Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | spacing between macro args and punctuation; | jmc | 2016-11-06 | 2 | -4/+4 | |
| | ||||||
* | document ENGINE_add_conf_module(3) in one page, not in two | schwarze | 2016-11-06 | 1 | -3/+2 | |
| | ||||||
* | document BIO_set_fd() and BIO_get_fd() in one manual page, not in two; | schwarze | 2016-11-06 | 2 | -60/+32 | |
| | | | | general direction discussed yesterday with bcook@ | |||||
* | delete prototypes available in other pages and add a missing .Xr link | schwarze | 2016-11-06 | 1 | -102/+2 | |
| | ||||||
* | delete prototypes available in other pages and add two missing .Xr links | schwarze | 2016-11-06 | 4 | -756/+216 | |
| | ||||||
* | first pass; ok schwarze | jmc | 2016-11-06 | 185 | -249/+620 | |
| | ||||||
* | delete prototypes available in other pages and add three missing .Xr links | schwarze | 2016-11-06 | 1 | -179/+7 | |
| | ||||||
* | delete prototypes available in other pages and add two missing .Xr links | schwarze | 2016-11-06 | 1 | -158/+3 | |
| | ||||||
* | simplify error handling in c2i_ASN1_OBJECT | bcook | 2016-11-06 | 1 | -10/+12 | |
| | | | | ok beck@, miod@ | |||||
* | Avoid compiling in an unused function. | jsing | 2016-11-06 | 1 | -0/+2 | |
| | | | | Spotted by guenther@ | |||||
* | adjust guards to elide unused Bi array | bcook | 2016-11-06 | 1 | -2/+0 | |
| | | | | ok jsing@ | |||||
* | Rework X509_verify_cert to support alt chains on certificate verification, | beck | 2016-11-06 | 1 | -117/+265 | |
| | | | | | via boringssl. ok jsing@ miod@ | |||||
* | The upcoming x509 alt chains diff tightens the trust requirements | beck | 2016-11-06 | 1 | -1/+17 | |
| | | | | | | | for certificates. This (from OpenSSL) ensures that the current "default" behaviour remains the same. We should revisit this later ok jsing@ | |||||
* | Commit a reminder that the default is not the default. This needs to | beck | 2016-11-06 | 1 | -1/+2 | |
| | | | | | be revisited. ok jsing@ | |||||
* | use the correct function for free | bcook | 2016-11-06 | 1 | -2/+2 | |
| | | | | ok beck@ | |||||
* | add an .Xr that was missing | schwarze | 2016-11-06 | 1 | -1/+2 | |
| | ||||||
* | document BN_set_negative() and BN_is_negative(); | schwarze | 2016-11-05 | 6 | -516/+69 | |
| | | | | feedback and OK bcook@, OK jsing@ | |||||
* | Part one of the alt chains changes, bring in newer modifications to | beck | 2016-11-05 | 3 | -73/+411 | |
| | | | | | VERIFY_PARAMS - based on boringssl. ok jsing@ miod@ | |||||
* | Add objects for X25519, X448, Ed25519 and Ed448. | jsing | 2016-11-05 | 2 | -0/+15 | |
| | | | | ok miod@ | |||||
* | Check BIO_new*() for failure. | miod | 2016-11-05 | 2 | -4/+9 | |
| | | | | ok beck@ jsing@ | |||||
* | More X509_STORE_CTX_set_*() return value checks. | miod | 2016-11-05 | 3 | -12/+16 | |
| | | | | ok beck@ jsing@ | |||||
* | bump minors for symbol addition for ocsp and x25519 symbol additions | beck | 2016-11-05 | 1 | -1/+1 | |
| | ||||||
* | after getting rid of the pod files, clean up the Makefiles; ok bcook@ | schwarze | 2016-11-05 | 2 | -13/+10 | |
| | ||||||
* | Add support for X25519. | jsing | 2016-11-05 | 5 | -1/+5136 | |
| | | | | | | This brings in code from BoringSSL, which is mostly taken from SUPERCOP. ok beck@ bcook@ | |||||
* | minor mandoc -Tlint nits | schwarze | 2016-11-05 | 3 | -9/+8 | |
| | ||||||
* | add the missing content, sorry for committing an empty file | schwarze | 2016-11-05 | 1 | -0/+69 | |
| | ||||||
* | Stricter validation of inputs of OPENSSL_asc2uni() and OPENSSL_uni2asc(). | miod | 2016-11-05 | 1 | -17/+34 | |
| | | | | | | While there, try to make these slightly less obfuscated. ok beck@ jsing@ | |||||
* | convert the remaining manual pages from pod to mdoc | schwarze | 2016-11-05 | 25 | -1650/+3615 | |
| | ||||||
* | X509_STORE_CTX_set_*() may fail, so check for errors. | miod | 2016-11-05 | 1 | -4/+14 | |
| | | | | ok beck@ | |||||
* | Do not leak the ressources possibly allocated by EVP_MD_CTX_init() in the | miod | 2016-11-05 | 1 | -2/+3 | |
| | | | | | | trivial error path of PKCS12_key_gen_uni(). ok beck@ jsing@ | |||||
* | Make sure PEM_SealInit() will correctly destroy the PEM_ENCODE_SEAL_CTX | miod | 2016-11-05 | 1 | -8/+22 | |
| | | | | | | | upon error, as there is no way to do this outside of PEM_SealFinal(), which can only work if PEM_SealInit() succeeded... ok beck@ jsing@ | |||||
* | No need to duplicate definitions from evp.h locally. | miod | 2016-11-05 | 2 | -14/+2 | |
| | | | | ok bock@ jsing@ | |||||
* | Stop abusing the ternary operator to decide which function to call in a | miod | 2016-11-05 | 1 | -3/+6 | |
| | | | | | return statement. ok beck@ jsing@ | |||||
* | further tweakage, with an improvement from joel; | jmc | 2016-11-05 | 1 | -5/+5 | |
| | | | | ok jsing schwarze | |||||
* | tweak previous | schwarze | 2016-11-04 | 1 | -34/+39 | |
| | ||||||
* | Kill a bunch of OLD_ASN1 usage by replacing ASN1_{d2i,i2d}_* with | jsing | 2016-11-04 | 7 | -53/+107 | |
| | | | | | | ASN1_item_{d2i,i2d}_* equivalents. ok guenther@ miod@ | |||||
* | Nuke the KRB5 ASN.1 code from orbit. | jsing | 2016-11-04 | 3 | -984/+1 | |
| | | | | ok beck@ | |||||
* | Ride the current major bump and enable assembler code for nist 256p curve, | miod | 2016-11-04 | 4 | -3/+19 | |
| | | | | | | | | on amd64 only for now. Stanzas to enable it on arm, i386 and sparc64 are provided but commented out for lack of testing due to the machine room being currently in storage. ok jsing@ | |||||
* | make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden | beck | 2016-11-04 | 9 | -31/+124 | |
| | | | | | | functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@ | |||||
* | Add assembler code for the nist 256-bit GFp curve, written initially by | miod | 2016-11-04 | 9 | -6/+19107 | |
| | | | | | | | | | Intel. Obtained from BoringSSL, with some integration work borrowed from OpenSSL 1.0.2; assembler code for arm and sparc64 borrowed from OpenSSL 1.1.0. None of this code is enabled in libcrypto yet. ok beck@ jsing@ | |||||
* | Replace all uses of magic numbers when operating on OPENSSL_ia32_P[] by | miod | 2016-11-04 | 26 | -146/+245 | |
| | | | | | | | | | | | | | | | meaningful constants in a private header file, so that reviewers can actually get a chance to figure out what the code is attempting to do without knowing all cpuid bits. While there, turn it from an array of two 32-bit ints into a properly aligned 64-bit int. Use of OPENSSL_ia32_P is now restricted to the assembler parts. C code will now always use OPENSSL_cpu_caps() and check for the proper bits in the whole 64-bit word it returns. i386 tests and ok jsing@ | |||||
* | convert X509 manuals from pod to mdoc | schwarze | 2016-11-04 | 39 | -1825/+2566 | |
| | ||||||
* | No need to reach libssl private headers and to define TERMIOS anymore. | miod | 2016-11-04 | 1 | -4/+1 | |
| | | | | ok bcook@ | |||||
* | Remove I386_ONLY define. It was only used to prefer a | miod | 2016-11-04 | 18 | -60/+15 | |
| | | | | | | | faster-on-genuine-80386-but-slower-on-80486-onwards innstruction sequence in the SHA512 code, and had not been enabled in years, if at all. ok tom@ bcook@ | |||||
* | In OPENSSL_wipe_cpu() on i386, which noone uses anyway, check the proper | miod | 2016-11-04 | 1 | -1/+1 | |
| | | | | | | flag for the presence of a FPU before deciding to wipe the fpu registers. ok jsing@ | |||||
* | Add X509_up_ref, from boring | beck | 2016-11-04 | 2 | -2/+11 | |
| | | | | ok jsing@ | |||||
* | convert RSA manuals from pod to mdoc | schwarze | 2016-11-04 | 31 | -1223/+1919 | |
| | ||||||
* | convert RAND manuals from pod to mdoc | schwarze | 2016-11-03 | 11 | -196/+204 | |
| | ||||||
* | zap the overview manual page of the RAND subsystem | schwarze | 2016-11-03 | 2 | -36/+1 | |
| | | | | | that contained nothing but duplicate and misleading information; OK jsing@ | |||||
* | convert PEM and PKCS manuals from pod to mdoc | schwarze | 2016-11-03 | 27 | -1380/+2231 | |
| |