Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add an empty line | tb | 2023-10-01 | 1 | -1/+2 | |
| | ||||||
* | Allow IP addresses to be specified in a URI. | beck | 2023-09-29 | 1 | -4/+50 | |
| | | | | | | | | | | | | Our checking here was a bit too aggressive, and did not permit an IP address in a URI. IP's in a URI are allowed for things like CRLdp's AIA, SAN URI's etc.). The check for this was also slightly flawed as we would permit an IP if memory allocation failed while checking for an IP. Correct both issues. ok tb@ | |||||
* | Appease coverity | tb | 2023-09-29 | 1 | -2/+4 | |
| | | | | This is a static pointer, so it ain't ever NULL, but shrug | |||||
* | Fix error message | tb | 2023-09-28 | 1 | -2/+2 | |
| | ||||||
* | Don't leak ctx on failure | tb | 2023-09-28 | 1 | -3/+2 | |
| | ||||||
* | Add more regress coverage for EVP_CIPHER_CTX_iv_length() | tb | 2023-09-28 | 1 | -1/+268 | |
| | | | | | | | Awesome: the IV length for GCM is only bounded by INT_MAX or malloc limits. In the absence of an overflowing issue tracker, I'm labeling this "good first issue", "help wanted" here. | |||||
* | Check that EVP_CIPHER_CTX_iv_length() matches what was set | tb | 2023-09-28 | 1 | -1/+9 | |
| | | | | | | This really only covers AES-GCM. From beck | |||||
* | whitespace | tb | 2023-09-28 | 1 | -3/+3 | |
| | ||||||
* | Fix reference to x509v3.cnf(5) bis | tb | 2023-09-26 | 1 | -6/+6 | |
| | ||||||
* | Fix reference to x509v3.cnf(5) | tb | 2023-09-26 | 1 | -6/+6 | |
| | ||||||
* | Ensure no memory is leaked after passing NULL to ASN1_TIME_normalize() | job | 2023-08-30 | 1 | -1/+4 | |
| | | | | OK tb@ | |||||
* | Make some global variables const | tb | 2023-08-20 | 1 | -14/+15 | |
| | ||||||
* | Bye bye to all people out there | tb | 2023-08-20 | 1 | -28/+1 | |
| | ||||||
* | Add some spaces after comma | tb | 2023-08-20 | 1 | -6/+6 | |
| | ||||||
* | unifdef -D FULL_TEST | tb | 2023-08-20 | 1 | -7/+1 | |
| | ||||||
* | knfmt(1) to the rescue | tb | 2023-08-20 | 1 | -139/+146 | |
| | ||||||
* | Another OPENSSL_NO_DEPRECATED hits the bit bucket | tb | 2023-08-20 | 1 | -7/+1 | |
| | ||||||
* | Drop unnecessary OPENSSL_NO_DEPRECATED dance | tb | 2023-08-20 | 1 | -7/+1 | |
| | ||||||
* | Use a separate flags variable for the error flags in DH_check() | tb | 2023-08-20 | 1 | -7/+8 | |
| | ||||||
* | Add regress coverage for ASN1_STRING_cmp() | tb | 2023-08-15 | 1 | -1/+147 | |
| | ||||||
* | Add some regress coverage for various ASN1_STRING types to codify some | tb | 2023-08-15 | 1 | -1/+229 | |
| | | | | quirks and invariants. | |||||
* | first batch of intentionally undocumented EVP constants: | schwarze | 2023-08-12 | 1 | -1/+10 | |
| | | | | some EVP_MD_CTRL_*, some EVP_MD_CTX_FLAG_*, and all of EVP_F_* and EVP_R_* | |||||
* | Now that the DH is sensibly called dh instead of a, we can also rename | tb | 2023-08-12 | 1 | -10/+10 | |
| | | | | | abuf, alen and aout to names that make sense, such as buf, buf_len and secret_len. | |||||
* | a is a silly name for a DH | tb | 2023-08-12 | 1 | -14/+14 | |
| | ||||||
* | Use printf for consistency | tb | 2023-08-12 | 1 | -5/+5 | |
| | ||||||
* | Check that {DH,DSA}_get0_engine() returns NULL if OPENSSL_NO_ENGINE is | tb | 2023-08-12 | 2 | -2/+16 | |
| | | | | defined. | |||||
* | Add regress coverage for DH and for DSA parameters | tb | 2023-08-11 | 1 | -2/+267 | |
| | ||||||
* | X509_STORE_CTX_get_check_issued(3) is weird. | schwarze | 2023-08-08 | 1 | -0/+9 | |
| | | | | | | Both the function return type and the function name are so long that for displaying the function prototype, a line break is needed after the function return type. | |||||
* | In objects.h rev. 1.17 (Jan 14, 2022), | schwarze | 2023-08-08 | 1 | -7/+1 | |
| | | | | | | | | | | | | tb@ removed the following macros from the public API: _DECLARE_OBJ_BSEARCH_CMP_FN DECLARE_OBJ_BSEARCH_CMP_FN DECLARE_OBJ_BSEARCH_GLOBAL_CMP_FN IMPLEMENT_OBJ_BSEARCH_CMP_FN IMPLEMENT_OBJ_BSEARCH_GLOBAL_CMP_FN OBJ_bsearch OBJ_bsearch_ex In objects.h rev. 1.20 (Nov 11, 2022), jsing@ unifdef'ed USE_OBJ_MAC. Stop marking these names as intentionally undocumented. | |||||
