| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
| |
This adds OPENSSL_init_crypto and OPENSSL_init_ssl, as well
thread safety modifications for the existing LibreSSL init
functions. The initialization routines are called automatically
by the normal entry points into the library, as in newer OpenSSL
ok jsing@, nits by tb@ and deraadt@
|
| |
|
|
|
| |
Discussed with beck@ and jsing@
ok beck@
|
| |
|
|
|
|
|
|
| |
and the new extension framework.
Feedback from doug@
ok inoguchi@
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Introduce a TLS extension handling framework that has per-extension type
functions to determine if an extension is needed, to build the extension
data and parse the extension data. This is somewhat analogous to BoringSSL,
however these build and parse functions are intentionally symetrical. The
framework is hooked into the existing TLS handling code in such a way that
we can gradual convert the extension handling code.
Convert the TLS Server Name Indication extension to the new framework,
while rewriting it to use CBB/CBS and be more strict in the process.
Discussed with beck@
ok inoguchi@
|
| |
|
|
|
|
|
| |
gcc4. This should avoid failed builds while transitioning compilers.
While here also make the CFLAGS blocks consistent across makefiles.
Discussed with deraadt@, ok beck@
|
| |
|
|
|
| |
and want to avoid the wrath of theo when he arrives home in a couple
of hours :)
|
| | |
|
| |
|
|
|
|
|
|
|
|
| |
suite has been selected, and convert the final finish MAC to use this
handshake hash.
This is a first step towards cleaning up the current handshake
buffer/digest code.
ok beck@ inoguchi@
|
| |
|
|
| |
ok beck@
|
| |
|
|
|
|
| |
ssl_versions.c file.
ok beck@
|
| |
|
|
|
|
| |
longer SSLv3 code.
ok beck@
|
| |
|
|
|
|
| |
fixed version) client/server code.
ok beck@
|
| |
|
|
|
| |
libraries, in particular considering that there are unrelated
files in doc/; requested by jsing@ and beck@
|
| | |
|
| |
|
|
| |
ok guenther@
|
| |
|
|
|
|
|
| |
declared in the public headers, and use __{BEGIN,END}_HIDDEN_DECLS
in the internal headers to optimize internal functions
ok jsing@
|
| |
|
|
|
|
| |
moved.
from Patrick Wildt
|
| |
|
|
|
|
|
| |
avoids permission problems due to the build and install stages being run
by different users.
ok deraadt jasper
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
| |
as configuration files; split manpages and .pc files between libcrypto and
libssl.
No functional change, only there to make engineering easier, and libcrypto
sources are still found in libssl/src/crypto at the moment.
ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects.
|
| |
|
|
|
|
| |
months since it was introduced so it's safe to assume people have this dir now.
ok deraadt@
|
| |
|
|
| |
prompted by brad
|
| |
|
|
| |
common/encouraged practice
|
| |
|
|
|
|
|
|
| |
projects depend on being present (e.g. various ports).
as discussed with various porters in a hungarian spa
help/feedback from ingo@ and also OK halex@
no objections from djm@
|
| |
|
|
|
|
| |
location for libssl, this makes lynx not bitch when seeing sites
with certificates signed by these issuers. We should probably
think carefully about adding a few more in here too.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* manpage related things moved to src/libssl/man/Makefile
* there are now 3 obj directories src/libssl/{crypto,ssl,man}/ instead
of one single src/libssl/obj
* instead of running Configure (with generates lots of symlinks, and
opensslconf.h) this patch stores pre-computed opensslconf.h files
in src/libssl/crypto/arch
* requires a make includes before the library can be built
* libssl and libcrypto can be build separately
(e.g. cd src/libssl/ssl && make obj && make)
* make depend is now supported
* no more symlink trees
tested by miod@ and fries@
|
| | |
|
| | |
|
| | |
|
| |
|
|
| |
correctly autogenerate obj_mac.h
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
|
|
functionality for shared libs.
Note that routines such as sslv2_init and friends that use RSA will
not work due to lack of RSA in this library.
Needs documentation and help from ports for easy upgrade to full
functionality where legally possible.
|