Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Print size_t's correctly. | beck | 2017-05-08 | 1 | -3/+3 |
| | | | | Fix from Jonas 'Sortie' Termansen <sortie@maxsi.org> | ||||
* | Limit -Werror to gcc4 as was done in libcrypto/libssl/libtls to avoid | jsg | 2017-05-07 | 1 | -3/+7 |
| | | | | | | failed builds with different compilers. ok jsing@ | ||||
* | repair knf & whitespace that jumped out of the screen during review | deraadt | 2017-03-27 | 1 | -23/+18 |
| | | | | ok beck | ||||
* | use a path of "/" if the URL does not include a trailing / - since | beck | 2017-03-27 | 1 | -2/+5 |
| | | | | | | the web server probably doesn't like it, even though you published the url without the trailing / in the certificate. (hello digicert!) ok claudio@ | ||||
* | Fail early if an ocep server returns a non-200 http response, there is no | beck | 2017-03-27 | 1 | -1/+4 |
| | | | | point in trying to parse error pages as an ocsp response. | ||||
* | recallocarray() for data buffer from the net. | deraadt | 2017-03-26 | 1 | -3/+5 |
| | | | | ok beck | ||||
* | pledge stdio before parsing the http response | beck | 2017-02-25 | 1 | -9/+11 |
| | | | | ok tb@ | ||||
* | Add missing $OpenBSD$ | beck | 2017-02-20 | 1 | -0/+1 |
| | |||||
* | Don't use <sys/param.h> from userland without cause. Sort <sys/*> | guenther | 2017-02-03 | 1 | -3/+4 |
| | | | | | | before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@ | ||||
* | netinet/in.h should be included, and freebsd and some others | beck | 2017-02-01 | 2 | -2/+6 |
| | | | | | don't have EAI_NODATA, so make this easier for people from bernard spill | ||||
* | oscp -> ocsp; | jmc | 2017-01-26 | 2 | -4/+4 |
| | | | | from holger mikolon, plus one more in nc; | ||||
* | Use numeric exit codes consistently rather than a mix | beck | 2017-01-26 | 1 | -11/+11 |
| | | | | ok jsing@ | ||||
* | style | beck | 2017-01-26 | 1 | -1/+1 |
| | |||||
* | Fix the structure initialzation to compile. bad inioguchi and millert :) | beck | 2017-01-26 | 1 | -1/+1 |
| | | | | ok jsing@ rpe@ | ||||
* | Fix array initialization syntax for ocspcheck.c | inoguchi | 2017-01-25 | 1 | -1/+1 |
| | | | | | Conformance to C99, and avoiding build break on VisualStudio and HP-UX. OK millert@ | ||||
* | remove __BEGIN_DECLS and __END_DECLS from http.h | inoguchi | 2017-01-25 | 1 | -5/+1 |
| | | | | | sync with ocspcheck and acme-client ok benno@ | ||||
* | bring changes from acme-client over here. | benno | 2017-01-25 | 1 | -56/+54 |
| | | | | ok beck@ | ||||
* | correct usage format; ok beck claudio benno | deraadt | 2017-01-24 | 1 | -2/+3 |
| | |||||
* | fix mode on open() and ftruncate(), noticed by | beck | 2017-01-24 | 1 | -2/+4 |
| | | | | bcook@ | ||||
* | Say no to two line error messages on failure | beck | 2017-01-24 | 1 | -4/+3 |
| | |||||
* | s/returns/exits/ | beck | 2017-01-24 | 1 | -2/+2 |
| | |||||
* | Break run-on sentence into two. | beck | 2017-01-24 | 1 | -3/+4 |
| | |||||
* | string terminator is called a NUL | deraadt | 2017-01-24 | 2 | -5/+5 |
| | |||||
* | Actually load the cafile when providede, and error message cleanup | beck | 2017-01-24 | 1 | -4/+4 |
| | |||||
* | use warn, I have errno here. noticed by theo | beck | 2017-01-24 | 1 | -1/+1 |
| | |||||
* | Yes the "if (const == val" idiom provides some safety, but it grates on | deraadt | 2017-01-24 | 1 | -58/+58 |
| | | | | | us too much. ok beck jsing | ||||
* | knf | beck | 2017-01-24 | 1 | -1/+2 |
| | |||||
* | revert accidental commit of theo diff | beck | 2017-01-24 | 1 | -58/+58 |
| | |||||
* | Just don't bother with OpenSSL error strings, they are mostly | beck | 2017-01-24 | 2 | -77/+71 |
| | | | | irrelevant and look gross here anyway.. we don't need them | ||||
* | various cleanup; | jmc | 2017-01-24 | 2 | -29/+28 |
| | |||||
* | slight cleanups | deraadt | 2017-01-24 | 1 | -4/+3 |
| | |||||
* | s/exit/exist/ typo | beck | 2017-01-24 | 1 | -2/+2 |
| | |||||
* | New ocspcheck utility to validate a certificate against its ocsp responder | beck | 2017-01-24 | 5 | -0/+1634 |
| | | | | | | and save the reply for stapling ok deraadt@ jsing@ | ||||
* | Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is not | jsing | 2014-08-26 | 2 | -10438/+0 |
| | | | | | | | | a system/superuser binary. At the same time, move the source code from its current lib/libssl/src/apps location to a more appropriate home under usr.bin/openssl. ok deraadt@ miod@ | ||||
* | Link dependencies on libssl and libcrypto were missing. | guenther | 2014-07-27 | 1 | -2/+3 |
| | | | | | | OPENSSL_NO_RC5 is #defined in the #includes, so it's not needed here. ok deraadt@ | ||||
* | Use Cm instead of Li for 'MASK:' | guenther | 2014-07-22 | 1 | -2/+2 |
| | | | | (Overlooked among jmc@'s other suggestions) | ||||
* | Rewrite the description of the string_mask config file option to match | guenther | 2014-07-22 | 1 | -34/+30 |
| | | | | | | reality, and reformatting to be readable. formatting and wording suggestions miod@ jmc@ | ||||
* | Warnings. I haz them. | miod | 2014-07-02 | 1 | -2/+11 |
| | |||||
* | Alexander Schrijver posted a diff to remove references to the c_rehash script, | jmc | 2014-06-25 | 1 | -6/+5 |
| | | | | | | which we don;t have in base. after some discussion with jca, i've not removed these references, but tried to make it clearer it's distributed with openssl and not included in base; | ||||
* | Remove references to RANDFILE. | jsing | 2014-06-02 | 1 | -19/+2 |
| | |||||
* | Remove details regarding -rand from the openssl man page. | jsing | 2014-06-02 | 1 | -123/+3 |
| | |||||
* | define -DLIBRESSL_INTERNAL in here so we don't use nasties | beck | 2014-05-29 | 1 | -2/+2 |
| | | | | ok deraadt@ | ||||
* | sync openssl(1) with changes already made in src/lib/libssl/doc, reminded by | sthen | 2014-05-18 | 1 | -5/+5 |
| | | | | jmc: move from 1024 to 2048 bit key defaults; see genrsa.c 1.26 et al. | ||||
* | Remove defined varibles that no longer do anything. | jsing | 2014-04-25 | 1 | -3/+2 |
| | | | | ok miod@ | ||||
* | no app_rand.c | tedu | 2014-04-18 | 1 | -2/+2 |
| | |||||
* | since e_os.h is dead, and e_os2.h is installed, we can fetch from there. | deraadt | 2014-04-18 | 1 | -8/+2 |
| | | | | This means we don't need the reach-around anymore. | ||||
* | Make MONOLITH the default and only option | matthew | 2014-04-17 | 1 | -2/+2 |
| | | | | ok deraadt | ||||
* | -Wall | tedu | 2014-04-17 | 1 | -1/+2 |
| | |||||
* | Remove workarounds for ld reaching MAXDSIZ on vax, now that MAXDSIZ is | miod | 2014-04-15 | 1 | -5/+1 |
| | | | | | more comfortable. Reminded by brad@ | ||||
* | Unhook httpd(8) from build; man page bits | florian | 2014-03-13 | 1 | -10/+3 |
| | | | | | | | tweaks jmc@ OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@ "The time is right." and much help getting the show on the road deraadt@ |