summaryrefslogtreecommitdiff
path: root/src/lib/libssl/tls13_buffer.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2021-10-23Change tlsext_tick_lifetime_hint to uint32_t.jsing4-17/+11
Now that SSL_SESSION is opaque, change tlsext_tick_lifetime_hint from long to uint32_t (matching RFC4507), rather than continuing to work around an inappropriate type choice. ok tb@
2021-10-22Prepare to provide X509_get_{extended_,}key_usage()tb2-2/+32
ok beck jsing
2021-10-22Switch from u_int and u_char to u32 and u8 to avoid portability issues.tb1-17/+14
Prompted by a diff by Jonas Termansen. ok jsing
2021-10-22Prepare to provide X509_REQ_pubkey_get0()tb2-2/+13
ok jsing
2021-10-22new manual page EVP_PKEY_add1_attr(3) documenting nine functionsschwarze7-8/+202
for associating X.501 Attributes with private keys
2021-10-22new manual page X509at_add1_attr(3)schwarze4-6/+140
describing five functions to change arrays of X.501 Attribute objects
2021-10-22fix a gratuitiously different argument nameschwarze1-3/+3
2021-10-22new manual page X509at_get_attr(3)schwarze3-4/+163
documenting five X.501 Attribute read accessors
2021-10-22Put back sys/types.h and sys/socket.h. The latter was unintentionallytb1-1/+3
removed and the former is still needed, as pointed out by kettenis
2021-10-22Fix some ghastly whitespace. From Martin Vahlensiecktb1-6/+6
2021-10-22Use unsigned char instead of u_char in base64.c. This is a mildtb1-9/+6
portability annoyance since not all systems have u_char. Remove the now unused includes sys/types.h and stdio.h. u_char diff from Jonas Termansen ok deraadt
2021-10-22Garbage collect an unused variable.tb1-4/+2
2021-10-22Stop setting enc.modified manually. It's no longer needed.tb2-4/+2
2021-10-21Simplify the description of RETURN VALUES.schwarze1-10/+4
After tb@'s commit x509/x509_lu.c rev. 1.33, it is no longer necessary to talk about X509_LU_* constants as return values from these functions. Feedback and OK from tb@.
2021-10-21Simplify a return value check for X509_STORE_get_by_subject() nowtb1-18/+7
that we know that it only returns 0 or 1. Eliminate the last uses of X509_LU_{FAIL,RETRY}. ok jsing
2021-10-21Set enc.modified if the X509_REQ is going to be modified.tb1-1/+4
ok jsing
2021-10-21new manual page X509_ATTRIBUTE_set1_object(3)schwarze4-6/+276
documenting five X.501 Attribute write accessors
2021-10-21Sync parts of X509_STORE_get_by_subject() with OpenSSLtb1-13/+7
Initialize stmp.type and stmp.data.ptr so that a user-defined lookup method need not take responsibility of initializing those. Get rid of current_method, which was never really used. Stop potentially returning a negative value since most callers assume Boolean return values already. In addition, garbage collect the pointless j variable. ok jsing
2021-10-21Prepare to make X509 opaque.tb1-4/+7
ok jsing
2021-10-21libtls: Don't reach into X509_STORE_CTX.tb1-12/+20
ok jsing
2021-10-21Switch from X509_VERIFY_PARAM_set_flags() to X509_STORE_set_flags().tb1-2/+2
This reduces the number of reacharounds into libcrypto internals. ok jsing
2021-10-21Add XKU_ANYEKU #define and use it to cache the anyExtendedKeyUsagetb2-3/+8
extension. This is part of OpenSSL commit df4c395c which didn't make it into our tree for some reason. ok jsing
2021-10-21Prepare to provide X509_get_X509_PUBKEY() as a function.tb2-5/+15
ok jsing
2021-10-21Bump to LibreSSL 3.5.0tb1-3/+3
