Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | pour some water on an ass ember | deraadt | 2014-07-11 | 1 | -1/+1 | |
| | | | | spotted by doctor jsing, always keeping an eye out for these | |||||
* | Fetch the specific license which will be used from | deraadt | 2014-07-11 | 1 | -0/+24 | |
| | | | | | | https://www.openssl.org/~appro/camellia/dist/BSD_license.txt It isn't our concern to supply the other licences mentioned in source files; that is realy not our problem. | |||||
* | Revert change that snuck into previous commit. | jsing | 2014-07-11 | 1 | -3/+1 | |
| | ||||||
* | replace u_int8_t with uint8_t | bcook | 2014-07-11 | 1 | -3/+5 | |
| | | | | ok beck@ | |||||
* | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 345 | -1097/+1145 | |
| | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | |||||
* | Remove JPAKE remnants - there is no jpake.h, so if OPENSSL_NO_JPAKE was | jsing | 2014-07-11 | 2 | -8/+1 | |
| | | | | removed from opensslconf.h, this would no longer compile. | |||||
* | Explicitly include <openssl/opensslconf.h> in every file that references | jsing | 2014-07-10 | 197 | -275/+731 | |
| | | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. | |||||
* | OPENSSL_stderr() is unused so nuke it. OPENSSL_showfatal() is only used by | jsing | 2014-07-10 | 2 | -12/+3 | |
| | | | | | | OpenSSLDie(), which is in the same file, so just make it static. ok miod@ | |||||
* | Use size_t as realloc() size argument whenever possible. ok tedu@ | miod | 2014-07-10 | 2 | -6/+8 | |
| | ||||||
* | Simplify realloc() usage; ok tedu@ | miod | 2014-07-10 | 1 | -15/+6 | |
| | ||||||
* | Upon realloc() failure, free() the original pointer and remove the stupid | miod | 2014-07-10 | 1 | -3/+3 | |
| | | | | | comments implying you don't have to. ok tedu@ | |||||
* | KNF | miod | 2014-07-10 | 1 | -26/+34 | |
| | ||||||
* | Fix a double free in a can't-fail error path in PKCS7_decrypt(), by removing | miod | 2014-07-10 | 1 | -10/+6 | |
| | | | | | the error path altogether and simplifying the local variables as a result. joint work with jsing@; ok jsing@ tedu@ | |||||
* | Inline the only use of the HEX_SIZE macro and nuke both DECIMAL_SIZE and | jsing | 2014-07-10 | 2 | -7/+3 | |
| | | | | | | HEX_SIZE. ok beck@ miod@ | |||||
* | Make sure srp_Calc_k() digest operations are checked for error; from | miod | 2014-07-10 | 1 | -9/+17 | |
| | | | | Florian Zumbiehl (florz , florz . de) on tech@ | |||||
* | Make sure SRP_Calc_client_key() returns NULL instead of a pristine BN_new() | miod | 2014-07-10 | 1 | -4/+9 | |
| | | | | upon error; from Florian Zumbiehl (florz , florz . de) on tech@ | |||||
* | Nuke OPENSSL_NONPIC_relocated since nothing uses it. | jsing | 2014-07-10 | 2 | -4/+2 | |
| | | | | ok miod@ | |||||
* | Kill a blatantly outdated (and now wrong) comment | miod | 2014-07-10 | 1 | -4/+1 | |
| | ||||||
* | Try and fix the horrible coding style of the example code snippets. | miod | 2014-07-10 | 7 | -178/+201 | |
| | ||||||
* | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 134 | -210/+453 | |
| | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | |||||
* | Remove empty sections and references to des_modes(7) which we don't have. | miod | 2014-07-10 | 22 | -73/+4 | |
| | ||||||
* | Fewer lies, also do not document DES_3cbc_encrypt anymore. | miod | 2014-07-10 | 1 | -22/+6 | |
| | ||||||
* | Features introduce in OpenSSL 0.9.8 do not deserve their own section. | miod | 2014-07-10 | 1 | -21/+19 | |
| | | | | | Instead, fold their description in the main documentation, and update the history section to mention them as well. | |||||
* | Attempt to (incompletely) document EVP_aes_*(). | miod | 2014-07-10 | 3 | -10/+15 | |
| | | | | | | | | | When EVP_des_cbc() was suggested, suggest EVP_aes_256_cbc() instead. Remove mention of EVP_des_ede3_cbc() being the algorithm of choice for S/MIME. Don't mention US-export limited RC2 algorithms, you'd better not know about them. | |||||
* | RSA_setup_blinding() gets a BN with BN_CTX_get(), returns `out of memory' | miod | 2014-07-10 | 1 | -6/+1 | |
| | | | | | | | | if it fails, then never uses it anymore, and may invoke a function which needs more than one BN from the BN_CTX anyway, so this is pointless - remove the BN_CTX_get() call and the test. ok jsing | |||||
* | make asn1 free safe to call with null pointers of any type. | tedu | 2014-07-10 | 1 | -4/+3 | |
| | | | | ok jsing miod | |||||
* | One sure hopes that OPENSSL_cleanse will: | jsing | 2014-07-10 | 1 | -2/+2 | |
| | | | | /* Clear password from memory */ | |||||
* | Remove #if 0 code which dumps your data to stdout. | miod | 2014-07-10 | 1 | -9/+1 | |
| | ||||||
* | Tweak some comments. We do not really need to know that "New!" flags were | jsing | 2014-07-10 | 1 | -9/+8 | |
| | | | | added 10+ years ago (they're kinda somewhat stale by now...) | |||||
* | Stop playing with the RSA_FLAG_BLINDING flag. It does nothing. | jsing | 2014-07-10 | 1 | -3/+1 | |
| | | | | ok miod@ | |||||
* | delete some casts. ok miod | tedu | 2014-07-10 | 12 | -35/+35 | |
| | ||||||
* | Missing allocation checks and potential NULL pointer dereference in the | miod | 2014-07-10 | 1 | -7/+15 | |
| | | | | error path in PEM_X509_INFO_read_bio(); ok guenther@ jsing@ | |||||
* | Remove RSA_FLAG_NO_EXP_CONSTTIME, which was deprecated 12+ years ago. | jsing | 2014-07-10 | 1 | -13/+1 | |
| | | | | | | sthen@ confirmed that no ports are referencing it. ok miod@. | |||||
* | Remove DEBUG_KEYGEN and DEBUG_DECRYPT support. | miod | 2014-07-10 | 2 | -49/+2 | |
| | ||||||
* | replace getservbyname_r with getaddrinfo for portability | bcook | 2014-07-10 | 1 | -6/+11 | |
| | | | | ok jsing@ | |||||
* | Remove bogus preprocessor statements trying to pick the largest integer | miod | 2014-07-10 | 4 | -32/+4 | |
| | | | | | | | | type for BF_LONG, MD[45]_LONG and SHA_LONG. First, the preprocessor symbols they check for a 64-bit system is __ILP64__ which no sane system provides; second, on the platforms which have assembler code to speed things up, the assembler code assumes a 32-bit type will be used. | |||||
* | BN_free, BN_clear_free, BN_CTX_free, BN_BLINDING_free and BN_MONT_CTX_free | jsing | 2014-07-10 | 6 | -55/+32 | |
| | | | | | | all have implicit NULL checks, so we do not need them here. ok miod@ | |||||
* | Use a while loop instead of an ifdowhile loop. | jsing | 2014-07-10 | 2 | -12/+10 | |
| | | | | ok miod@ tedu@ | |||||
* | include <limits.h> for LONG_MIN/LONG_MAX. | bcook | 2014-07-09 | 1 | -2/+2 | |
| | | | | | | | Also remove <sys/filio.h> added from previous commit. This was the wrong way to get FIONBIO. ok jsing@ | |||||
* | ASN1_STRING_free can handle NULL, so callers don't need to check. ok miod | tedu | 2014-07-09 | 5 | -27/+17 | |
| | ||||||
* | reset host, port, path to null after freeing so the caller doesn't | tedu | 2014-07-09 | 1 | -1/+4 | |
| | | | | | accidentally free them again. actually a bug in the caller and (hey hey) apps/ocsp.c has exactly that bug, but it's easier/safer to fix here. | |||||
* | stale prototype | tedu | 2014-07-09 | 1 | -2/+1 | |
| | ||||||
* | Make comments readable. | jsing | 2014-07-09 | 1 | -27/+33 | |
| | ||||||
* | More KNF. | jsing | 2014-07-09 | 19 | -322/+331 | |
| | ||||||
* | KNF. | jsing | 2014-07-09 | 2 | -123/+108 | |
| | ||||||
* | ocsp_check_ids says "If algoritm mismatch let caller deal with it" before | tedu | 2014-07-09 | 1 | -6/+1 | |
| | | | | | | returning 2. The one and only caller doesn't check for that, so... Stop returning it. ok miod | |||||
* | Update to match the current state of crypto/rand, and remove MLINKS for | miod | 2014-07-09 | 5 | -101/+16 | |
| | | | | RAND_event and RAND_screen. | |||||
* | Remove mention that the PRNG needs to be seeded before invoking some | miod | 2014-07-09 | 13 | -35/+4 | |
| | | | | functions. | |||||
* | Unifdef -UPKCS_TESTVECT - we don't want the random data used in OAEP padding | miod | 2014-07-09 | 1 | -6/+1 | |
| | | | | to get overwritten by a known value, ever. | |||||
* | {malloc,reallocarray} + memset(,0,) -> calloc | miod | 2014-07-09 | 2 | -7/+5 | |
| | | | | ok tedu@ |