openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	remove vestigial bits of sha-0 and md2 from openssl(1)	bcook	2015-09-21	1	-2/+2
\| \| \| \| \| \| \| \|	Noted by kinichiro on github. We probably need a better way to indicate the list of message digests that are allowed, as the current ones are nowhere near exhaustive (sigh - guenther@) OK guenther@ jmc@
*	Temporarily revive MD4 for MS CHAP support.	doug	2015-09-14	1	-2/+2
\|
*	Remove MD4 support from LibreSSL.	doug	2015-09-13	1	-2/+2
\| \| \| \| \| \| \| \|	MD4 should have been removed a long time ago. Also, RFC 6150 moved it to historic in 2011. Rides the major crank from removing SHA-0. Discussed with many including beck@, millert@, djm@, sthen@ ok jsing@, input + ok bcook@
*	Nuke SSLEAY_CONF -- a backwards compatibility environment variable that	lteo	2015-09-12	1	-3/+1
\| \| \| \| \| \| \| \| \| \|	has been superseded by OPENSSL_CONF and discouraged from use for almost 16 years. "Definately ok" jsing@ "burn it" deraadt@ "Kill it with fire" miod@ "KILL IT WITH FIRE!!! BURN!!!!" beck@
*	Remove engine command and parameters from openssl(1).	bcook	2015-09-11	1	-18/+8
\| \| \| \| \| \| \|	We do not have any builtin or dynamic engines, meaning openssl(1) has no way to use the engine command or parameters at all. ok jsing@
*	Remove all duplicate prototypes for *_main functions (these are already	jsing	2015-08-22	1	-4/+1
\| \| \| \| \| \| \| \| \|	provided by progs.h). Also, move the FUNCTION type (and flags) into openssl.c since that is the only place of use. Lastly, remove pointless 'extern' from the prototypes and use char *argv instead of char argv[] (the former is used elsewhere). ok deraadt@ doug@
*	Remove obsolete MDC-2DES from libcrypto.	doug	2015-06-20	1	-2/+2
\| \| \| \|	ok deraadt@ jsing@ miod@
*	Use arc4random_buf() instead of RAND(_pseudo)?_bytes().	jsing	2014-10-22	1	-4/+2
\| \| \| \|	ok bcook@
*	openssl_setup() calls SSL_load_error_strings(), which happens to call	jsing	2014-08-28	1	-3/+1
\| \| \| \| \|	ERR_load_crypto_strings() - as such, we do not need to call the same function from most of the applications.
*	Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is not	jsing	2014-08-26	1	-0/+1102
	a system/superuser binary. At the same time, move the source code from its current lib/libssl/src/apps location to a more appropriate home under usr.bin/openssl. ok deraadt@ miod@