Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Remove a few useless comments | tb | 2024-07-09 | 1 | -6/+1 | |
| | ||||||
* | Apply a knfmt(8) sledgehammer | tb | 2024-07-09 | 1 | -226/+236 | |
| | ||||||
* | Add an RCS tag | tb | 2024-07-09 | 1 | -1/+1 | |
| | ||||||
* | Replace license stub with full license | tb | 2024-07-09 | 1 | -5/+55 | |
| | | | | | This reverts to the license added in OpenSSL's initial import of this file in commit 1eff3485b63f84956b5f212aa4d853783bf6c8b5 | |||||
* | link tls1_prf.c to build | tb | 2024-07-09 | 1 | -1/+2 | |
| | | | | ok jsing | |||||
* | Replace a malloc() call with calloc() | tb | 2024-07-09 | 1 | -1/+1 | |
| | ||||||
* | Replace an ossl_assert() with an error check | tb | 2024-07-09 | 1 | -2/+1 | |
| | ||||||
* | Use C99 initializers for tls1_prf_pkey_meth() | tb | 2024-07-09 | 1 | -19/+23 | |
| | ||||||
* | Inline an instance of OPENSSL_memdup() | tb | 2024-07-09 | 1 | -2/+11 | |
| | ||||||
* | Tidy up includes | tb | 2024-07-09 | 1 | -3/+7 | |
| | ||||||
* | OPENSSL_free() -> free() | tb | 2024-07-09 | 1 | -1/+1 | |
| | ||||||
* | OPENSSL_cleanse() -> explicit_bzero() | tb | 2024-07-09 | 1 | -3/+3 | |
| | ||||||
* | OPENSSL_clear_free() -> freezero() | tb | 2024-07-09 | 1 | -4/+4 | |
| | ||||||
* | OPENSSL_malloc() -> malloc() | tb | 2024-07-09 | 1 | -1/+1 | |
| | ||||||
* | Spell OPENSSL_zalloc() correctly as calloc() | tb | 2024-07-09 | 1 | -1/+1 | |
| | ||||||
* | Mechanically replace KDFerr() with KDFerror() | tb | 2024-07-09 | 1 | -8/+8 | |
| | ||||||
* | Add a verbatim copy of tls1_prf.c from OpenSSL 1.1.1 | tb | 2024-07-09 | 1 | -0/+278 | |
| | | | | | | | | | | | | From the last public commit b372b1f76450acdfed1e2301a39810146e28b02c of the OpenSSL_1_1_1-stable branch SHA256 (kdf/tls1_prf.c) = a519d3ff721d4ec59befac8586e24624fa87d9d8f6479327f7af58d652b6e4e5 Will be beat (a little bit) into shape in tree before linking it to the build. ok jsing | |||||
* | Add various defines for TLS1-PRF | tb | 2024-07-09 | 2 | -2/+36 | |
| | | | | ok jsing | |||||
* | Add EVP_PKEY_TLS1_PRF as alias for NID_tls1_prf | tb | 2024-07-09 | 1 | -1/+2 | |
| | | | | ok jsing | |||||
* | Choose fixed NID for TLS1-PRF | tb | 2024-07-09 | 1 | -0/+1 | |
| | ||||||
* | Add NID for TLS1-PRF | tb | 2024-07-09 | 1 | -0/+2 | |
| | | | | ok jsing | |||||
* | Actually enable namespaced builds in both libcrypto and libssl | beck | 2024-07-09 | 1 | -8/+1 | |
| | | | | (instead of commiting only one part) | |||||
* | Add bounded attributes to hmac.h | tb | 2024-07-09 | 1 | -5/+13 | |
| | | | | ok beck | |||||
* | Enable namespaced builds by default for libssl and libcrypto. | beck | 2024-07-09 | 1 | -3/+3 | |
| | | | | | | | | | | | Some further refinements will happen to the build process to automatically generate the Symbols.namespace file, and to remove our last public unhidden symbol (which was a mistake, but waits for a major bump to get removed) But for now everything should be using this. ok tb@ | |||||
* | Hide remaining unused ERR functions in err.h | beck | 2024-07-09 | 4 | -5/+9 | |
| | | | | ok tb@ | |||||
* | Hide CRYPTO_get_dynlock_create_callback | beck | 2024-07-09 | 3 | -2/+5 | |
| | | | | ok tb@ | |||||
* | Hide DES global variables | beck | 2024-07-09 | 4 | -3/+11 | |
| | | | | ok tb@ | |||||
* | Add missing symbols to Symbols.namespace | beck | 2024-07-09 | 1 | -0/+10 | |
| | | | | ok tb@ | |||||
* | Remove duplicates from Symbols.namespace | beck | 2024-07-09 | 1 | -6/+0 | |
| | | | | ok tb@ | |||||
* | Hide symbols for two missed public functions in bio.h | beck | 2024-07-09 | 4 | -3/+9 | |
| | | | | ok tb@ | |||||
* | Hide global _it symbols in pkcs12.h | beck | 2024-07-09 | 3 | -2/+10 | |
| | | | | ok tb@ | |||||
