| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Check error returns for HMAC_* to appease coverity. | tb | 2021-12-26 | 1 | -4/+13 | |
| | | | | | CID 345114 | |||||
| * | One more leak similar to previous. | tb | 2021-12-26 | 1 | -2/+2 | |
| | | ||||||
| * | Plug leaks | tb | 2021-12-26 | 1 | -2/+2 | |
| | | | | | CID 345111 | |||||
| * | Plug memleak | tb | 2021-12-26 | 1 | -2/+4 | |
| | | | | | CID 345119 | |||||
| * | Attempt to opportunistically use the host name for SNI in s_client. | jsing | 2021-12-26 | 1 | -10/+34 | |
| | | | | | ok beck@ inoguchi@ tb@ | |||||
| * | Convert req.c to compile with opaque EVP_MD_CTX. | tb | 2021-12-12 | 1 | -25/+43 | |
| | | | | | ok inoguchi | |||||
| * | Convert passwd.c to opaque EVP_MD_CTX and add a bit of error checking. | tb | 2021-12-12 | 1 | -35/+72 | |
| | | | | | tweak/ok inoguchi | |||||
| * | Make speed.c compile with opaque EVP_CIPHER, EVP_MD and HMAC_CTX. | tb | 2021-12-12 | 1 | -20/+29 | |
| | | | | | ok inoguchi | |||||
| * | A few more simplifications using get0_pubkey instead of get_pubkey + free. | tb | 2021-12-12 | 1 | -9/+5 | |
| | | ||||||
| * | Simplify x509.c slightly by using X509_get0_pubkey() instead of | tb | 2021-12-12 | 1 | -5/+3 | |
| | | | | | | | X509_get_pubkey() ok inoguchi | |||||
| * | Make x509.c compile with opaque EVP_PKEY. | tb | 2021-12-12 | 1 | -7/+15 | |
| | | | | | ok inoguchi | |||||
| * | Use correct spelling of NULL | tb | 2021-12-12 | 1 | -2/+2 | |
| | | | | | ok inoguchi | |||||
| * | Make ts.c compile with opaque EVP_MD_CTX. | tb | 2021-12-12 | 1 | -5/+10 | |
| | | | | | ok inoguchi | |||||
| * | Simple conversion to opaque EVP_CIPHER. | tb | 2021-12-07 | 1 | -5/+9 | |
| | | ||||||
| * | Clean up a bunch of dead code in s_server.c and s_socket.c | tb | 2021-12-06 | 3 | -36/+21 | |
| | | | | | | | | | | | | | jsg's analysis tool flagged a potential double free in do_server(). While this looks like a false positive, we can clean this code up a little: the host name passed to the callbacks isn't used by either sv_body() and www_body(), so it can be made local to do_accept() (an extra variable would not even be needed). Simplify the callbacks' signatures accordingly. Remove some commented out linger code that would never be used again anyway. ok inoguchi jsg | |||||
| * | openssl(1): drop support for netscape certificates and server gated keys. | tb | 2021-11-26 | 5 | -138/+12 | |
| | | | | | ok inoguchi jsing | |||||
| * | We know how to print a size_t now. Drop a comment and a cast. | tb | 2021-11-25 | 1 | -6/+4 | |
| | | | | | ok bluhm inoguchi | |||||
| * | Tweak for opaque EVP_MD: use EVP_MD_type(dgst) instead of dgst->type. | tb | 2021-11-21 | 1 | -2/+2 | |
| | | ||||||
| * | Convert openssl(1) to using BN_GENCB on the heap | tb | 2021-11-20 | 4 | -51/+74 | |
| | | | | | | | | | | This is three times the same thing while genrsa needs some extra steps to deal with opaque BIGNUMs. We can also garbage collect some Win 3.1 contortions and use the conversion routines directly instead of doing them manually. ok jsing | |||||
| * | typo in comment | tb | 2021-11-20 | 1 | -3/+3 | |
| | | ||||||
| * | Various minor adjustments to make openssl(1) compile with opaque | tb | 2021-10-31 | 3 | -12/+23 | |
| | | | | | structs in X509. | |||||
| * | Garbage collect another unused variable. | jca | 2021-10-25 | 1 | -4/+1 | |
| | | | | | Spotted by egcc and probably clang 13. ok tb@ | |||||
| * | Preapre x509.c for upcoming libcrypto bump | tb | 2021-10-23 | 1 | -19/+11 | |
| | | | | | ok beck jsing | |||||
| * | Fix some whitespace issues, some pointed out by jsing, some found in | tb | 2021-10-23 | 1 | -4/+4 | |
| | | | | | the vicinity. | |||||
| * | Prepare s_server for opaque structs in libcrypto | tb | 2021-10-23 | 1 | -8/+13 | |
| | | | | | ok beck jsing | |||||
| * | Prepare crl.c for opaque structs in libcrypto. | tb | 2021-10-23 | 1 | -9/+12 | |
| | | | | | ok beck jsing | |||||
| * | Prepare pcks12 for opaque structs in libcrypto | tb | 2021-10-23 | 1 | -69/+70 | |
| | | | | | | | | | | | | | | | | get_cert_chain() needs some error checking. return X509_V_ errors instead of trying to overload the NULL and then whine in a comment that this won't really work. Fix a bug that printed only the first attribute by factoring out the thing that did the actual printing. Sprinkle a few changes to accessors here and there. This is loosely based on what OpenSSL did with some simplifications by jsing. ok beck jsing | |||||
| * | Stop reaching into structs that will become opaque in ca.c | tb | 2021-10-23 | 1 | -5/+3 | |
| | | | | | "just commit it" beck | |||||
| * | Nuke the asn1-kludge. This was a workaround for CAs with broken PCKS#10 | tb | 2021-10-23 | 2 | -35/+5 | |
| | | | | | | | encoders many moons ago. OpenSSL removed it in 2015. ok beck jsing | |||||
| * | Add a length check before NUL-terminating target. From Jonas Termansen. | tb | 2021-10-23 | 1 | -1/+5 | |
| | | | | | ok jsing | |||||
| * | Garbage collect an unused variable. | tb | 2021-10-22 | 1 | -4/+2 | |
| | | ||||||
| * | Stop setting enc.modified manually. It's no longer needed. | tb | 2021-10-22 | 2 | -4/+2 | |
| | | ||||||
| * | Remove an unused variable and a pointless label. | tb | 2021-09-23 | 1 | -7/+1 | |
| | | | | | ok inoguchi | |||||
| * | new sentence, new line, and tweak wording of previous; | jmc | 2021-09-05 | 1 | -2/+3 | |
| | | ||||||
| * | Remove unused variable tmptm in do_body of openssl(1) ca | inoguchi | 2021-09-05 | 1 | -8/+2 | |
| | | ||||||
| * | Using serial number instead as subject if it is empty in openssl(1) ca | inoguchi | 2021-09-05 | 2 | -3/+36 | |
| | | | | | | | | This allows multiple entries without a subject even if unique_subject == yes. Referred to OpenSSL commit 5af88441 and arranged for our codebase. ok tb@ | |||||
| * | Check extensions before setting version to v3 | inoguchi | 2021-09-05 | 1 | -5/+10 | |
| | | | | | | | Referred to OpenSSL commit 4881d849 and arranged for our codebase. comment and ok from tb@ | |||||
| * | Use accessor method rather than direct X509 structure access | inoguchi | 2021-09-05 | 1 | -20/+10 | |
| | | | | | | | Referred to OpenSSL commit a8d8e06b and arranged for our codebase. comment and ok from tb@ | |||||
| * | Use defined constants | inoguchi | 2021-09-02 | 1 | -16/+16 | |
| | | ||||||
| * | Add DB_TYPE_SUSP | inoguchi | 2021-09-02 | 1 | -1/+2 | |
| | | ||||||
| * | Move subject check process after the subject edit process | inoguchi | 2021-09-02 | 1 | -105/+106 | |
| | | | | | | | Referred to OpenSSL commit 2cedf794 and arranged for our codebase. ok tb@ | |||||
| * | Clean up end of do_body in openssl(1) ca | inoguchi | 2021-08-30 | 1 | -6/+8 | |
| | | | | | suggested from tb@ | |||||
| * | Remove NULL check before free in openssl(1) ca | inoguchi | 2021-08-30 | 1 | -41/+25 | |
| | | | | | ok tb@ | |||||
| * | Do not call X509_alias_get0(3) with NULL as the second argument. | schwarze | 2021-08-29 | 1 | -5/+7 | |
| | | | | | | | | | | | | | | | | | | | | Even if the buffer is guaranteed to be NUL-terminated in a particular case, it is still setting a bad example. Besides, it is unclear to me whether there is any such guarantee in the case at hand. Checking that would require auditing all of d2i_X509_bio(3), ASN1_item_d2i_bio(&NETSCAPE_X509_it, ...), PEM_read_bio_X509_AUX(3), and PKCS12_parse(3), since no such guarantee is documented for any of these functions, and even then it would remain fragile with respect to later changes of implementation details. In the worst case, this could potentially result in a read buffer overrun. OK tb@ on an earlier version of this patch. While we are here, deraadt@ requested to not use the word "string" in the name of a variable that is not a string in the sense of the C language. | |||||
| * | Start naccept .desc with a capital | tb | 2021-08-29 | 1 | -2/+2 | |
| | | | | | noted by inoguchi | |||||
| * | Implement -naccept in the s_server. | tb | 2021-08-29 | 4 | -11/+29 | |
| | | | | | | doc fixes/ok jmc ok beck | |||||
| * | Add RCS marker | tb | 2021-08-28 | 1 | -0/+1 | |
| | | ||||||
| * | Check X509_get_notAfter return value in openssl(1) ca.c | inoguchi | 2021-08-28 | 1 | -3/+5 | |
| | | ||||||
| * | Use strndup instead of malloc, memcpy and NULL termination in openssl(1) ca.c | inoguchi | 2021-08-28 | 1 | -11/+4 | |
| | | | | | | suggested from tb@ for do_updatedb(), and applied the same for do_body() and do_revoke(). | |||||
| * | Remove ASN1_TIME_new and use NULL for X509_gmtime_adj, free tmptm in err path | inoguchi | 2021-08-28 | 1 | -15/+7 | |
| | | | | | comments from tb@ | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |