summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Crank major for libcrypto and libssl; more symbol removals to occur during themiod2014-04-152-4/+4
| | | | | next few moments, don't rush your update. Requested by deraadt@
* The NO_ASN1_OLD define was introduced in 0.9.7, 8 years ago, to allow formiod2014-04-1511-810/+2
| | | | | | | | | | obsolete (and mostly internal) routines to be compiled out. We don't expect any reasonable software to stick to these interfaces, so better clean up the view and unifdef -DNO_ASN1_OLD. The astute reader will notice the existence of NO_OLD_ASN1 which serves a similar purpose, but is more entangled. Its time will come, soon.
* Just like every web browser expands until it can read mail, every modularmiod2014-04-158-2151/+4
| | | | | | | | | | | | | | | library expands until it has its own dlfcn wrapper, and libcrypto is no exception. Remove the non-dlfcn DSO methods. This causes public DSO_METHOD_{beos,dl,vms,win32} to disappear (major bump coming soon). Note that portable software ought to use DSO_METHOD_openssl instead of picking the backend directly (which makes one wonder why the backends are exposed, as it is unlikely that more than one can work on your system). ok beck@ deraadt@
* remove FIPS mode support. people who require FIPS can buy something thattedu2014-04-1566-979/+9
| | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt
* Go home, VMS, you're drunkmiod2014-04-153-6559/+0
|
* In EC_POINT_invert(), actually check the correct function pointer for NULLmiod2014-04-151-1/+1
| | | | | before attempting to invoke it; trivial one-liner in OpenSSL RT #2569 ignored for 2.5 years.
* No licence.miod2014-04-155-963/+0
|
* Moved to regress/lib/libcrypto.miod2014-04-1523-9461/+0
|
* Remove the GOST engine: It is not compiled or used and depends on thereyk2014-04-154-8/+0
| | | | | | | | "dynamic engine" feature that is not enabled in our build. People who need it can still pull it out of the Attic; if it is to have a Russian engine just because it's a Russian engine. OK deraadt@ beck@
* Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternitybeck2014-04-1534-683/+5
| | | | | with the bearded ones... some API's that nobody should be using will dissapear with this commit.
* Toss a `unifdef -U OPENSSL_SYS_WINDOWS' bomb into crypto/bio.jsing2014-04-155-169/+3
| | | | ok miod@
* First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-153-700/+739
| | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.
* As we now remove it permanently, we no longer need NO_WINDOWS_BRAINDEATHbeck2014-04-152-6/+2
| | | | | as a build time option... ok deraadt@ miod@
* Remove VMS code.jsing2014-04-151-320/+0
| | | | ok miod@ beck@
* Replace the old OpenSSL PRNG by direct use of arc4random_buf(), keeping themiod2014-04-1511-1626/+66
| | | | | | | | | | | | | | | | | | | | | existing RAND interfaces unchanged. All interfaces allowing external feed or seed of the RNG (either from a file or a local entropy gathering daemon) are kept for ABI compatibility, but are no longer do anything. While the OpenSSL PRNG was required 15+ years ago when many systems lacked proper entropy collection, things have evolved and one can reasonably assume it is better to use the kernel (system global) entropy pool rather than trying to build one's own and having to compensate for thread scheduling... <RANT> Whoever thought that RAND_screen(), feeding the PRNG with the contents of the local workstation's display, under Win32, was a smart idea, ought to be banned from security programming. </RANT> ok beck@ deraadt@ tedu@
* remove a test directory. If anyone wants something this again, this isderaadt2014-04-1511-1826/+0
| | | | | | the wrong place and it will need heavy lifting. Love the .bat files and the reference to pre-draft pthreads code at MIT. ok beck
* First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-1522-4669/+4676
| | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.
* Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversionsbeck2014-04-1525-69/+69
| | | | | where the return value is ignored changing to (void) snprintf. ok deraadt@
* First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-1511-1970/+1994
| | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.
* First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-1525-1789/+1834
| | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.
* remove pentium specific benchmark codejsg2014-04-159-652/+0
| | | | ok miod@
* correct cases of code occuring directly after goto/break/returnjsg2014-04-151-1/+0
| | | | ok miod@ guenther@
* revert 1.2 and define OPENSSL_NO_EC_NISTP_64_GCC_128 again, it has a downsidesthen2014-04-142-0/+6
| | | | (breaks ssh ecdsa keys)
* Remove eng_cryptodev.c (merged into old-name hw_cryptodev.c); movemiod2014-04-144-1460/+38
| | | | | | | undo the move of crypto/engines/eng_padlock to engines/e_padlock. Requested by reyk@. Note that eng_padlock is not compiled in currently.
* used for windows dll builds onlymiod2014-04-142-4634/+0
|
* unifdef -U OPENBSD_DEV_CRYPTO and OPENSSL_OPENBSD_DEV_CRYPTO. This code was themiod2014-04-143-459/+0
| | | | | | early attempt at getting kernel-assisted crypto(4) used by libcrypto, before the engine API existed, and has been #if 0'd out for ages anyway. No API/ABI change.