2021-10-21Eliminate a dead assignment and a weird cast. Adjust a comment totb1-6/+3
reality while there. ok jsing
2021-10-21Print uid with %u instead of %i.tb1-2/+2
Prompted by a diff by Jonas Termansen, discussed with deraadt, millert ok jsing
2021-10-21Use *printf %d instead of %itb1-2/+2
ok jsing
2021-10-21Avoid potential NULL dereferences in dtls1_free()tb1-2/+7
ok jsing
2021-10-20document ASN1_STRING_set_by_NID(3)schwarze2-5/+129
and the three functions related to the global mask
2021-10-20new manual page ASN1_mbstring_copy(3)schwarze4-5/+182
also documenting ASN1_mbstring_ncopy(3)
2021-10-20new manual page X509_ATTRIBUTE_get0_object(3)schwarze3-2/+139
documenting the four X.501 Attribute read accessors
2021-10-20document X509_ATTRIBUTE_create(3) and X509_ATTRIBUTE_dup(3)schwarze1-6/+60
2021-10-19document X509_get_pubkey_parameters(3) in a new manual pageschwarze5-7/+114
2021-10-19more precision, fewer wordsschwarze1-28/+43
2021-10-19document i2d_PrivateKey_bio(3) and i2d_PrivateKey_fp(3)schwarze1-12/+37
2021-10-19install X509_PKEY_new(3)schwarze1-1/+2
2021-10-19document X509_PKEY_new(3) and X509_PKEY_free(3)schwarze4-8/+103
2021-10-18document X509_VERIFY_PARAM_inherit(3) and X509_VERIFY_PARAM_set1(3)schwarze4-8/+159
2021-10-18split seven functions out of the page X509_VERIFY_PARAM_set_flags(3), whichschwarze5-134/+175
is becoming excessively long, into a new page X509_VERIFY_PARAM_new(3); no content change
2021-10-15Pull in ssl_locl.h so that we can keep reaching into libssl internals.jsing2-1/+4
2021-10-15Move various structs from ssl.h/tls1.h to ssl_locl.h.jsing3-140/+128
These were already under LIBRESSL_INTERNAL hence no ABI change. ok tb@
2021-10-14Use unsigned char instead of u_char for two prototypes (like everywheretb1-4/+4
else in libcrypto's manuals and headers).
2021-10-13ssltest.c does not need param.htb1-1/+0
From Jonas Termansen
2021-10-13Remove __dead from usage() to reduce the diff needed to build LibreSSLtb1-3/+3
on sortix. Prompted by a diff by Jonas Termansen
2021-10-13Provide realpath(1)kn1-2/+3
A tiny realpath(3) wrapper to make a porter's life easier. Feedback kettenis deraadt cheloha sthen OK cheloha martijn deraadt
2021-10-11does not need arpa/nameser.hderaadt1-2/+1
2021-10-06X509_STORE_CTX_init() allows the store to be NULL on init. Add checksclaudio1-1/+11
for a NULL ctx->ctx in the lookup functions using X509_STORE_CTX. This affects X509_STORE_get1_certs(), X509_STORE_get1_crls(), X509_STORE_CTX_get1_issuer() and X509_STORE_get_by_subject(). With this X509_verify_cert() no longer crashes with a NULL store. With and OK tb@
2021-10-02Use SSL_CTX_get0_param() rather than reaching into the SSL_CTX.jsing1-2/+2
2021-09-30Mark another test as failing with the legacy verifier.jsing2-2/+4
This test now fails with the legacy verifier, due to X509_V_FLAG_TRUSTED_FIRST being enabled by default.
2021-09-30Enable X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier.jsing1-1/+2
In order to work around the expired DST Root CA X3 certficiate, enable X509_V_FLAG_TRUSTED_FIRST in the legacy verifier. This means that the default chain provided by Let's Encrypt will stop at the ISRG Root X1 intermediate, rather than following the DST Root CA X3 intermediate. Note that the new verifier does not suffer from this issue, so only a small number of things will hit this code path. ok millert@ robert@ tb@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-28 22:37:22 +0000