Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Drop the unused evp include | tb | 2024-07-12 | 1 | -2/+1 | |
| | ||||||
* | Rename the sk in this file to exts | tb | 2024-07-12 | 1 | -16/+16 | |
| | ||||||
* | Avoid using ret for an X509_EXTENSION | tb | 2024-07-12 | 1 | -16/+16 | |
| | | | | | | | Instead rename the **ext in this file to **out_ext, freeing up ext in X509_EXTENSION_create_by_OBJ() Appeases some jsing grumbling on review | |||||
* | Tweak variable names in X509v3_add_ext() | tb | 2024-07-12 | 1 | -12/+12 | |
| | | | | | | x -> out_ext, sk -> exts requested by jsing on review | |||||
* | Rename crit to critical in this file | tb | 2024-07-12 | 1 | -10/+10 | |
| | | | | requested by jsing on review | |||||
* | Simplify X509_EXTENSION_get_critical() | tb | 2024-07-12 | 1 | -4/+3 | |
| | | | | | | This is a silly API, but there are worse. ok jsing | |||||
* | Lose a few extra lines in X509_EXTENSION_set_object() | tb | 2024-07-12 | 1 | -4/+2 | |
| | | | | ok jsing | |||||
* | Streamline X509_EXTENSION_create_by_OBJ() | tb | 2024-07-12 | 1 | -9/+10 | |
| | | | | ok jsing | |||||
* | Clean up X509_EXTENSION_create_by_NID() | tb | 2024-07-12 | 1 | -9/+5 | |
| | | | | | | | | Remove unnecessary ret parameter and freeing of obj (which looks like a double free or freeing of unallocated memory but actually isn't due to various magic flags). Also make this const correct. ok jsing | |||||
* | Rewrite X509v3_add_ext() | tb | 2024-07-12 | 1 | -24/+23 | |
| | | | | | | | | | | | | | This is another brilliancy straight out of muppet labs. Overeager and misguided sprinkling of NULL checks, going through the trademark poor code review, made this have semantics not matching what almost every other function with this signature would be doing in OpenSSL land. This is a long standing mistake we can't fix without introducing portability traps, but at least annotate it. Simplify the elaborate dance steps and make this resemble actual code. ok jsing | |||||
* | Simplify X509v3_get_ext() and X509v3_delete_ext() | tb | 2024-07-12 | 1 | -7/+1 | |
| | | | | | | Drop unnecessary checks that are part of the stack API. ok jsing | |||||
* | Align X509v3_get_ext_by_critical() with X509v3_get_ext_by_OBJ() | tb | 2024-07-12 | 1 | -12/+9 | |
| | | | | | | Plus, replace a manual check with a call to X509_EXTENSION_get_critical(). ok jsing | |||||
* | Clean up X509v3_get_ext_by_OBJ() | tb | 2024-07-12 | 1 | -11/+7 | |
| | | | | | | | | Like most of its siblings, this function can be simplified significantly by making proper use of the API that is being built. Drop unnecessary NULL checks and other weirdness and add some const correctness. ok jsing | |||||
* | Despite being an ELF citizen, hppa is its own special snowflake and requires | miod | 2024-07-11 | 1 | -1/+5 | |
| | | | | | | | different asm stanzas to produce strong aliases. This unbreaks libcrypto (and thus ssh, among other things) on hppa after the recent switch to LIBRESSL_CRYPTO_NAMESPACE. | |||||
* | Remove the static symbols.namespace, and just generate the _libre_ | beck | 2024-07-10 | 2 | -3359/+3 | |
| | | | | | | symbols from symbols.list now that we have everything hidden ok tb@ | |||||
* | forgot to add a history section for the TLS PRF API | tb | 2024-07-10 | 1 | -1/+4 | |
| | ||||||
* | link EVP_PKEY_CTX_set_tls1_prf_md.3 to build | tb | 2024-07-10 | 1 | -1/+2 | |
| | ||||||
* | Import EVP_PKEY_CTX_set_tls1_prf_md.3 from OpenSSL 1.1.1 | tb | 2024-07-10 | 1 | -0/+168 | |
| | | | | | With only slight application of color to this entelodont's lips. It's the usual deal - hard to say what's worse, the code or its docs... | |||||
* | Including kdf.h isn't enough, you also need evp.h | tb | 2024-07-10 | 1 | -2/+3 | |
| | | | | | It will be a cold day in hell before I see an OpenSSL manpage without mistakes in it. | |||||
* | Unwrap two lines | tb | 2024-07-10 | 1 | -7/+4 | |
| | ||||||
* | Add another empty line | tb | 2024-07-09 | 1 | -1/+2 | |
| | ||||||
* | Turn tls1_prf_alg() into single exit | tb | 2024-07-09 | 1 | -9/+11 | |
| | | | | | requested by jsing on review ok beck | |||||
* | Unwrap a few more lines | tb | 2024-07-09 | 1 | -9/+5 | |
| | ||||||
* | Unwrap a couple of lines | tb | 2024-07-09 | 1 | -5/+3 | |
| | ||||||
* | Align math with t1_enc.c | tb | 2024-07-09 | 1 | -6/+8 | |
| | | | | suggested by jsing on review | |||||
* | Minor cosmetics in pkey_tls1_prf_derive() | tb | 2024-07-09 | 1 | -5/+3 | |
| | | | | noticed by jsing on review | |||||
* | Replace explicit_bzero() plus free() with freezero() | tb | 2024-07-09 | 1 | -3/+2 | |
| | | | | This is simpler, if slightly more expensive | |||||
* | Shuffle things into a more sensible order | tb | 2024-07-09 | 1 | -63/+58 | |
| | | | | no functional change | |||||
* | Use better order in EVP_PKEY_CTRL_TLS_SECRET | tb | 2024-07-09 | 1 | -6/+5 | |
| | | | | Also avoid an unnecessary NULL check. | |||||
* | Add tls1_prf_pkey_meth to pkey_methods | tb | 2024-07-09 | 1 | -1/+3 | |
| | | | | ok jsing | |||||
* | Make a NULL check explicit | tb | 2024-07-09 | 1 | -2/+2 | |
| | ||||||
* | Zap or align some ugly comments | tb | 2024-07-09 | 1 | -4/+3 | |
| | ||||||
* | Test & assign once more | tb | 2024-07-09 | 1 | -4/+4 | |
| | ||||||
* | sec_len -> secret_len | tb | 2024-07-09 | 1 | -3/+3 | |
| | ||||||
* | Test and assign in tls1_prf_P_hash() | tb | 2024-07-09 | 1 | -5/+8 | |
| | ||||||
* | Fix whitespace around '/' | tb | 2024-07-09 | 1 | -4/+4 | |
| | ||||||
* | Invert logic in tls1_prf_alg() | tb | 2024-07-09 | 1 | -22/+22 | |
| | ||||||
* | olen -> out_len | tb | 2024-07-09 | 1 | -15/+15 | |
| | ||||||
* | Add a few empty lines | tb | 2024-07-09 | 1 | -1/+7 | |
| | ||||||
* | seedlen -> seed_len | tb | 2024-07-09 | 1 | -10/+10 | |
| | ||||||
* | seclen -> secret_len | tb | 2024-07-09 | 1 | -7/+7 | |
| | ||||||
* | slen -> secret_len | tb | 2024-07-09 | 1 | -7/+8 | |
| | ||||||
* | sec -> secret | tb | 2024-07-09 | 1 | -17/+17 | |
| | ||||||
* | Replace local typedef with spelling out the struct name | tb | 2024-07-09 | 1 | -8/+8 | |
| | ||||||
* | Remove a few useless comments | tb | 2024-07-09 | 1 | -6/+1 | |
| | ||||||
* | Apply a knfmt(8) sledgehammer | tb | 2024-07-09 | 1 | -226/+236 | |
| | ||||||
* | Add an RCS tag | tb | 2024-07-09 | 1 | -1/+1 | |
| | ||||||
* | Replace license stub with full license | tb | 2024-07-09 | 1 | -5/+55 | |
| | | | | | This reverts to the license added in OpenSSL's initial import of this file in commit 1eff3485b63f84956b5f212aa4d853783bf6c8b5 | |||||
* | link tls1_prf.c to build | tb | 2024-07-09 | 1 | -1/+2 | |
| | | | | ok jsing | |||||
* | Replace a malloc() call with calloc() | tb | 2024-07-09 | 1 | -1/+1 | |
| |