| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
additions and functionality changes.
|
|
|
|
| |
ok jsing@, deraadt@, beck@
|
|
|
|
| |
OK jsing@
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
OpenSSL stopped building it last year and removed it this year.
Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1.
Also cranked major version in libcrypto, libssl and libtls.
"fine with me" bcook@ miod@
|
|
|
|
|
|
| |
Libtls is riding this crank.
ok miod@ bcook@
|
|
|
|
| |
ok miod@ jsing@
|
| |
|
|
|
|
| |
Discussed with/requested by deraadt@ at the conclusion of s2k15.
|
|
|
|
| |
ok beck@ deraadt@ miod@
|
|
|
|
|
|
|
|
|
|
| |
access to the certificates. SSL_CTX_load_verify_mem() is a frontend
to the new X509_STORE_load_mem() function that allows to load the CA
chain from a memory buffer that is holding the PEM-encoded files.
This function allows to handle the verification in privsep'ed code.
Adopted for LibreSSL based on older code from relayd (by pyr@ and myself)
With feedback and OK bluhm@
|
| |
|
|
|
|
|
| |
This causes a libssl major version bump as this affects the layout of some
internal-but-unfortunately-made-visible structs.
|
| |
|
|
|
|
|
| |
While there are no additional symbols, there is an additional command that
clients will potentially depend on.
|
|
|
|
| |
ok jsing@ miod@
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
7 years ago and never made it into an RFC. That code wasn't compiled in
anyway unless one would define the actual on-the-wire extension id bytes;
crank libssl major.
With help and enlightenment from Brendan MacDonell.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
of 64-bit data, and only used by DTLS, to libssl where it belongs.
Remove pqueue_print() which is a debugging interface and serves no useful
purpose, except for the regress test, which grows its own pqueue_print()
routine.
Bump libcrypto major and libssl minor.
WARNING: do not update your tree right now, more changes are coming, which
will ride the libcrypto major bump.
|
|
|
|
|
|
|
| |
APIs that pass times as longs will have to change at some point...
Bump major on both libcrypto and libssl.
ok tedu@
|
|
|
|
|
| |
next few moments, don't rush your update.
Requested by deraadt@
|
|
|
|
| |
and libssl major (ssl_check_clienthello_tlsext split into two functions)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
members to 64bit types. Assign new syscall numbers for (almost
all) the syscalls that involve the affected types, including anything
with time_t, timeval, itimerval, timespec, rusage, dirent, stat,
or kevent arguments. Add a d_off member to struct dirent and replace
getdirentries() with getdents(), thus immensely simplifying and
accelerating telldir/seekdir. Build perl with -DBIG_TIME.
Bump the major on every single base library: the compat bits included
here are only good enough to make the transition; the T32 compat
option will be burned as soon as we've reached the new world are
are happy with the snapshots for all architectures.
DANGER: ABI incompatibility. Updating to this kernel requires extra
work or you won't be able to login: install a snapshot instead.
Much assistance in fixing userland issues from deraadt@ and tedu@
and build assistance from todd@ and otto@
|
|
|
|
| |
major cranks
|
|
|
|
| |
Brad, jasper and naddy helped with test builds, fixing ports, etc.
|
| |
|
| |
|
| |
|
|
|
|
| |
openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@
|
| |
|
| |
|
| |
|
|
|
|
| |
Makefiles, crank shlib_version
|
| |
|
| |
|
|
|
|
|
|
|
| |
To build you must:
cd /usr/src && make obj && make includes
cd lib/libc && make depend && make && NOMAN=1 sudo make install
cd /usr/src && make build
|
| |
|
|
|
|
|
|
|
|
| |
now build libraries with propolice enabled. Without this, existing
binaries (such as ports/packages) that link with any system library
other than libc will fail with an undefined symbol of "___guard"
(__guard on ELF).
Pointed out by markus@ and discussed with deraadt@
|
| |
|
|
|
|
|
| |
Note that this is a maintenence release, API's appear *not* to have changed.
As such, I have only increased the minor number on these libraries
|
| |
|
| |
|
|
|
|
|
| |
of 64 bit mode. This makes ssh -2 run about 10x faster, because the 64 bit
mul instructions no longer need emulation.
|
|
|
|
| |
routines which used to be externally used are now macros. ugh.
|
| |
|
|
|
|
|
|
| |
Sept 21. Note: This means you shouldn't really be running -current
for anything in the United States. Either wait for Sept 21, or for the
next release, or move to the free world :)
|