* | No need to mark BN_options() as intentionally undocumented any longer. | schwarze | 2023-08-07 | 1 | -1/+0 | |
| | | | | | | | | In bn.h rev. 1.75 (July 31, 2023), tb@ removed it from the public API. While here, stop marking BN_prime_checks as obsolete. In BN_generate_prime.3 rev. 1.23 (May 11, 2023), tb@ documented the constant BN_prime_checks in that manual page. | |||||
* | Mark asn1_ps_func as obsolete and intentionally undocumented. | schwarze | 2023-08-07 | 1 | -0/+1 | |
| | | | | | In bio.h rev. 1.59 (July 28, 2023), tb@ removed the last four functions that took function pointers of this type from the public API. | |||||
* | Mark BIT_STRING_BITNAME as obsolete and intentionally undocumented. | schwarze | 2023-08-07 | 1 | -0/+1 | |
| | | | | | In asn1.h rev. 1.80 (July 28, 2023), tb@ removed the last three functions that were using this data type from the public API. | |||||
* | Add a regress test exercising BIO_dup_chain() and triggering the leak | tb | 2023-08-07 | 1 | -1/+43 | |
| | | | | fixed in bio_lib.c r1.47 as confirmed by ASAN. | |||||
* | Make the bn_rand_interval() API a bit more ergonomic | tb | 2023-08-03 | 1 | -5/+5 | |
| | | | | | | | | | | | | | | | | | | Provide bn_rand_in_range() which is a slightly tweaked version of what was previously called bn_rand_range(). The way bn_rand_range() is called in libcrypto, the lower bound is always expressible as a word. In fact, most of the time it is 1, the DH code uses a 2, the MR tests in BPSW use 3 and an exceptinally high number appears in the Tonelli-Shanks implementation where we use 32. Converting these lower bounds to BIGNUMs on the call site is annoying so let bn_rand_interval() do that internally and route that through bn_rand_in_range(). This way we can avoid using BN_sub_word(). Adjust the bn_isqrt() test to use bn_rand_in_range() since that's the only caller that uses actual BIGNUMs as lower bounds. ok jsing | |||||
* | Retire the bn_rand_interval() test | tb | 2023-08-03 | 2 | -115/+1 | |
| | | | | | | This test was never particularly useful. An upcoming API change for the internal bn_rand_interval() API would require some adjustments. It's not worth it. | |||||
* | Remove unused prototype | tb | 2023-08-01 | 1 | -3/+1 | |
| | ||||||
* | Some of these functions no longer exist or are no longer public | tb | 2023-07-28 | 1 | -4/+1 | |
| | ||||||
* | DSO has left the building | tb | 2023-07-28 | 1 | -4/+1 | |
| | ||||||
* | dhtest: simplify printing and make the output slightly less ugly | tb | 2023-07-28 | 1 | -34/+29 | |
| | | | | CID 463174 | |||||
* | Annotate bogus output as incorrect | tb | 2023-07-27 | 1 | -1/+2 | |
| | | | | | | Some people already have way too many simple and not too important diffs in their inbox. This isn't worth kicking something more important out of the queue. | |||||
* | Prepare this test for the upcoming bump | tb | 2023-07-26 | 1 | -1/+3 | |
| | ||||||
* | Remove comment containing an outdated path | tb | 2023-07-26 | 1 | -2/+1 | |
| | ||||||
* | Fix EC_POINT_is_on_curve() checks. | tb | 2023-07-24 | 1 | -9/+9 | |
| | | | | If not even the idiot who invented this API gets this right... | |||||
* | bio_asn1 tests: drop unneeded variable | tb | 2023-07-21 | 1 | -3/+2 | |
| | ||||||
* | Remove a few workarounds that are no longer necessary | tb | 2023-07-20 | 1 | -4/+1 | |
| | ||||||
* | Add missing commas to test vectors | joshua | 2023-07-19 | 1 | -26/+26 | |
| | | | | ok tb@ | |||||
* | Add test coverage for SHA3 | joshua | 2023-07-19 | 1 | -27/+344 | |
| | | | | ok tb@ | |||||
* | ecc_cdh: plug leak of peer public key | tb | 2023-07-16 | 1 | -1/+2 | |
| | ||||||
* | ecdhtest: Drop unnecessary constant and unneeded includes | tb | 2023-07-16 | 1 | -10/+6 | |
| | ||||||
* | ecdhtest: fix a couple bugs plus some cosmetic tweaks | tb | 2023-07-16 | 1 | -6/+6 | |
| |