summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Collapse)AuthorFilesLines
2024-03-06Clarify ownership in X509_STORE_add_lookup()tb1-3/+4
Whether an X509_LOOKUP with given method already exists or not, this API returns an internal pointer that must not be freed.
2024-03-06POSIX defines inet_ntoa, not inet_aton.bentley1-3/+3
ok deraadt@ jmc@
2024-03-06Remove CRL method API documentationtb7-243/+11
2024-03-05lh_<type>_error() is no longer implemented as a macrotb1-4/+2
2024-03-05Ugly workaround to let this compile again on non-clang platforms.miod1-1/+9
2024-03-05Remove GOST documentationtb7-42/+17
2024-03-05Remove ASN1_time_parse documentationtb6-157/+9
2024-03-05Remove EVP_MD_meth* documentationtb8-378/+70
Move the description of the EVP_MD_FLAGs to EVP_MD_nid() and add a reference to the CMS specification.
2024-03-04Remove EVP_add_{cipher,digest}* docstb4-198/+5
2024-03-04lh_new.3: zap a trailing commatb1-3/+3
2024-03-04EVP_CIPH_CUSTOM_KEY_LENGTH and EVP_CTRL_SET_KEY_LENGTH are gonetb1-14/+2
2024-03-04Remove docs for sk_find_ex()tb1-47/+3
2024-03-04Remove documentation of some CRYPTO_THREADID APItb1-58/+2
CRYPTO_THREADID_{cpm,cpy,current,hash}() are no longer public, so remove their documentation.
2024-03-04Document X509_STORE_get1_objects and deprecate the get0 versiontb1-4/+38
This manual is ordered a bit strangely in that some functions are only documented in RETURN VALUES.
2024-03-03Reinstate a test that was accidentally removed in previoustb1-1/+7
2024-03-02include <time.h> for time_t and struct tm, needed for macostb1-1/+2
ok millert miod
2024-03-02Remove some GOST relicstb4-210/+2
2024-03-02Unhook some gost teststb1-121/+1
2024-03-02Crank libressl version to 3.9.0 (finally!)tb1-3/+3
2024-03-02crank libtls majortb1-1/+1
same bump as libcrypto and libssl
2024-03-02crank libssl majortb1-1/+1
same bump as libcrypto; symbol removal and addition
2024-03-02Remove SSL_debugtb4-13/+3
The garbage truck is quite full by now. Collect the last symbol straggler for this bump. ok jsing
2024-03-02Garbage collect TLS1_FLAGS_SKIP_CERT_VERIFYtb1-2/+1
And here goes another weird-ass thing of dubious pedigree. ok jsing
2024-03-02Make {SSL3,TLS}_CT_* internaltb3-28/+8
And here goes a bunch of unused macros that just had to be in two headers so they could get out of sync. Three of these constants are used in a single function... ok jsing
2024-03-02Remove SSL_CIPHER_get_by_{id,value}()tb4-23/+3
While this undocumented API would have been much nicer and saner than SSL_CIPHER_find(), nothing used this except for the exporter test. Let's get rid of it again. libssl uses ssl3_get_cipher_by_{id,value}() directly. ok jsing
2024-03-02Export SSL_get_{peer_,}signature_type_nid()tb5-8/+13
Also move the prototypes to the correct header. Oversight reported by Frank Lichtenheld, thanks! Fixes https://github.com/libressl/openbsd/issues/147 ok jsing
2024-03-02crank libcrypto majortb1-1/+1
There were symbol addition, removal, function signature changes and struct visibility changes.
2024-03-02Change sk in CRYPTO_EX_DATA from STACK_OF(void) * to void *tb1-2/+2
Requested by jsing
2024-03-02tedu OPENSSL_isservice() prototypetb1-3/+1
When tedu tedued OPENSSL_isservice(), tedus chainsaw missed crypto.h. Finish the teduing of the hack for Visual C++ 5.0 (!), which is still present in the latest and greatest OpenSSL. ok jsing
2024-03-02Make CRYPTO_THREADID opaquetb8-25/+149
With ERR_STATE out of the way, we can make CRYPTO_THREADID opaque. The type is still accessed by used public API, but some of the public API can also go away. ok jsing
2024-03-02Fix CRYPTO_malloc/free signaturestb2-10/+8
Importantly, the size in malloc is now a size_t instead of an int. The API now also takes a file and line to match upstream's signature. ok jsing
2024-03-02Remove CRYPTO_*infotb5-43/+3
Long time neutered, only used (pointlessly without error checking) in the error code until very recently. ok jsing
2024-03-02Remove a bunch of CRYPTO memory APItb6-354/+4
This was neutered early on in the fork and has been rotting ever since. Some parts of the API are still used, but it's easier to clean up when most of the mess is gone. ok jsing
2024-03-02Update list of OPENSSL_NO_*tb1-5/+25
This syncs the list with some version of upstream and exposes a few OPENSSL_NO_* that may now be relevant. from jsing (a long time ago)
2024-03-02Remove a few no longer used sk_FOO_* stanzastb1-85/+1
ok jsing
2024-03-02Remove sk_find_ex()tb8-97/+5
This API intends to find the closest match to the needle. M2Crypto exposes it because it can. This will be fixed by patching the port. ok jsing
2024-03-02Unhook and remove GOST and STREEBOGtb25-6776/+5
This stops compiling the GOST source. The current implementation is low quality and got in the way, especially in libssl. While we would be open for GOST support, it needs to be significantly better than what we have had and it also needs a maintainer. Add OPENSSL_NO_GOST to opensslfeatures and stop installing gost.h. Some code wrapped in #ifndef OPENSSL_NO_GOST will be removed later. ok jsing
2024-03-02Make LHASH_OF() and STACK_OF() use opaque structstb13-80/+211
This removes internals of these two special snowflakes and will allow further simplifications. Unfortunately, there are some pieces of software that actually use LHASH_OF() (looking at you, pound, Ruby, and openssl(1)), so we get to keep exposing this garbage, at least for now. Expose lh_error() as a symbol to replace a macro reaching into _LHASH. lh_down_load() is no longer available. _LHASH and _STACK are now opaque, LHASH_NODE becomes internal-only. from jsing
2024-03-02Remove lh statstb11-573/+7
This could have been removed in an earlier bump. Now it's time for it to say goodbye. ok jsing
2024-03-02Remove X509_CRL_METHOD APItb3-52/+2
I would keep repeating myself... In the bit bucket you go. ok jsing
2024-03-02Garbage collect most of the public LOOKUP APItb5-84/+5
Yet another bit of extensibility that no one ever really used. X509_LOOKUP_free() needs to stay because of ... rust-openssl (and kdelibs4support). ok jsing
2024-03-02Expose X509_STORE_get1_objects()tb2-3/+2
Safer replacement API for the unsafe X509_STORE_get0_objects(). ok jsing
2024-03-02Make X509_CERT_AUX internaltb3-18/+11
Another struct/API that should never have leaked out of the library. ok jsing
2024-03-02Remove X509_TRUST from the public APItb2-13/+11
With API and other users internal, this struct can now go. ok jsing
2024-03-02Remove DECLARE_STACK_OF(X509_TRUST)tb1-3/+1
Unused since the extensibility was neutered. ok jsing
2024-03-02Remove unused public X509_TRUST APItb5-123/+3
Another thing that should never have leaked out of the library. It will become internal entirely, where the code can be simplified greatly. ok jsing
2024-03-02const correct X509_PURPOSE_get0{,_{,s}name}()tb2-10/+11
Unfortunately, PHP and rust-openssl still need this API. At least we can make the table read-only now since we disabled its extensibility. ok jsing
2024-03-02Make X509_PURPOSE opaquetb2-11/+13
Code using details of X509_PURPOSE does so by using API. So we can make this struct opaque. ok jsing
2024-03-02Remove unused parts of the purpose APItb9-74/+13
Most of this is the ability to add custom purposes. Also the astounding X509_STORE_CTX_purpose_inherit(). The names are used by PHP, and M2Crypto exposes X509_check_purpose(), so these remain public. Some weird, most likely invalid, uses also remain in rust-openssl. ok jsing
2024-03-02Remove X509V3_EXT extensibility APItb5-53/+3
You used to be able to define your own X.509 extension handlers. Great. Even greater: the verifier would ignore any custom extensions. So this was only ever useful for serialization and deserialization. In other words, almost entirely pointless. The API was also unused except for a hack in kore-acme, which was fixed recently. ok jsing
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-19 20:05:19 +0000