | 2014-07-09 | 2 | -51/+2 | |
| | | | | | | | | | | RSA components to memory and clears them, but there is no unserializing function, so its usefulness is close to zero. A grep through the ports tree sources show that it is only present in ports embedding their own openssl copy, and never used otherwise. ok jsing@ | |||||
* | RSA_NULL used to be a compile option allowing the RSA interfaces to be | miod | 2014-07-09 | 4 | -176/+4 | |
| | | | | | | | | compiled-in, with nonfunctional code, to be able to cope with the RSA patent. However, we don't use this option, and the RSA patent has expired more than 10 years ago, so just drop this piece. | |||||
* | KNF | miod | 2014-07-09 | 19 | -1967/+1959 | |
| | ||||||
* | replace atoi() calls with strtol(). Follow the idiomatic pattern in our | deraadt | 2014-06-12 | 1 | -13/+32 | |
| | | | | | | | | | manual page strictly. Return -2 if the strings are not strict numbers. The numbers remain in the range of "int". Range checking for these parameters is done later in the pkey_*_ctl() functions, or sometimes in functions much further downstream... but not always!!! ok millert miod mikeb | |||||
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 22 | -21/+22 | |
| | ||||||
* | c-file-style hints, begone; ok beck | deraadt | 2014-06-11 | 1 | -1/+1 | |
| | ||||||
* | malloc() result does not need a cast. | deraadt | 2014-06-07 | 4 | -6/+6 | |
| | | | | ok miod | |||||
* | more: no need to null check before free; ok guenther | deraadt | 2014-05-30 | 2 | -2/+2 | |
| | ||||||
* | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -2/+1 | |
| | ||||||
* | Everything sane has stdio, and FILE *. we don't need ifdefs for this. | beck | 2014-05-29 | 2 | -4/+0 | |
| | | | | ok to firebomb from tedu@ | |||||
* | We have stdio and are not WIN16. | jsing | 2014-05-23 | 1 | -2/+0 | |
| | ||||||
* | Convert OPENSSL_malloc stuff back to intrinsics, a few were missed | beck | 2014-05-22 | 1 | -2/+2 | |
| | | | | | as new stuff was brought in. ok miod@ | |||||
* | if (x) free(x) -> free(x); semantic patch generated with coccinelle, carefully | miod | 2014-05-22 | 1 | -4/+2 | |
| | | | | eyeballed before applying. Contributed by Cyril Roelandt on tech@ | |||||
* | switch RSA key generation default to 2048 bits (matching ssh); ok miod@ | sthen | 2014-05-17 | 1 | -1/+1 | |
| | ||||||
* | Stop being a dummy... presumably these are left overs from pedantic mode | jsing | 2014-05-15 | 1 | -5/+1 | |
| | | | | | | that were not wrapped with #if PEDANTIC. ok miod@ | |||||
* | Use C99 initializers for the various FOO_METHOD structs. More readable, and | miod | 2014-04-27 | 4 | -93/+64 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@ | |||||
* | Unifdef -UPKCS1_CHECK and remove SSL_OP_PKCS1_CHECK_[12], this is leftover | miod | 2014-04-23 | 1 | -3/+0 | |
| | | | | | | | | ``debug'' code from a 15+ years old bugfix and the SSL_OP_PKCS1_CHECK_* constants have had a value of zero since ages. No production code should use them. ok beck@ | |||||
* | kill REF_PRINT/REF_CHECK debugging framework noone would use | deraadt | 2014-04-17 | 1 | -20/+0 | |
| | | | | ok miod | |||||
* | Get rid of MS Visual C compiler and Intel C compiler specific defines. | miod | 2014-04-17 | 1 | -8/+0 | |
| | ||||||
* | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 8 | -38/+38 | |
| | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||||
* | Do not feed RSA private key information to the random subsystem as | deraadt | 2014-04-17 | 1 | -8/+0 | |
| | | | | | | | | entropy. It might be fed to a pluggable random subsystem.... What were they thinking?! ok guenther | |||||
* | we don't use these files for building | tedu | 2014-04-15 | 1 | -81/+0 | |
| | ||||||
* | remove FIPS mode support. people who require FIPS can buy something that | tedu | 2014-04-15 | 5 | -151/+0 | |
| | | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt | |||||
* | No licence. | miod | 2014-04-15 | 1 | -340/+0 | |
| | ||||||
* | remove auto-generated dependencies from the old unused build system, so | deraadt | 2014-04-14 | 1 | -227/+0 | |
| | | | | | that it is easier to find code pieces. They are getting in the way. ok miod | |||||
* | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 4 | -5/+11 | |
| | ||||||
* | This commit was generated by cvs2git to track changes on a CVS vendor | miod | 2014-04-13 | 2 | -4/+6 | |
|\ | | | | | branch. | |||||
| * | Import OpenSSL 1.0.1g | miod | 2014-04-13 | 6 | -9/+17 | |
| | | ||||||
* | | cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt | markus | 2013-02-14 | 1 | -1/+1 | |
| | | | | | | | | | | from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@ | |||||
* | | resolve conflicts | djm | 2012-10-13 | 8 | -173/+202 | |
| | | ||||||
* | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2012-10-13 | 4 | -38/+805 | |
|\| | | | | | branch. | |||||
| * | import OpenSSL-1.0.1c | djm | 2012-10-13 | 11 | -202/+977 | |
| | | ||||||
| * | OpenSSL 1.0.0f: import upstream source | djm | 2012-01-05 | 1 | -29/+51 | |
| | | ||||||
| * | import OpenSSL 1.0.0e | djm | 2011-11-03 | 2 | -8/+14 | |
| | | ||||||
* | | OpenSSL 1.0.0f: merge | djm | 2012-01-05 | 1 | -29/+51 | |
| | | ||||||
* | | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 2 | -8/+14 | |
| | | ||||||
* | | resolve conflicts, fix local changes | djm | 2010-10-01 | 13 | -1055/+485 | |
| | | ||||||
* | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2010-10-01 | 5 | -5/+1044 | |
|\| | | | | | branch. | |||||
| * | import OpenSSL-1.0.0a | djm | 2010-10-01 | 13 | -140/+1458 | |
| | | ||||||
* | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-04-06 | 1 | -2/+2 | |
|\ \ | | | | | | | branch. | |||||
| * | | import of OpenSSL 0.9.8k | djm | 2009-04-06 | 1 | -2/+2 | |
| | | | ||||||
* | | | resolve conflicts | djm | 2009-01-09 | 10 | -289/+145 | |
| | | | ||||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-01-09 | 2 | -4/+4 | |
|\ \ \ | | |/ | |/| | branch. | |||||
| * | | import openssl-0.9.8j | djm | 2009-01-09 | 11 | -284/+121 | |
| | | | ||||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-01-09 | 2 | -0/+603 | |
|\ \ \ | | |/ | |/| | branch. | |||||
| * | | import openssl-0.9.8j | djm | 2009-01-09 | 4 | -24/+658 | |
| | | | ||||||
* | | | update to openssl-0.9.8i; tested by several, especially krw@ | djm | 2009-01-05 | 4 | -22/+34 | |
| | | |