| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Ride the current major bump and enable assembler code for nist 256p curve, | miod | 2016-11-04 | 4 | -3/+19 | |
| | | | | | | | | | on amd64 only for now. Stanzas to enable it on arm, i386 and sparc64 are provided but commented out for lack of testing due to the machine room being currently in storage. ok jsing@ | |||||
| * | make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hidden | beck | 2016-11-04 | 9 | -31/+124 | |
| | | | | | | | functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@ | |||||
| * | Add assembler code for the nist 256-bit GFp curve, written initially by | miod | 2016-11-04 | 9 | -6/+19107 | |
| | | | | | | | | | | Intel. Obtained from BoringSSL, with some integration work borrowed from OpenSSL 1.0.2; assembler code for arm and sparc64 borrowed from OpenSSL 1.1.0. None of this code is enabled in libcrypto yet. ok beck@ jsing@ | |||||
| * | Replace all uses of magic numbers when operating on OPENSSL_ia32_P[] by | miod | 2016-11-04 | 26 | -146/+245 | |
| | | | | | | | | | | | | | | | | meaningful constants in a private header file, so that reviewers can actually get a chance to figure out what the code is attempting to do without knowing all cpuid bits. While there, turn it from an array of two 32-bit ints into a properly aligned 64-bit int. Use of OPENSSL_ia32_P is now restricted to the assembler parts. C code will now always use OPENSSL_cpu_caps() and check for the proper bits in the whole 64-bit word it returns. i386 tests and ok jsing@ | |||||
| * | convert X509 manuals from pod to mdoc | schwarze | 2016-11-04 | 39 | -1825/+2566 | |
| | | ||||||
| * | No need to reach libssl private headers and to define TERMIOS anymore. | miod | 2016-11-04 | 1 | -4/+1 | |
| | | | | | ok bcook@ | |||||
| * | Remove I386_ONLY define. It was only used to prefer a | miod | 2016-11-04 | 18 | -60/+15 | |
| | | | | | | | | faster-on-genuine-80386-but-slower-on-80486-onwards innstruction sequence in the SHA512 code, and had not been enabled in years, if at all. ok tom@ bcook@ | |||||
| * | In OPENSSL_wipe_cpu() on i386, which noone uses anyway, check the proper | miod | 2016-11-04 | 1 | -1/+1 | |
| | | | | | | | flag for the presence of a FPU before deciding to wipe the fpu registers. ok jsing@ | |||||
| * | Add X509_up_ref, from boring | beck | 2016-11-04 | 2 | -2/+11 | |
| | | | | | ok jsing@ | |||||
| * | convert RSA manuals from pod to mdoc | schwarze | 2016-11-04 | 31 | -1223/+1919 | |
| | | ||||||
| * | convert RAND manuals from pod to mdoc | schwarze | 2016-11-03 | 11 | -196/+204 | |
| | | ||||||
| * | zap the overview manual page of the RAND subsystem | schwarze | 2016-11-03 | 2 | -36/+1 | |
| | | | | | | that contained nothing but duplicate and misleading information; OK jsing@ | |||||
| * | convert PEM and PKCS manuals from pod to mdoc | schwarze | 2016-11-03 | 27 | -1380/+2231 | |
| | | ||||||
| * | convert configuration manuals from pod to mdoc | schwarze | 2016-11-03 | 9 | -305/+340 | |
| | | ||||||
| * | convert remaining ASN1 object manuals from pod to mdoc | schwarze | 2016-11-03 | 5 | -175/+299 | |
| | | ||||||
| * | convert HMAC and MD5 manuals from pod to mdoc | schwarze | 2016-11-03 | 5 | -210/+393 | |
| | | ||||||
| * | convert EVP manuals from pod to mdoc | schwarze | 2016-11-03 | 49 | -2724/+4229 | |
| | | ||||||
| * | convert ERR manuals from pod to mdoc; while reading this, | schwarze | 2016-11-02 | 23 | -705/+963 | |
| | | | | | i wtfed, laughed, puked, and cried in more or less that order... | |||||
| * | convert DSA and EC manuals from pod to mdoc | schwarze | 2016-11-02 | 33 | -1241/+2658 | |
| | | ||||||
| * | convert DES and DH manuals from pod to mdoc | schwarze | 2016-11-02 | 15 | -715/+1244 | |
| | | ||||||
| * | bump to LibreSSL 2.5.1 | bcook | 2016-10-31 | 1 | -3/+3 | |
| | | ||||||
| * | unifdef OPENSSL_NO_CMS | jsing | 2016-10-19 | 8 | -123/+8 | |
| | | ||||||
| * | If BN_div_word() fails (by returning (BN_ULONG)-1) or if the division | guenther | 2016-10-17 | 1 | -4/+8 | |
| | | | | | | | | | | | fails to reduce the input in the expected space then fail out instead of overflowing the allocated buffer. combines openssl commits 28a89639da50b1caed4ff3015508f23173bf3e49 and 3612ff6fcec0e3d1f2a598135fe12177c0419582 ok doug@ beck@ | |||||
| * | Move libcrypto, librpcsvc and gnu/usr.bin/cc/include from RDIRS to PRDIRS, | tb | 2016-10-16 | 1 | -2/+4 | |