* | Hide global _it symbola in cms.h | beck | 2024-07-09 | 3 | -2/+10 | |
| | | | | ok tb@ | |||||
* | Hide global _it symbols in dsa.h | beck | 2024-07-08 | 3 | -2/+13 | |
| | | | | ok tb@ | |||||
* | Hide global _it symbols in rsa.h | beck | 2024-07-08 | 3 | -2/+20 | |
| | | | | ok tb@ | |||||
* | Guard variable declarations to unbreak non-namespaced builds. | beck | 2024-07-08 | 6 | -8/+18 | |
| | | | | ok tb@ | |||||
* | Hide global _it symbols in asn1t.h | beck | 2024-07-08 | 6 | -8/+20 | |
| | | | | ok tb@ | |||||
* | Hide global _it symbols in pkcs7.h | beck | 2024-07-08 | 3 | -2/+39 | |
| | | | | ok tb@ | |||||
* | remove a further spkac reference; ok tb | jmc | 2024-07-08 | 1 | -5/+3 | |
| | ||||||
* | Hide global _it variables in ocsp.h | beck | 2024-07-08 | 3 | -2/+49 | |
| | | | | ok tb@ | |||||
* | Hide global _it variables in asn1.h | beck | 2024-07-08 | 9 | -8/+77 | |
| | | | | ok tb@ | |||||
* | Hide global _it variables in x509.h | beck | 2024-07-08 | 15 | -14/+77 | |
| | | | | ok tb@ | |||||
* | Hide global _it variables in x509v3.h | beck | 2024-07-08 | 15 | -14/+113 | |
| | | | | ok tb@ | |||||
* | Pretend to clarify the way ipv6_asc() works | jca | 2024-07-08 | 1 | -4/+5 | |
| | | | | | | | | | Give example IPv6 addresses to clarify what is meant with 1, 2 or 3 zero length elements. tb made me look. perverted, twisted, crippled | |||||
* | Remove lhash statistics. | jsing | 2024-06-30 | 2 | -30/+2 | |
| | | | | | | These are not exactly useful and we previously stopped exposing them. ok tb@ | |||||
* | libcrypto: constify most error string tables | tb | 2024-06-24 | 26 | -139/+321 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | These constitute the bulk of the remaining global mutable state in libcrypto. This commit moves most of them into data.rel.ro, leaving out ERR_str_{functs,libraries,reasons} (which require a slightly different approach) and SYS_str_reasons which is populated on startup. The main observation is that if ERR_load_strings() is called with a 0 lib argument, the ERR_STRING_DATA argument is not actually modified. We could use this fact to cast away const on the caller side and be done with it. We can make this cleaner by adding a helper ERR_load_const_strings() which explicitly avoids the assignment to str->error overriding the error code already set in the table. In order for this to work, we need to sprinkle some const in err/err.c. CMS called ERR_load_strings() with non-0 lib argument, but this didn't actually modify the error data since it ored in the value already stored in the table. Annoyingly, we need to cast const away once, namely in the call to lh_insert() in int_err_set_item(). Fixing this would require changing the public API and is going to be tricky since it requires that the LHASH_DOALL_FN_* types adjust. ok jsing | |||||
* | x509_conf: rename the merr label into err | tb | 2024-06-24 | 1 | -8/+8 | |
| | ||||||
* | Remove the less-than-useful change log. | jsing | 2024-06-22 | 1 | -39/+1 | |
| | | | | ok tb@ | |||||
* | Rewrite BN_bn2mpi() using CBB. | jsing | 2024-06-22 | 1 | -24/+35 | |
| | | | | | | | | | | | | | | The content is effectively a u32 length prefixed field, so use CBB_add_u32_length_prefixed(). Use BN_bn2binpad() rather than manually padding if we need to extend and use sensible variable names so that the code becomes more readable. Note that since CBB can fail we now need to be able to indicate failure. This means that BN_bn2mpi() can now return -1 when it would not have previously (correct callers will check that BN_bn2mpi() returns a positive length). ok tb@ | |||||
* | Sync bytestring from libssl. | jsing | 2024-06-22 | 2 | -2/+15 | |
| | ||||||
* | x_all.c: remove a bunch of unnecessary parentheses | tb | 2024-06-19 | 1 | -23/+19 | |
| |