Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Convert openssl(1) rsa.c for opaque RSA | tb | 2022-01-14 | 1 | -2/+2 | |
| | | | | ok inoguchi jsing | |||||
* | openssl(1) genrsa: simplify access to rsa->e | tb | 2022-01-14 | 1 | -5/+3 | |
| | | | | ok inoguchi jsing | |||||
* | Convert openssl(1) gendsa.c to opaque DSA | tb | 2022-01-14 | 1 | -2/+2 | |
| | | | | ok inoguchi jsing | |||||
* | Convert openssl(1) dsaparam to opaque dsa | tb | 2022-01-14 | 1 | -11/+13 | |
| | | | | ok inoguchi jsing | |||||
* | Convert openssl(1) dsa.c to opaque DSA | tb | 2022-01-14 | 1 | -2/+2 | |
| | | | | ok inoguchi jsing | |||||
* | Convert openssl(1) dhparam to opaque DH | tb | 2022-01-14 | 1 | -12/+14 | |
| | | | | ok inoguchi jsing | |||||
* | Convert openssl(1) dh.c to opaque DH | tb | 2022-01-14 | 1 | -10/+12 | |
| | | | | ok inoguchi jsing | |||||
* | zap some stray whitespace | tb | 2022-01-12 | 1 | -2/+2 | |
| | ||||||
* | Wrap long lines | inoguchi | 2022-01-11 | 1 | -42/+74 | |
| | ||||||
* | Check function return value | inoguchi | 2022-01-11 | 1 | -32/+57 | |
| | ||||||
* | Suppress warning | inoguchi | 2022-01-11 | 1 | -1/+3 | |
| | ||||||
* | Compare pointer variable with NULL | inoguchi | 2022-01-11 | 1 | -44/+44 | |
| | ||||||
* | Remove space between '*' and pointer variable. | inoguchi | 2022-01-11 | 1 | -11/+9 | |
| | ||||||
* | Convert openssl(1) smime option handling | inoguchi | 2022-01-11 | 1 | -357/+744 | |
| | | | | | | Apply new option handling to openssl(1) smime and no functional changes. input and ok jsing@ | |||||
* | Unbreak tree. Sorry about that. | tb | 2022-01-10 | 1 | -7/+7 | |
| | ||||||
* | NULL out pointers after transferring them to the DSA object. | tb | 2022-01-10 | 1 | -1/+9 | |
| | ||||||
* | Dedup get_dsa*() code. | tb | 2022-01-10 | 1 | -91/+60 | |
| | | | | Pointed out by jsing | |||||
* | Convert testdsa to accessors for opaque DSA | tb | 2022-01-10 | 1 | -30/+90 | |
| | | | | ok inoguchi jsing | |||||
* | Document openssl pkey -check,-pubcheck and param -check | tb | 2022-01-10 | 1 | -2/+12 | |
| | ||||||
* | Implement openssl pkey -{,pub}check and pkeyparam -check | tb | 2022-01-10 | 4 | -10/+79 | |
| | | | | | | | These expose EVP_PKEY_{,public_,param_}check() to the command line. They are currently noops and will be enabled in the upcoming bump. ok inoguchi jsing | |||||
* | Indicate current default cipher | inoguchi | 2022-01-08 | 1 | -3/+3 | |
| | ||||||
* | Free memory before assign to avoid leak | inoguchi | 2022-01-06 | 1 | -1/+7 | |
| | | | | CID 313263 313301 313322 | |||||
* | Free memory if error occurred | inoguchi | 2022-01-06 | 1 | -2/+4 | |
| | ||||||
* | Remove NULL check before free | inoguchi | 2022-01-06 | 1 | -3/+2 | |
| | ||||||
* | Wrap long lines and add some braces | inoguchi | 2022-01-05 | 1 | -74/+129 | |
| | ||||||
* | Check function return value | inoguchi | 2022-01-05 | 1 | -8/+18 | |
| | ||||||
* | Checking pointer variable with NULL | inoguchi | 2022-01-05 | 1 | -74/+75 | |
| | ||||||
* | Use calloc instead of malloc | inoguchi | 2022-01-05 | 1 | -2/+2 | |
| | | | | suggested by tb@ | |||||
* | Check NULL first and unindent the rest of the code | inoguchi | 2022-01-05 | 1 | -41/+45 | |
| | | | | suggested by tb@ | |||||
* | Convert openssl(1) cms option handling | inoguchi | 2022-01-05 | 1 | -620/+1240 | |
| | | | | | | | Just applying new option handling and no functional changes. Referred to verify.c and using 'verify_shared_options'. ok and comments from jsing@ and tb@ | |||||
* | Check error returns for HMAC_* to appease coverity. | tb | 2021-12-26 | 1 | -4/+13 | |
| | | | | CID 345114 | |||||
* | One more leak similar to previous. | tb | 2021-12-26 | 1 | -2/+2 | |
| | ||||||
* | Plug leaks | tb | 2021-12-26 | 1 | -2/+2 | |
| | | | | CID 345111 | |||||
* | Plug memleak | tb | 2021-12-26 | 1 | -2/+4 | |
| | | | | CID 345119 | |||||
* | Attempt to opportunistically use the host name for SNI in s_client. | jsing | 2021-12-26 | 1 | -10/+34 | |
| | | | | ok beck@ inoguchi@ tb@ | |||||
* | Convert req.c to compile with opaque EVP_MD_CTX. | tb | 2021-12-12 | 1 | -25/+43 | |
| | | | | ok inoguchi | |||||
* | Convert passwd.c to opaque EVP_MD_CTX and add a bit of error checking. | tb | 2021-12-12 | 1 | -35/+72 | |
| | | | | tweak/ok inoguchi | |||||
* | Make speed.c compile with opaque EVP_CIPHER, EVP_MD and HMAC_CTX. | tb | 2021-12-12 | 1 | -20/+29 | |
| | | | | ok inoguchi | |||||
* | A few more simplifications using get0_pubkey instead of get_pubkey + free. | tb | 2021-12-12 | 1 | -9/+5 | |
| | ||||||
* | Simplify x509.c slightly by using X509_get0_pubkey() instead of | tb | 2021-12-12 | 1 | -5/+3 | |
| | | | | | | X509_get_pubkey() ok inoguchi | |||||
* | Make x509.c compile with opaque EVP_PKEY. | tb | 2021-12-12 | 1 | -7/+15 | |
| | | | | ok inoguchi | |||||
* | Use correct spelling of NULL | tb | 2021-12-12 | 1 | -2/+2 | |
| | | | | ok inoguchi | |||||
* | Make ts.c compile with opaque EVP_MD_CTX. | tb | 2021-12-12 | 1 | -5/+10 | |
| | | | | ok inoguchi | |||||
* | Simple conversion to opaque EVP_CIPHER. | tb | 2021-12-07 | 1 | -5/+9 | |
| | ||||||
* | Clean up a bunch of dead code in s_server.c and s_socket.c | tb | 2021-12-06 | 3 | -36/+21 | |
| | | | | | | | | | | | | jsg's analysis tool flagged a potential double free in do_server(). While this looks like a false positive, we can clean this code up a little: the host name passed to the callbacks isn't used by either sv_body() and www_body(), so it can be made local to do_accept() (an extra variable would not even be needed). Simplify the callbacks' signatures accordingly. Remove some commented out linger code that would never be used again anyway. ok inoguchi jsg | |||||
* | openssl(1): drop support for netscape certificates and server gated keys. | tb | 2021-11-26 | 5 | -138/+12 | |
| | | | | ok inoguchi jsing | |||||
* | We know how to print a size_t now. Drop a comment and a cast. | tb | 2021-11-25 | 1 | -6/+4 | |
| | | | | ok bluhm inoguchi | |||||
* | Tweak for opaque EVP_MD: use EVP_MD_type(dgst) instead of dgst->type. | tb | 2021-11-21 | 1 | -2/+2 | |
| | ||||||
* | Convert openssl(1) to using BN_GENCB on the heap | tb | 2021-11-20 | 4 | -51/+74 | |
| | | | | | | | | | This is three times the same thing while genrsa needs some extra steps to deal with opaque BIGNUMs. We can also garbage collect some Win 3.1 contortions and use the conversion routines directly instead of doing them manually. ok jsing | |||||
* | typo in comment | tb | 2021-11-20 | 1 | -3/+3 | |
| |