* So the OpenSSL codebase does "get the time, add it as a random seed"deraadt2014-04-141-3/+0
| | | | | | | in a bunch of places inside the TLS engine, to try to keep entropy high. I wonder if their moto is "If you can't solve a problem, at least try to do it badly". ok miod
* remove auto-generated dependencies from the old unused build system, soderaadt2014-04-1456-5934/+0
| | | | | that it is easier to find code pieces. They are getting in the way. ok miod
* Remove the GMP engine: It was an experimental engine using libgmp asreyk2014-04-143-9/+0
| | | | | | | an alternative backend for BIGNUM calculations. It is PoC code that is not enabled in OpenSSL and probably not used by anymore. ok deraadt@
* Remove the CAPI engine: It is a backend for the Windows CryptoAPI andreyk2014-04-142-4/+0
| | | | | | could be maintained in an external package. "it should probably go" beck@
* replace PTR_SIZE_INT (only used for VMS) with uintptr_t, tweaks from jca@,sthen2014-04-144-54/+33
| | | | makes sense to beck@
* Remove the nuron engine. The static engine is not standalone and thereyk2014-04-143-5/+0
| | | | FPGA-based device is long obsolete.
* Remove the nCipher CHIL engine. It is not standalone and depends onreyk2014-04-144-26/+0
| | | | external libraries that aren't covered by the same license.
* Don't bother compiling files which end up containingmiod2014-04-145-1293/+2
| | | | | | #if OPENSSL_SYS_NOTYOURS <whole file> #endif
* two SHUTDOWN2 got away; noticed by beckderaadt2014-04-142-2/+4
|
* Use shutdown(s, SHUT_RDWR) instead of shutdown(s, 2).matthew2014-04-132-2/+2
| | | | ok beck deraadt
* Cope with the removal of openssl/symhacks.hderaadt2014-04-1314-22/+1
|
* Remove various horrible socket syscall wrappers, especially SHUTDOWN*deraadt2014-04-138-67/+67
| | | | | | which did shutdown + close, all nasty and surprising. Use the raw syscalls that everyone knows the behaviour of. ok beck matthew
* Flense a variety of windows support stuff, and a strange gettimeofday function.beck2014-04-131-12/+0
| | | | ok deraadt@
* symhacks for vms are no longer neededbeck2014-04-131-481/+0
| | | | ok deraadt@
* Remove vms support stuff.beck2014-04-133-153/+1
| | | | ok deraadt@
* Remove some stuff that isn't needed.beck2014-04-136-35/+35
| | | | ok miod@ deraadt@
* Remove the AEP engine: it is not standalone and doesn't seem to bereyk2014-04-133-5/+0
| | | | | | | | | relevant anymore. OpenSSL should have a better way to include 3rd party engines: either completely and free or external. But including a wrapper for a non-free wrapper in the code base does not make much sense and could also be provided by the vendor. ok deraadt@
* Remove the Atalla engine: It is not standalone and depends on externalreyk2014-04-133-5/+0
| | | | | | | | | non-free libraries. OpenSSL should have a better way to include 3rd party engines: either completely free or external. But including a wrapper for a non-free wrapper in the code base does not make much sense and could also be provided by the vendor. ok deraadt@
* Remove the cswift engine: it is not standalone and we don't have thereyk2014-04-133-7/+0
| | | | | | | | | | | | | hardware. The vendor_defns/cswift.h does not specify a copyright and theoretically defaults to the OpenSSL license, but it also mentions that it includes parts that have been "clipped" from CryptoSwift's proprietary headers. This file should better include an explicit copyright statement or mention OpenSSL's library instead of the ambiguous "Attribution notice". ok deraadt@
* Remove the "sureware" engine:reyk2014-04-133-5/+0
| | | | | | | | | | | | The vendor_defns/sureware.h file by Baltimore Technologies Ltd. has a copyright that does not grant rights! Vendor files should either include a compatible license in the copyright statement or use OpenSSL's defaults, but adding a copyright statement without any terms is not acceptable. It should not have been included in the first place. ok deraadt@
* Remove the Broadcom ubsec engine:reyk2014-04-134-6/+0
| | | | | | | | | | | | | The vendor_defns/hw_ubsec.h file has a copyright that does not grant rights! Vendor files should either include a compatible license in the copyright statement or use OpenSSL's defaults, but adding a copyright statement without any terms is not acceptable. It should not have been included in the first place. (The ubsec(4) kernel driver is not affected by this change) ok deraadt@
* Remove the IBM 4758 engine: we don't have this hardware and it is anreyk2014-04-134-6/+0
| | | | | | old PCI accelerator that was EOL'ed in 2005. ok deraadt@
* Don't edit on cvs. 23.1 as intended.miod2014-04-132-4/+4
|
* Do not install e_os.h, it is not an external header and should not be usedmiod2014-04-131-2/+1
| | | | by anything in userland.
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-26 16:03:23 +0000