| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Switch "openssl req" to using SHA256 for hashes and AES256 to encrypt on-disk | sthen | 2014-10-01 | 2 | -12/+12 | |
| | | | | | | | | | | | keys by default (instead of SHA1/3DES) and update documentation to match. Another way to do this is s/NID_sha1/NID_sha256/ in src/crypto/rsa/rsa_ameth.c ("case ASN1_PKEY_CTRL_DEFAULT_MD_NID") but going with the more targetted method above that only affects "openssl req" for now. Help/OK jsing@. OKs on earlier diffs changing openssl.cnf from phessler@ aja@ | |||||
| * | Remove unused #define. | lteo | 2014-09-17 | 1 | -3/+1 | |
| | | | | | ok jsing@ | |||||
| * | a little less sendmail specific; | jmc | 2014-09-16 | 1 | -4/+3 | |
| | | ||||||
| * | Disable -Wshadow again, since it breaks builds on vax with gcc3. | jsing | 2014-09-10 | 1 | -2/+2 | |
| | | ||||||
| * | Enable -Wshadow in openssl(1) and fix a few shadow warnings. | doug | 2014-09-01 | 5 | -25/+21 | |
| | | | | | ok jsing@ | |||||
| * | Convert ecparam to new option/usage handling. | jsing | 2014-09-01 | 1 | -197/+215 | |
| | | ||||||
| * | Improve option usage output. | jsing | 2014-09-01 | 1 | -7/+20 | |
| | | | | | | | | If the option/argument string exceeds the given width, add a hanging indent prior to displaying the description. Also, if the description includes newlines, wrap and indent for each newline so that the indentation is correctly maintained. | |||||
| * | Convert openssl(1) version to new option/usage handling. | jsing | 2014-08-30 | 1 | -34/+90 | |
| | | ||||||
| * | Move the callback function pointer outside the opt union so that the option | jsing | 2014-08-30 | 2 | -4/+10 | |
| | | | | | | values are useable by the function. Also provide an option type that calls a function without consuming/passing an argument. | |||||
| * | OpenSSL_add_all_algorithms() is called from openssl_startup() - it does not | jsing | 2014-08-28 | 6 | -13/+6 | |
| | | | | | need to also be called from some of the applications. | |||||
| * | openssl_setup() calls SSL_load_error_strings(), which happens to call | jsing | 2014-08-28 | 27 | -60/+30 | |
| | | | | | | ERR_load_crypto_strings() - as such, we do not need to call the same function from most of the applications. | |||||
| * | Add option handling with a callback function for argument processing. | jsing | 2014-08-28 | 2 | -2/+10 | |
| | | ||||||
| * | Convert openssl(1) crl to new option/usage handling. | jsing | 2014-08-28 | 1 | -186/+246 | |
| | | ||||||
| * | Given the usage option name/argument name width a few more characters. | jsing | 2014-08-28 | 1 | -2/+2 | |
| | | ||||||
| * | Ensure that a format option argument is a known specifier. | jsing | 2014-08-28 | 1 | -2/+10 | |
| | | ||||||
| * | Add option handling for ordered flags. | jsing | 2014-08-28 | 2 | -2/+8 | |
| | | ||||||
| * | Add option handling for input/output formats. | jsing | 2014-08-28 | 2 | -2/+8 | |
| | | ||||||
| * | Convert openssl(1) prime to the new options/usage handling. | jsing | 2014-08-27 | 1 | -60/+81 | |
| | | ||||||
| * | Reset the config struct before calling options_parse(), otherwise config | jsing | 2014-08-27 | 1 | -1/+3 | |
| | | | | | options from the previous run stick in interactive mode. | |||||
| * | Add an option type that handles argument to integer conversion. | jsing | 2014-08-27 | 2 | -4/+22 | |
| | | ||||||
| * | Implement table-driven option parsing that allows an application to | jsing | 2014-08-27 | 3 | -76/+192 | |
| | | | | | | | | | | | | | | | | | | specify what its valid options are and where it wants them to be stored. This also allows for usage to be generated, almost for free, ensuring that the options and usage are automatically kept in sync. This will allow for a single option parsing implementation, rather than the current one-hand-rolled-option-parsing-and-random-usage-implementation per application. As a starting point, port the openssl(1) rand application to the new option parsing and usage (along with associated code clean up). With input from doug@. ok bcook@ doug@ | |||||
| * | remove nginx references | robert | 2014-08-26 | 1 | -2/+1 | |
| | | ||||||
| * | Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is not | jsing | 2014-08-26 | 57 | -0/+44053 | |
| | | | | | | | | | a system/superuser binary. At the same time, move the source code from its current lib/libssl/src/apps location to a more appropriate home under usr.bin/openssl. ok deraadt@ miod@ | |||||
| * | Make sure the correct errno is reported by warn* or err* and not | guenther | 2014-07-20 | 1 | -2/+3 | |
| | | | | | | | the errno of an intervening cleanup operation like close/unlink/etc. Diff from Doug Hogan (doug (at) acyclic.org) | |||||
| * | stick with 16k buffers for a little while to avoid bufferbloat. | tedu | 2014-06-10 | 1 | -2/+2 | |
| | | | | | | atomicio writing out 64k in one direction will cause traffic in the other direction to stall until it's complete. discussion with deraadt | |||||
| * | increase buffer size to 64k, and actually use it. ok deraadt | tedu | 2014-06-10 | 1 | -3/+3 | |
| | | | | | from John-Mark Gurney | |||||
| * | Use errc/warnc to simplify code. | guenther | 2014-05-20 | 1 | -2/+2 | |
| | | | | | | | Also, in 'ftp', always put the error message last, after the hostname/ipaddr. ok jsing@ krw@ millert@ | |||||
| * | Unbreak nc -6 -l. Don't retrieve and thus later set the routing table | jca | 2014-03-12 | 1 | -3/+2 | |
| | | | | | | unless -V is passed (intent of the previous commit), and use SOL_SOCKET instead of IPPROTO_IP to set the rtable in local_listen(). ok sthen@ | |||||
| * | Once more, the default routing table id is inherited from the process | claudio | 2014-02-26 | 1 | -3/+2 | |
| | | | | | like for any other process as well. OK by many | |||||
| * | one of the examples needs -N to work again; | jmc | 2014-02-10 | 1 | -3/+3 | |
| | | | | | | | | the paper trail appears to be: reported in feebsd pr docs/185353 by rol robert-eckardt de fix suggested by peter wemm diff submitted to tech by allan jude | |||||
| * | Only use setsockopt(..SO_RTABLE..) if the -V flag is given to nc/telnet, | sthen | 2013-10-26 | 1 | -7/+7 | |
| | | | | | | same style as traceroute6 (change to int and use -1 as a flag, so rtable 0 can still be used as an explicit parameter). | |||||
| * | Oups, a little bit overzealous. If we "route -T4 exec telnet foo", then | phessler | 2013-10-21 | 1 | -1/+2 | |
| | | | | | make sure telnet runs in rdomain 4 as expected. Same for nc. | |||||
| * | Set the requested rdomain on the socket instead of only on the IPv4 part. | phessler | 2013-10-21 | 1 | -11/+7 | |
| | | | | | Also, switching to rdomain zero is a legit option so we should allow that. | |||||
| * | escape not-full-stop-dot at eol; | jmc | 2013-08-20 | 1 | -2/+2 | |
| | | ||||||
| * | add -F to usage() and help(); | jmc | 2013-08-20 | 1 | -2/+3 | |
| | | | | | ok djm | |||||
| * | add -F flag to enabled fd-pass mode: establish connection and pass | djm | 2013-08-20 | 2 | -6/+89 | |
| | | | | | | | connected socket to stdout. This is useful in proxy mode to establish a connection for use by ssh in conjunction with its new ProxyUseFDPass option; ok markus@ | |||||
| * | use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ | schwarze | 2013-07-16 | 1 | -4/+4 | |
| | | ||||||
| * | use FD_CLOEXEC instead of 1; from David Hill | okan | 2013-04-29 | 1 | -2/+2 | |
| | | | | | ok otto | |||||
| * | Don't shutdown nc(1)'s network socket when stdin closes. Matches *Hobbit*'s | sthen | 2013-03-20 | 2 | -7/+17 | |
| | | | | | | | original netcat and GNU netcat; revert to old behaviour with the new -N flag if needed. After much discussion with otto deraadt tedu and Martin Pelikan. ok deraadt@ | |||||
| * | All accept() errors are considered fatal, until someone gives a different | deraadt | 2013-03-12 | 1 | -4/+5 | |
| | | | | | reason. No code changed, just documenting it... | |||||
| * | remove some unnecessary sys/param.h inclusions | deraadt | 2012-12-04 | 1 | -3/+1 | |
| | | ||||||
| * | Allow UDP server to receive datagrams from multiple socket pairs with -k | haesbaert | 2012-07-07 | 2 | -7/+17 | |
| | | | | | | | | flag. Prompted by a question from dsp at 2f30 dot org, diff from Lazarom Koromil with a few tweaks by me, many thanks. ok mikeb@ nicm@ haesbaert@ | |||||
| * | Report incoming connections when -l is specified with -v. | haesbaert | 2012-07-07 | 1 | -1/+35 | |
| | | | | | | | From Ricky Zhou with a few tweaks by me. ok henning@ haesbaert@ | |||||
| * | error out if accept() fails | deraadt | 2012-04-01 | 1 | -1/+3 | |
| | | ||||||
| * | remove IP_JUMBO, SO_JUMBO, and RTF_JUMBO. | dlg | 2012-03-17 | 1 | -13/+4 | |
| | | | | | no objection from mcbride@ krw@ markus@ deraadt@ | |||||
| * | fix format strings for size_t | espie | 2012-03-08 | 1 | -3/+3 | |
| | | | | | ok okan@ | |||||
| * | Update comments. ok deraadt@ | lum | 2012-02-09 | 1 | -4/+3 | |
| | | ||||||
| * | Remove unused protocol value check. ok brynet@ | lum | 2012-02-09 | 1 | -4/+1 | |
| | | ||||||
| * | Expand the CAVEAT section to more fully describe the behaviour of | lum | 2012-02-07 | 1 | -6/+13 | |
| | | | | | | | | | the -uz combination. This diff stems from a diff by brynet@ sent to tech@ help from jmc@ regarding wording. | |||||
| * | change -w to apply to the connection as well. manpage bit from jmc@ | fgsch | 2011-10-04 | 2 | -6/+44 | |
| | | | | | nicm@ ok. | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |