openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Zap trailing whitespace	tb	2023-04-26	1	-3/+1
\|
*	Take X509_POLICY_NODE_print() behind the barn	tb	2023-04-26	1	-24/+1
\| \| \| \| \| \| \| \|	This used to be public API but is now only used for debug code that has certainly never been used since it was released to the public. It drags that debug nonsense with it. ok beck
*	Make the new policy code in x509_policy.c to be selectable at compile time.	beck	2023-04-26	1	-1/+5
\| \| \| \| \| \| \|	The old policy codes remains the default, with the new policy code selectable by defining LIBRESSL_HAS_POLICY_DAG. ok tb@ jsing@
*	Flip the default of explicitText to UTF8String	tb	2023-04-20	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \|	While it may have been reasonable to use VisibleString back when this code was written, it's an anachronism nowadays. In particular, configuring BoringSSL reports that they have seen malformed certificates with exactly the issue caused by this unfortuante default. Reported by Alex Gaynor in OpenSSL issue 20772 ok jsing
*	libressl _namespace.h: adjust _ALIAS() to require a semicolon	tb	2023-02-16	1	-22/+22
\| \| \| \| \| \| \| \| \| \|	LCRYPTO_ALIAS() and LSSL_ALIAS() contained a trailing semicolon. This does not conform to style(9), breaks editors and ctags and (most importantly) my workflow. Fix this by neutering them with asm("") so that -Wpedantic doesn't complain. There's precedent in libc's namespace.h fix suggested by & ok jsing
*	Make internal header file names consistent	tb	2022-11-26	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Libcrypto currently has a mess of _lcl.h, _locl.h, and _local.h names used for internal headers. Move all these headers we inherited from OpenSSL to _local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook
*	Hide public symbols in libcrypto/x509 .c files	beck	2022-11-14	1	-1/+22
\| \| \| \|	ok tb@
*	Garbage collect the app_items field of ASN1_ADB	tb	2022-01-14	1	-2/+1
\| \| \| \| \| \| \|	This is unused and was removed in OpenSSL 5b70372d when it was replaced with an ASN.1 ADB callback (which we don't support). ok inoguchi jsing
*	x509_cpols.c will need to include x509_lcl.h soon	tb	2022-01-08	1	-1/+2
\|
*	Fix various read buffer overflow when printing ASN.1 strings (which are	tb	2021-08-24	1	-6/+7
\| \| \| \| \| \| \| \|	not necessarily NUL terminated). Same as schwarze's fix in t_x509a.c r1.9. From David Benjamin and Matt Caswell (part of the fixes in OpenSSL 1.1.1l) ok inoguchi
*	Collapse the x509v3 directory into x509.	jsing	2020-06-04	1	-0/+763
	This avoids the need to grep across directories to find functions and prepares for further rototilling and chainsawing. Discussed with tb@ (who also tested the release build)