summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Collapse)AuthorFilesLines
2015-08-02This commit was manufactured by cvs2git to create tag 'OPENBSD_5_8_BASE'.OPENBSD_5_8_BASEcvs2svn1185-381116/+0
2015-08-02spelling; ok deraadtjmc2-4/+4
2015-08-02remove ssl3 bits; ok dougjmc1-58/+14
2015-07-31Don't hardcode /usr/src, use BSDSRCDIRtobiasu1-2/+2
2015-07-31Fix SRTP parsing.doug2-6/+4
jsing@ noticed that during the CBS conversion, an extra CBS_len comparison was introduced. It should be 0 after extracting MKI. ok jsing@ bcook@ deraadt@
2015-07-29Add linker warnings in case SSLv3_{,client,server}_method are referenced.miod5-5/+35
Use of this symbols proves the existence of a code path willingly using SSLv3, even with OPENSSL_NO_SSL3 being defined, which hints that it needs fixing. Discussed with the LibreSSL cabal during c2k15; ok deraadt@
2015-07-29Use named initialisers for X509V3_EXT_METHOD structs (for the usualjsing38-456/+1176
reasons) - only change in generated assembly is due to line numbering.
2015-07-29Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generatedjsing40-108/+108
assembly. ok bcook@
2015-07-29Expand obsolete M_ASN1_STRING_* macros in asn1_lib.c, apply some style(9)jsing2-12/+10
and drop an unnecessary return from a void function. ok bcook@ doug@
2015-07-27use file system path (.Pa) semantic markup macros where appropriate.sobrado1-7/+7
ok jmc@
2015-07-27Less asn1_mac.h - asn1_lib.c does not need it and x_pkey.c should bejsing4-20/+10
using ASN1err() instead of ASN1_MAC_H_err(). ok miod@
2015-07-26remove unused variablechl1-2/+2
ok tedu@
2015-07-25double words fix; docs are slowly getting moved to mdoc, but thissobrado4-4/+4
change will help people translating them. ok jmc@, schwarze@
2015-07-25Place the ASN.1 template macros (and remaining implement macros) underjsing2-6/+12
#ifndef LIBRESSL_INTERNAL - we're not using these anymore!
2015-07-25double word fix.sobrado1-2/+2
ok jmc@, schwarze@
2015-07-25Expand another ASN.1 template macro that snuck through last time around.jsing2-4/+16
No change in generated assembly.
2015-07-25Manually expand ASN.1 template macros - only change in generated assemblyjsing6-32/+80
is due to line numbering.
2015-07-25Expand ASN.1 template macros that got missed in the last pass - only changejsing6-22/+62
to generated assembly is due to line numbers.
2015-07-25Expand ASN.1 template macros - the generated assembly only differs byjsing26-282/+1612
changes to line numbers.
2015-07-25Expand ASN.1 template macros - no change in generated assembly.jsing2-112/+588
2015-07-25Expand ASN.1 template macros - no change in generated assembly.jsing2-178/+1090
2015-07-25Expand another wall of ASN.1 template macros - no change to generatedjsing2-448/+2714
assembly.
2015-07-25Expand ASN.1 template macros - no change in generated assembly.jsing4-272/+1694
2015-07-25Expand ASN.1 template macros - the generated assembly only differs byjsing2-110/+702
changes to line numbers.
2015-07-24Expand ASN.1 template macros - no change in generated assembly.jsing4-54/+342
2015-07-24Expand ASN.1 template macros - the generated assembly only differs byjsing2-102/+682
changes to line numbers.
2015-07-24an TLS -> a TLS; from thanos tsouanasjmc5-14/+14
2015-07-24Expand ASN1_ITEM_TEMPLATE/ASN1_EX_TEMPLATE_TYPE/ASN1_ITEM_TEMPLATE_ENDjsing8-44/+212
macros - the generated assembly only differs by changes to line numbers.
2015-07-24Expand IMPLEMENT_ASN1_MSTRING macros - the generated assembly only differsjsing4-12/+84
by changes to line numbers.
2015-07-24Convert tls1_process_ticket to CBS.doug4-62/+76
ok miod@ jsing@
2015-07-24Convert tls1_process_sigalgs to CBS.doug2-10/+28
ok miod@ jsing@
2015-07-24Convert ssl3_get_record to CBS.doug2-44/+58
ok miod@ jsing@
2015-07-23call it bcrypt in the man page tootedu1-3/+3
2015-07-23permit "bcrypt" as an alias for "blowfish". this is, after all, whattedu1-11/+27
99% of the world calls it. allow just "bcrypt" without params to mean auto-tune ("bcrypt,a"). default remains 8 rounds (for now) ok deraadt
2015-07-22Revert ca.c r1.7 - BN_to_ASN1_INTEGER() only allocates an ASN.1 integerjsing1-6/+2
when it is not passed a reference to one. In this case, it is passed a reference to an ASN.1 integer that is part of the X509 ASN.1 data structure. Freeing this causes bad things to happen, since it is used and then freed later on. Found the hard way by kinichiro inoguchi.
2015-07-21Convert openssl(1) nseq to new option handling.jsing1-40/+51
ok bcook@ doug@
2015-07-21Convert openssl(1) pkcs7 to new option handling.jsing1-93/+111
ok doug@
2015-07-21remove superfluous strings.hbcook1-2/+1
2015-07-21Remove duplicate check in libssl.doug2-6/+2
If len == 0, it already set try_session_cache so there's no need to check len again. Fixes Coverity issue 21687. ok bcook@
2015-07-20Correct #if/else logic in BIO's dgram_ctrl.doug2-6/+6
Coverity issue 72741 noticed that ret is being overwritten before use. The actual issue is that the #if/else logic is guarding the wrong lines. Besides impacting ret, this also made the case's break logic wrong because it was in the wrong location. ok bcook@ beck@
2015-07-20app_tminterval moved to apps_posix.c, we don't need sys/times.hbcook1-2/+1
2015-07-20prefer string.h to strings.h ok guenther@ doug@bcook2-4/+4
2015-07-20No need to recheck for NULL in openssl(1) ecparam.doug1-5/+1
Fixes Coverity issue 78802. ok bcook@
2015-07-20Don't try to run ECDH if ecdh_checks fails in openssl(1) speed.doug1-17/+23
Coverity 72744 noticed that rsa_count was overwitten. The underlying issue is that this code is supposed to be in an else block. ok bcook@
2015-07-20Avoid NULL deref in openssl(1) s_cb.doug1-5/+14
Fixes Coverity issue 24956. ok bcook@
2015-07-20Avoid possible NULL deref in openssl(1) s_server.doug1-2/+5
Fixes Coverity issue 78873. ok miod@
2015-07-20check the sigbuf value before using it.rpointel1-2/+7
ok miod@ (thanks).
2015-07-20Avoid dereferencing a NULL.doug1-5/+7
Move NULL check before use. Fixes Coverity issue 21746. ok miod@ jsing@
2015-07-20Remove condition that never happens and fix error handling.doug1-6/+5
There were two issues here: 1) in == NULL is never true because it's checked above here. (Fixes Coverity 21705) 2) All error handling is in the if (in == NULL) guard, so effectively there's no error handling and it continues on. ok miod@ jsing@
2015-07-20Various memory leaks upon error or unchecked allocations.miod2-8/+26
ok doug@