| | | | | | | | | | | | | | | | and add prereq targets, so some header files are generated by BUILDUSER during 'make prereq' instead of by root during 'make includes'. Switch the order of 'make cleandir' and 'make includes' during 'make build' so we don't generate many files twice. Except for some machine@ symlinks from ${MACHINE}/stand, /usr/obj is now clean from files generated by root during 'make build'. Those will be cleaned up in a second step. help, testing & ok deraadt, input from natano, further testing rpe | |||||
| * | Fix some broken .Xr links, loosely based on a diff | schwarze | 2016-10-05 | 1 | -13/+12 | |
| | | | | | | | | | from Rob Pierce <rob at 2keys dot ca>. The content of this page may also need expert attention, i suspect it may be lacking modern algorithms and over-emphasizing obsolete ones, but i dare not touch the content. | |||||
| * | In X509_cmp_time(), pass asn1_time_parse() the tag of the field being | guenther | 2016-10-02 | 1 | -2/+3 | |
| | | | | | | | | | | parsed so that a malformed GeneralizedTime field is recognized as an error instead of potentially being interpreted as if it was a valid UTCTime. Reported by Theofilos Petsios (theofilos (at) cs.columbia.edu) ok beck@ tedu@ jsing@ | |||||
| * | Append to CLEANFILES instead of replacing it, so libcrypto.pc is | natano | 2016-09-23 | 1 | -2/+2 | |
| | | | | | | | deleted on make clean. ok millert | |||||
| * | revert documentation update for the clearning behavior we already reverted | bcook | 2016-09-22 | 1 | -5/+1 | |
| | | ||||||
| * | Generate pkg-config files at build time like everything else. This | natano | 2016-09-14 | 1 | -2/+3 | |
| | | | | | | | | avoids permission problems due to the build and install stages being run by different users. ok deraadt jasper | |||||
| * | Files in /etc/ssl belong to root. ok deraadt | natano | 2016-09-11 | 1 | -4/+4 | |
| | | ||||||
| * | missing space after comma | tb | 2016-09-09 | 1 | -2/+2 | |
| | | | | | | | (this was apparently lost during the repo surgery) ok bcook | |||||
| * | back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Cipher/Encrypt/DecryptFinal | bcook | 2016-09-09 | 1 | -4/+1 | |
| | | | | | | Software that refers to ctx after calling Final breaks with these changes. revert parts of 1.31 and 1.32 | |||||
| * | remove CMS manuals; beck@ agress with the general idea | schwarze | 2016-09-05 | 23 | -2347/+1 | |
| | | ||||||
| * | Remove cms. | jsing | 2016-09-04 | 1 | -8/+1 | |
| | | ||||||
| * | Remove cms. | jsing | 2016-09-04 | 15 | -7541/+0 | |
| | | | | | ok beck@, guenther@, tedu@ | |||||
| * | Expand DECLARE_ASN1_.*FUNCTIONS macros. | jsing | 2016-09-04 | 5 | -69/+293 | |
| | | | | | No change in preprocessed output, ignoring whitespace and line numbers. | |||||
| * | Expand DECLARE_ASN1_.*FUNCTIONS macros. | jsing | 2016-09-04 | 2 | -7/+27 | |
| | | | | | No change in preprocessed output, ignoring whitespace and line numbers. | |||||
| * | Expand DECLARE_ASN1_.*FUNCTIONS macros. | jsing | 2016-09-04 | 1 | -33/+133 | |
| | | | | | No change in preprocessed output, ignoring whitespace. | |||||
| * | Place IMPLEMENT_PEM macros under #ifndef LIBRESSL_INTERNAL. | jsing | 2016-09-04 | 1 | -2/+4 | |
| | | ||||||
| * | Sort and group functions. | jsing | 2016-09-04 | 4 | -238/+215 | |
| | | ||||||
| * | Expand IMPLEMENT_PEM macros. | jsing | 2016-09-04 | 4 | -30/+545 | |
| | | | | | No change in generated assembly. | |||||
| * | Less S390. | jsing | 2016-09-04 | 12 | -4596/+2 | |
| | | | | | ok deraadt@ | |||||
| * | Less IA64. | jsing | 2016-09-04 | 10 | -6846/+1 | |
| | | | | | ok deraadt@ | |||||
| * | Less vax. | jsing | 2016-09-04 | 4 | -617/+1 | |
| | | | | | ok deraadt@ | |||||
| * | include <sys/types.h> to get <sys/cdefs.h> instead (for __warn_references) | bcook | 2016-09-04 | 1 | -2/+2 | |
| | | | | | corrected by deraadt@ / guenther@ | |||||
| * | include <sys/cdefs.h> for portable | bcook | 2016-09-04 | 1 | -1/+3 | |
| | | ||||||
| * | Add ISRG Root X1, the letsencrypt CA root. This is now included in its own | sthen | 2016-09-04 | 1 | -1/+55 | |
| | | | | | | right in Mozilla's CA list, rather than relying on IdenTrust cross-signing. ok beck@ jca@ | |||||
| * | only regen pkg-config files when required; ok jasper | natano | 2016-09-04 | 1 | -5/+5 | |
| | | ||||||
| * | switch to a constant-time gather procedure for amd64 mont5 asm | bcook | 2016-09-03 | 1 | -199/+314 | |
| | | | | | | | | from OpenSSL commit 7f98aa7403a1244cf17d1aa489f5bb0f39bae431 CVE-2016-0702 ok beck@ | |||||
| * | add constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF. | bcook | 2016-09-03 | 1 | -16/+55 | |
| | | | | | | | | | | | Patch based on OpenSSL commit d7a854c055ff22fb7da80c3b0e7cb08d248591d0 "Performance penalty varies from platform to platform, and even key length. For rsa2048 sign it was observed to reach almost 10%." CVE-2016-0702 ok beck@ | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |