Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Remove all duplicate prototypes for *_main functions (these are already | jsing | 2015-08-22 | 42 | -185/+102 | |
| | | | | | | | | | provided by progs.h). Also, move the FUNCTION type (and flags) into openssl.c since that is the only place of use. Lastly, remove pointless 'extern' from the prototypes and use char **argv instead of char *argv[] (the former is used elsewhere). ok deraadt@ doug@ | |||||
* | bring prototypes into scope, requires movement of a large global object | deraadt | 2015-08-19 | 8 | -202/+208 | |
| | | | | | out of .h file ok jsing | |||||
* | Improve openssl s_client -starttls xmpp support. | landry | 2015-08-11 | 2 | -7/+28 | |
| | | | | | | | | | From https://rt.openssl.org/Ticket/Display.html?id=2860&user=guest&pass=guest - add a -xmpphost option to specify the xmpp virtual host - fix an infinite loop when the vhost isnt what the server expects - fix communication with openfire & prosody servers with tweaks & ok bcook@ doug@ manpage bits jmc@ | |||||
* | remove ssl3 bits; ok doug | jmc | 2015-08-02 | 1 | -58/+14 | |
| | ||||||
* | use file system path (.Pa) semantic markup macros where appropriate. | sobrado | 2015-07-27 | 1 | -7/+7 | |
| | | | | ok jmc@ | |||||
* | remove unused variable | chl | 2015-07-26 | 1 | -2/+2 | |
| | | | | ok tedu@ | |||||
* | Revert ca.c r1.7 - BN_to_ASN1_INTEGER() only allocates an ASN.1 integer | jsing | 2015-07-22 | 1 | -6/+2 | |
| | | | | | | | | | when it is not passed a reference to one. In this case, it is passed a reference to an ASN.1 integer that is part of the X509 ASN.1 data structure. Freeing this causes bad things to happen, since it is used and then freed later on. Found the hard way by kinichiro inoguchi. | |||||
* | Convert openssl(1) nseq to new option handling. | jsing | 2015-07-21 | 1 | -40/+51 | |
| | | | | ok bcook@ doug@ | |||||
* | Convert openssl(1) pkcs7 to new option handling. | jsing | 2015-07-21 | 1 | -93/+111 | |
| | | | | ok doug@ | |||||
* | remove superfluous strings.h | bcook | 2015-07-21 | 1 | -2/+1 | |
| | ||||||
* | app_tminterval moved to apps_posix.c, we don't need sys/times.h | bcook | 2015-07-20 | 1 | -2/+1 | |
| | ||||||
* | No need to recheck for NULL in openssl(1) ecparam. | doug | 2015-07-20 | 1 | -5/+1 | |
| | | | | | | Fixes Coverity issue 78802. ok bcook@ | |||||
* | Don't try to run ECDH if ecdh_checks fails in openssl(1) speed. | doug | 2015-07-20 | 1 | -17/+23 | |
| | | | | | | | Coverity 72744 noticed that rsa_count was overwitten. The underlying issue is that this code is supposed to be in an else block. ok bcook@ | |||||
* | Avoid NULL deref in openssl(1) s_cb. | doug | 2015-07-20 | 1 | -5/+14 | |
| | | | | | | Fixes Coverity issue 24956. ok bcook@ | |||||
* | Avoid possible NULL deref in openssl(1) s_server. | doug | 2015-07-20 | 1 | -2/+5 | |
| | | | | | | Fixes Coverity issue 78873. ok miod@ | |||||
* | check the sigbuf value before using it. | rpointel | 2015-07-20 | 1 | -2/+7 | |
| | | | | ok miod@ (thanks). | |||||
* | Avoid dereferencing a NULL. | doug | 2015-07-20 | 1 | -5/+7 | |
| | | | | | | Move NULL check before use. Fixes Coverity issue 21746. ok miod@ jsing@ | |||||
* | Remove condition that never happens and fix error handling. | doug | 2015-07-20 | 1 | -6/+5 | |
| | | | | | | | | | | | There were two issues here: 1) in == NULL is never true because it's checked above here. (Fixes Coverity 21705) 2) All error handling is in the if (in == NULL) guard, so effectively there's no error handling and it continues on. ok miod@ jsing@ | |||||
* | Check return value for ENGINE_ctrl and ENGINE_ctrl_cmd. | doug | 2015-07-20 | 1 | -4/+15 | |
| | | | | | | Fixes Coverity issue 21645. ok bcook@ | |||||
* | Check return value in openssl(1) s_socket. | doug | 2015-07-20 | 1 | -3/+6 | |
| | | | | | | Fixes Coverity issue 21655. ok bcook@ | |||||
* | Remove check that is never true. | doug | 2015-07-20 | 1 | -3/+1 | |
| | | | | | | | Fixes coverity issue 78799 as group == NULL was already an error condition above here. ok beck@ | |||||
* | Warn when rename() fails in openssl(1) apps. | doug | 2015-07-20 | 1 | -8/+36 | |
| | | | | | | Fixes Coverity issues 78795 and 78803. ok bcook@ | |||||
* | Free memory when finished. | doug | 2015-07-19 | 1 | -2/+6 | |
| | | | | | | Fixes coverity 78835. ok bcook@ | |||||
* | Only close descriptor if not already closed. | doug | 2015-07-19 | 1 | -3/+5 | |
| | | | | | | Fixes coverity 78916. ok miod@ bcook@ | |||||
* | Free variable before potentially reusing. | doug | 2015-07-19 | 1 | -1/+2 | |
| | | | | | | Fixes coverity 78824. ok bcook@ miod@ | |||||
* | Free passin on error. | doug | 2015-07-19 | 1 | -4/+4 | |
| | | | | | | Fixes coverity 78826. ok miod@ bcook@ | |||||
* | Fix coverity 105339, by correctly checking return from strtoll | beck | 2015-07-19 | 1 | -1/+1 | |
| | | | | ok miod@ bcook@ | |||||
* | Remove effectively unused variable. | doug | 2015-07-19 | 1 | -4/+1 | |
| | | | | | | Fixes Coverity issue 21693. ok beck@ bcook@ | |||||
* | fix leak, found by coverity, ID 78877 | beck | 2015-07-17 | 1 | -3/+3 | |
| | | | | ok miod@ jsing@ | |||||
* | Remove SSLv3 support from openssl(1) s_time. | doug | 2015-07-17 | 1 | -13/+3 | |
| | | | | ok miod@ bcook@ beck@ | |||||
* | Remove SSLv3 support from openssl(1) s_server. | doug | 2015-07-17 | 1 | -7/+2 | |
| | | | | ok miod@ bcook@ beck@ | |||||
* | Remove SSLv3 support from openssl(1) s_client. | doug | 2015-07-17 | 1 | -4/+1 | |
| | | | | ok miod@ bcook@ beck@ | |||||
* | Remove support for SSLv3 from openssl(1) ciphers. | doug | 2015-07-17 | 1 | -27/+5 | |
| | | | | ok miod@ bcook@ | |||||
* | Remove workaround for TLS padding bug from SSLeay days. | doug | 2015-07-17 | 1 | -5/+1 | |
| | | | | | | | | | OpenSSL doesn't remember which clients were impacted and the functionality has been broken in their stable releases for 2 years. Based on OpenSSL commit a8e4ac6a2fe67c19672ecf0c6aeafa15801ce3a5. ok jsing@ | |||||
* | fix coverity leak - ID 78921 | beck | 2015-07-16 | 1 | -3/+11 | |
| | | | | ok miod@, bcook@ | |||||
* | kill leak, found by coverity, ID 105348 | beck | 2015-07-16 | 1 | -2/+5 | |
| | | | | ok miod@ | |||||
* | Add OPTION_ARG_LONG for handling of options with a long type. | jsing | 2015-07-15 | 2 | -3/+16 | |
| | | | | ok doug@ | |||||
* | Make 'openssl pkeyutl -verify' return exit code 0 on success. | bcook | 2015-07-15 | 1 | -4/+5 | |
| | | | | | | Previously, it returned '1' regardless of whether is succeeded or failed. This is now fixed in the OpenSSL master branch as well. Thanks to Kinichiro Inoguchi for pointing it out. ok @deraadt | |||||
* | Convert openssl(1) dh to the new option handling. | doug | 2015-07-12 | 1 | -98/+111 | |
| | | | | ok jsing@ | |||||
* | Convert openssl(1) dsa to the new option handling. | doug | 2015-07-12 | 1 | -154/+208 | |
| | | | | ok jsing@ | |||||
* | Convert openssl(1) ec to the new option handling. | doug | 2015-07-12 | 1 | -170/+247 | |
| | | | | ok jsing@ | |||||
* | Convert gendh.c to the new option handling. | doug | 2015-07-12 | 1 | -54/+79 | |
| | | | | ok jsing@ | |||||
* | Convert openssl(1) dsaparam to the new option handling. | doug | 2015-07-12 | 1 | -154/+123 | |
| | | | | | | | This also removes support for -timebomb related code which was only enabled for GENCB_TEST. ok jsing@ | |||||
* | Convert openssl(1) crl2pkcs7 to the new option handling. | doug | 2015-07-12 | 1 | -95/+110 | |
| | | | | input + ok jsing@ | |||||
* | Convert openssl(1) dhparam to new option handling. | jsing | 2015-07-11 | 1 | -121/+160 | |
| | | | | ok doug@ | |||||
* | switch "openssl dhparam" default from 512 to 2048 bits, ok jsing@ | sthen | 2015-07-08 | 2 | -6/+6 | |
| | ||||||
* | Repair algorithm name array after 1.6. | miod | 2015-07-03 | 1 | -4/+4 | |
| | ||||||
* | Handle NIST curve names in openssl(1) ecparam. | jsing | 2015-06-20 | 1 | -1/+4 | |
| | | | | From OpenSSL. | |||||
* | Less mdc2. | jsing | 2015-06-20 | 1 | -4/+1 | |
| | ||||||
* | Remove obsolete MDC-2DES from libcrypto. | doug | 2015-06-20 | 5 | -43/+13 | |
| | | | | ok deraadt@ jsing@ miod@ |