| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | snprintf/vsnprintf return < 0 on error, rather than -1. | deraadt | 2019-07-03 | 5 | -18/+18 | |
| | | ||||||
| * | When system calls indicate an error they return -1, not some arbitrary | deraadt | 2019-06-28 | 5 | -39/+39 | |
| | | | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. | |||||
| * | Some asprintf() calls were checked < 0, rather than the precise == -1. | deraadt | 2019-06-27 | 1 | -3/+3 | |
| | | | | | ok millert nicm tb, etc | |||||
| * | Move variables into struct in openssl(1) genrsa | inoguchi | 2019-06-19 | 1 | -25/+33 | |
| | | | | | | | | - Move local variables in genrsa_main() to struct genrsa_config - Leave long lines more than 80, still ok bcook@ | |||||
| * | tidy up the formatting of gendsa synopsis a little; | jmc | 2019-06-07 | 1 | -5/+3 | |
| | | ||||||
| * | Convert openssl(1) gendsa to the newer style of option handling | inoguchi | 2019-06-07 | 2 | -84/+178 | |
| | | | | | | | | | - Adapt openssl(1) gendsa command to new option handling. - Add lacking ciphers and passout description in openssl.1 manpage. - Describe paramfile as argument in openssl.1 manpage. ok bcook@ | |||||
| * | Sort. | jsing | 2019-04-01 | 1 | -3/+3 | |
| | | ||||||
| * | Make the openssl(1) enc -iter flag actually work. | jsing | 2019-04-01 | 1 | -2/+2 | |
| | | | | | Diff from Steven Roberts <sroberts at fenderq dot com> - thanks! | |||||
| * | Add the SM4 block cipher from the Chinese standard GB/T 32907-2016. | tb | 2019-03-17 | 1 | -1/+8 | |
| | | | | | | Patch from Daniel Wyatt ok inoguchi, jsing | |||||
| * | Correctly handle tls_read() and tls_write() failures. | jsing | 2019-02-26 | 1 | -5/+9 | |
| | | | | | | | | Otherwise a TLS error (for example the remote end sent a fatal alert) is silently ignored. ok bluhm@ tb@ | |||||
| * | Convert openssl(1) pkeyutl to the newer style of option handling. | inoguchi | 2019-02-17 | 1 | -198/+278 | |
| | | | | | ok jsing@ tb@ | |||||
| * | Fix weird wrap showing cipher list in interactive mode | inoguchi | 2019-02-09 | 6 | -13/+23 | |
| | | | | | ok jsing@ tb@ | |||||
| * | Summarize the 4 same name functions and move it to apps.c | inoguchi | 2019-02-09 | 7 | -72/+26 | |
| | | | | | ok tb@ jsing@ | |||||
| * | Add islower check to show_ciphers in pkey.c and rsa.c. | inoguchi | 2019-02-05 | 2 | -2/+10 | |
| | | | | | | suggested by jsing@ ok tb@ | |||||
| * | Convert openssl(1) pkey to the newer style of option handling. | inoguchi | 2019-02-05 | 1 | -96/+171 | |
| | | | | | ok jsing@ | |||||
| * | Document missing command line options for the rsautl command. | tb | 2019-02-04 | 2 | -9/+16 | |
| | | | | | ok jsing, "looks good!" jmc | |||||
| * | zap spaces before tabs | tb | 2019-02-03 | 1 | -5/+5 | |
| | | ||||||
| * | Convert openssl(1) rsautl to the newer style of option handling. | jsing | 2019-02-03 | 1 | -121/+196 | |
| | | | | | ok beck@ inoguchi@ tb@ | |||||
| * | Remove SSLv23 padding mode from rsautl's usage (left behind in a removal | tb | 2019-01-29 | 1 | -2/+1 | |
| | | | | | | | from code and manual in 2017). Reported by KEINOS in github issue #101. | |||||
| * | spelling; | jmc | 2019-01-28 | 1 | -3/+3 | |
| | | ||||||
| * | Fix BN_is_prime_* calls in openssl(1), the API returns -1 on error. | tb | 2019-01-20 | 1 | -4/+8 | |
| | | | | | | | | Found thanks to BoringSSL's commit 53409ee3d7595ed37da472bc73b010cd2c8a5ffd by David Benjamin. ok djm, jsing | |||||
| * | change the default digest used by | jsg | 2019-01-19 | 2 | -4/+4 | |
| | | | | | | | | | openssl x509 -fingerprint openssl crl -fingerprint from sha1 to sha256 ok jsing@ | |||||
| * | switch the default algorithm for the dgst command from MD5 to SHA256 | naddy | 2019-01-18 | 2 | -6/+6 | |
| | | | | | ok deraadt@ | |||||
| * | Add -iter and -pbkdf2 to the usage synopsis. | naddy | 2019-01-18 | 1 | -15/+17 | |
| | | | | | | | Reorder option descriptions so -iter and -pbkdf2 show up alphabetically. Add missing argument name for -iter. ok jmc@ | |||||
| * | tweak previous; | jmc | 2019-01-18 | 1 | -7/+7 | |
| | | ||||||
| * | Add the -iter and -pbkdf2 argumenst to enc | beck | 2019-01-18 | 1 | -2/+11 | |
| | | ||||||
| * | Change the default digest type to sha256, and add support for | beck | 2019-01-18 | 1 | -5/+44 | |
| | | | | | | pbkdf2 with OpenSSL compatible flags ok jsing@ | |||||
| * | Revert back previous commit and stop including strings.h | mestre | 2019-01-10 | 2 | -9/+7 | |
| | | | | | | | | Use memset(3) instead of bzero(3) since POSIX recommends using the former and because it's also more portable (conforms to ANSI C standard) OK tedu@ tb@ | |||||
| * | Include strings.h for bzero in usr.bin/nc | inoguchi | 2019-01-09 | 2 | -2/+4 | |
| | | | | | | | bzero is defined in strings.h. ok deraadt@ | |||||
| * | too many words in previous; | jmc | 2018-12-27 | 1 | -2/+2 | |
| | | ||||||
| * | port ranges can be ambiguous with hypenated port-names. | tedu | 2018-12-27 | 2 | -6/+7 | |
| | | | | | | | specify that ranges must be numeric, and only check for range if first argument is a digit. identified by danj, fix suggest by sthen | |||||
| * | Keep usage in sync with logic if OPENSSL_NO_DES is set. | tobias | 2018-12-09 | 1 | -1/+3 | |
| | | | | | ok jmc@, jsing@ | |||||
| * | update for libtls default cert changes. | tedu | 2018-11-29 | 1 | -5/+6 | |
| | | | | | bonus: this exposed a few missing const qualifiers. | |||||
| * | didn't found -> didn't find. | tb | 2018-11-14 | 1 | -2/+2 | |
| | | | | | From Edgar Pettijohn III | |||||
| * | Add sm3 to the 'openssl dgst' command. | tb | 2018-11-11 | 1 | -1/+5 | |
| | | | | | ok beck inoguchi | |||||
| * | Add automatic threading initialization for libcrypto. | bcook | 2018-11-11 | 1 | -53/+1 | |
| | | | | | | | | | | | | | | | This implements automatic thread support initialization in libcrypto. This does not remove any functions from the ABI, but does turn them into no-ops. Stub implementations of pthread_mutex_(init|lock|unlock) are provided for ramdisks. This does not implement the new OpenSSL 1.1 thread API internally, keeping the original CRYTPO_lock / CRYPTO_add_lock functions for library locking. For -portable, crypto_lock.c can be reimplemented with OS-specific primitives as needed. ok beck@, tb@, looks sane guenther@ | |||||
| * | In verbose mode netcat reports to stderr when the listen system | bluhm | 2018-11-09 | 1 | -16/+29 | |
| | | | | | | | call has finished. This allows to write race free scripts as they can check that the server is up and running. OK sthen@ tb@ | |||||
| * | Use TLS_CA_CERT_FILE instead of a separate define. | jsing | 2018-11-06 | 1 | -3/+2 | |
| | | | | | ok beck@ bluhm@ tb@ | |||||
| * | Unbreak following elliptic curves to supported groups rename. | jsing | 2018-11-06 | 1 | -3/+3 | |
| | | | | | Reported by Katherine <luigi30 at gmail dot com> on tech@ | |||||
| * | Make the documentation of -conv_form match reality. It defaults | tb | 2018-11-01 | 1 | -6/+6 | |
| | | | | | | | to uncompressed rather than compressed. From Jacqueline Jolicoeur | |||||
| * | show what went wrong with a unix domain socket, rather than fail silently | dlg | 2018-10-26 | 1 | -2/+4 | |
| | | | | | | | handy if you type the path wrong or don't have permission... ok deraadt@ | |||||
| * | Plug TLS context leak in nc(1) server and client mode. Move | bluhm | 2018-10-04 | 1 | -12/+10 | |
| | | | | | | tls_free(3) directly after close(2) to catch all cases. based on a patch from Nan Xiao; OK tb@ deraadt@ | |||||
| * | -T applies to ip6 too, apparently; | jmc | 2018-09-25 | 1 | -4/+4 | |
| | | | | | from nan xiao | |||||
| * | Move tally mark printing out of the main benchmark loop; ok tb@ | cheloha | 2018-09-17 | 1 | -14/+21 | |
| | | ||||||
| * | Declare strings passed to local_listen() as const. This makes it | bluhm | 2018-09-07 | 1 | -3/+3 | |
| | | | | | | consistent to remote_connect() and getaddrinfo(3). from Nan Xiao | |||||
| * | Do not close the socket twice in netcat. | bluhm | 2018-09-06 | 1 | -5/+6 | |
| | | | | | from Nan Xiao; OK tb@ | |||||
| * | Drop SSLv2, SSLv3 support. | cheloha | 2018-08-28 | 1 | -6/+2 | |
| | | | | | | | | No need to check for SSLv2/3 sessions when printing the tally mark. Also do SSLv23_client_method -> TLS_client_method. ok jsing@ | |||||
| * | Check for SSL_write(3) error. | cheloha | 2018-08-28 | 1 | -3/+4 | |
| | | | | | | | | | | | jsing@ notes that this is not a complete solution, as we don't account for retries or partial writes, but that this is a step in a right direction. May want to revisit this later to provide a complete solution. ok jsing@ | |||||
| * | update usage for pkcs8; | jmc | 2018-08-24 | 1 | -10/+9 | |
| | | | | | ok tb | |||||
| * | The broken pkcs8 formats generated by openssl pkcs -{embed,nooct,nsdb} | tb | 2018-08-24 | 1 | -22/+2 | |
| | | | | | | | are no longer supported. Remove their documentation. ok jsing | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |