Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | | some of these functions are prototyped in pwd.h; ok deraadt@ | djm | 2004-04-06 | 1 | -1/+2 | |
| | | | | ||||||
* | | | | let rcmdsh work on hosts that don't have an ipv4 address. | marc | 2004-04-01 | 1 | -3/+4 | |
| | | | | | | | | | | | | | | | | If it works it is fine with me -- millert@ | |||||
* | | | | support IPv6 connections in "openssl s_client", adding -4 and -6 options to | djm | 2004-03-31 | 3 | -96/+45 | |
| | | | | | | | | | | | | | | | | force protocol; ok itojun@ | |||||
* | | | | Unbreak rmd160. Was broken on sparc64 when compiled with gcc3. Fix and report | hshoexer | 2004-03-22 | 2 | -4/+4 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | by Simon Kellner. XXX This is only a temporary work-around and we still need a REAL fix for XXX this issue. Testing on different archs by marc@ tdvall@ millert@ otto@ ho@ miod@ hshoexer@ ok deraadt@ | |||||
* | | | | Insert missing ABORT if EC_GROUP_copy() fails. | tom | 2004-03-21 | 2 | -2/+2 | |
| | | | | | | | | | | | | | | | | ok markus@ | |||||
* | | | | return(00); -> return(0); markus@ ok | aaron | 2004-03-17 | 2 | -4/+4 | |
| | | | | ||||||
* | | | | out-of-bounds read in (unused) kerberos ciphersuites (CAN-2004-0112) | markus | 2004-03-17 | 2 | -0/+32 | |
| | | | | ||||||
* | | | | avoid null-pointer deref (aka CAN-2004-0079) | markus | 2004-03-17 | 2 | -0/+16 | |
| | | | | | | | | | | | | | | | | see http://www.openssl.org/news/secadv_20040317.txt | |||||
* | | | | remove some weirdness; | jmc | 2004-03-14 | 1 | -2/+1 | |
| | | | | ||||||
* | | | | fix formatting, Pedro Martelletto | tedu | 2004-03-02 | 1 | -3/+3 | |
| | | | | ||||||
* | | | | do not recommend a format string error..; pbastos@rdc.puc-rio.br | deraadt | 2004-03-01 | 1 | -3/+3 | |
| | | | | ||||||
* | | | | change amd64's MACHINE_ARCH from x86_64 to amd64. There are many many | deraadt | 2004-02-27 | 2 | -182/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | reasons for this, quite a few of them technical, and not all of them in response to Intel's broken ia32e crud. The gcc toolchain stays at x86_64 for now. | |||||
* | | | | Sanity fix. | tdeval | 2004-02-19 | 1 | -2/+5 | |
| | | | | | | | | | | | | | | | | reviewed by deraadt@, tedu@ | |||||
* | | | | remove redundant code, u_int8_t cannot be > 0xff | otto | 2004-02-16 | 1 | -16/+2 | |
| | | | | | | | | | | | | | | | | ok deraadt@ millert@ | |||||
* | | | | Cleanup and shrink ACSS_KEY a bit. Thus crank library minor. | hshoexer | 2004-02-13 | 7 | -39/+49 | |
| | | | | | | | | | | | | | | | | | | | | | | | | Change cipher modes to more generic names and add an additional mode. ok deraadt@ markus@ | |||||
* | | | | kill memory.3; | jmc | 2004-02-10 | 2 | -66/+1 | |
| | | | | | | | | | | | | | | | | suggested by deraadt@ | |||||
* | | | | add MLINKS for 64-bit functions in byteorder(3); | jmc | 2004-02-10 | 1 | -4/+6 | |
| | | | | | | | | | | | | | | | | passes miod's "make sure it doesn't break libc or libpthread" test; | |||||
* | | | | make Nm match Dt; | jmc | 2004-02-10 | 1 | -10/+2 | |
| | | | | ||||||
* | | | | make Nm match Dt; found by pb@ | jmc | 2004-02-09 | 1 | -23/+2 | |
| | | | | | | | | | | | | | | | | some of this ok espie@, all of it ok deraadt@ | |||||
* | | | | simpler ssl manpages, using --name=. | espie | 2004-02-09 | 1 | -117/+33 | |
| | | | | | | | | | | | | | | | | okay markus@ | |||||
* | | | | punctuate variable; okay jmc@. | espie | 2004-02-09 | 1 | -2/+2 | |
| | | | | ||||||
* | | | | remove some debug code and cleanup.. | deraadt | 2004-02-04 | 2 | -36/+12 | |
| | | | | ||||||
* | | | | Traditionally, getopt(3) has treated "--foo" the same as "--". However, | millert | 2004-02-04 | 1 | -10/+9 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | this can cause confusion when a user tries to use a long option with a program that only supports short options. Furthermore, it appears to be in violation of POSIX, which states that "--" shall indicate the end of argument processing, not any string that begins with "--". OK otto@ and closes PR 3666. | |||||
* | | | | H comes before J; | jmc | 2004-02-04 | 1 | -6/+6 | |
| | | | | ||||||
* | | | | OK, this time the AES soft keys work with ssh and such. I spent over 3 | deraadt | 2004-02-03 | 2 | -32/+126 | |
| | | | | | | | | | | | | | | | | | | | | hours learning that OpenSSL's internal functions for AES extended keys generate screwy byte order swapped data.. | |||||
* | | | | oops, software key gen bug | deraadt | 2004-02-03 | 2 | -70/+20 | |
| | | | | ||||||
* | | | | Switch to using software generated extended keys (because the cpu cannot | deraadt | 2004-02-03 | 2 | -20/+70 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | yet generate 192 & 256 bit keys). Ensure that 192 and 256 are in the nids table. This also accelerates performance for 128 a tiny bit: type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 34921.48k 129617.82k 362059.93k 623649.81k 790397.77k aes-192-cbc 26227.43k 99215.33k 283242.84k 509881.15k 665323.22k aes-256-cbc 26133.22k 97458.06k 265990.84k 457824.69k 579835.09k | |||||
* | | | | Obsoleted by getopt_long.c | millert | 2004-02-03 | 1 | -116/+0 | |
| | | | | ||||||
* | | | | Correct the arm ifdefs previously inserted, is working correctly now. | drahn | 2004-02-03 | 1 | -3/+3 | |
| | | | | ||||||
* | | | | config for arm, copied from powerpc/sparc ok markus@ | drahn | 2004-02-03 | 1 | -0/+180 | |
| | | | | ||||||
* | | | | If on an i386, detect existance of the VIA C3 xcrypt-* using sysctl of | deraadt | 2004-02-03 | 2 | -8/+348 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the machdep.xcrypt node. If they exist, use the xcrypt-cbc instruction to accelerate aes-{128,192,256}-cbc, for more than 100x performance increase. This code has no effect on any cpu... Tested thus far using openssl speed command, and of course, ssh. 778MB/sec AES-128-CBC performance at 8192 byte block size. | |||||
* | | | | 'F'reeguard doc, as reported missing by brad. nit free thanks to jmc | tedu | 2004-02-02 | 1 | -1/+8 | |
| | | | | ||||||
* | | | | Add const type qualifier. ok jmc@ | nordin | 2004-02-01 | 2 | -4/+4 | |
| | | | | ||||||
* | | | | s/arm32/arm/ with VFP bit to match netbsd. | drahn | 2004-02-01 | 1 | -3/+3 | |
| | | | | ||||||
* | | | | cleanup byte order detection per arch a bit; mickey ok | deraadt | 2004-01-29 | 1 | -14/+4 | |
| | | | | ||||||
* | | | | the rest of the libs stuff; from art@ again | mickey | 2004-01-28 | 3 | -2/+363 | |
| | | | | ||||||
* | | | | use new .St macro; | jmc | 2004-01-25 | 3 | -5/+5 | |
| | | | | ||||||
* | | | | `Ns' implies `No', so `Ns No' -> `Ns'; (even simpler in adduser(8)) | jmc | 2004-01-23 | 5 | -10/+10 | |
| | | | | | | | | | | | | | | | | discussed with todd@ | |||||
* | | | | Use correct cvs id string. | hshoexer | 2004-01-23 | 6 | -6/+6 | |
| | | | | | | | | | | | | | | | | ok deraadt@ | |||||
* | | | | remove junk return at end | deraadt | 2004-01-23 | 2 | -4/+0 | |
| | | | | ||||||
* | | | | enable acss. | hshoexer | 2004-01-23 | 5 | -5/+17 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | ok @deraadt @markus Also bump minor version. ok @deraadt | |||||
* | | | | evp api and manual page for acss | hshoexer | 2004-01-23 | 3 | -0/+236 | |
| | | | | | | | | | | | | | | | | ok deraadt@ markus@ | |||||
* | | | | Add acss to libcrypto. | hshoexer | 2004-01-23 | 6 | -0/+614 | |
| | | | | | | | | | | | | | | | | ok deraadt@ markus@ | |||||
* | | | | Call _exit() not exit() from abort() if we are unable to kill ourselves | millert | 2004-01-20 | 1 | -3/+3 | |
| | | | | | | | | | | | | | | | | | | | | to avoid flushing stdio twice. This code path should never really happen though. Also make the function declaration ANSI. OK deraadt@ | |||||
* | | | | Fix the example code. The loop invariant 'i' was not bound by MAXTOKENS | millert | 2004-01-20 | 1 | -3/+3 | |
| | | | | | | | | | | | | | | | | | | | | which could result in writing a NUL byte outside of tokens[]. A fix, from Patrick Latifi, is to move the increment into the "i < MAXTOKENS - 1" block. | |||||
* | | | | Fix printf format string. ok markus@ | otto | 2004-01-14 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | - Rename index to longindex and explain its use. | fgsch | 2004-01-06 | 1 | -9/+20 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Talk about zeroing the last element of the longopts array. - Remove '?' from the switch and some KNF to the code. - Change 0's to NULL where appropriate. jmc@ ok. | |||||
* | | | | sync protos with <netdb.h>; | jmc | 2003-12-30 | 1 | -3/+3 | |
| | | | | | | | | | | | | | | | | from Andrey Matveev; | |||||
* | | | | niels kindly dropped clause 3/4 from the license. tnx! | itojun | 2003-12-12 | 1 | -6/+1 | |
| | | | | ||||||
* | | | | we can skip arc4random() call here. markus | itojun | 2003-12-12 | 1 | -2/+2 | |
| | | | |