summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Collapse)AuthorFilesLines
2018-02-17Remove a warning about the dangers of X509_VERIFY_PARAM_set1_name(3)schwarze1-5/+2
because jsing@ points out that this follows a (dangerous) general pattern in the library, and mentioning that everywhere would become repetitive.
2018-02-17document LIBRESSL_VERSION_NUMBER and LIBRESSL_VERSION_TEXTschwarze1-13/+38
2018-02-17Document OpenSSL_version_num(3) and OpenSSL_version(3) that jsing@schwarze1-34/+125
recently provided. Many minor improvements while here, and delete ridiculous text about MS Windows.
2018-02-17Merge documentation for {DH,DSA}_get0_{key,pqg}(3),schwarze22-43/+489
EVP_PKEY_get0_{DH,DSA,RSA}(3), and RSA_{g,s}et0_key(3) that tb@ just provided.
2018-02-17Provide EVP_CIPHER_CTX_reset().jsing3-18/+28
Rides previous minor bump.
2018-02-17Bump libcrypto/libssl/libtls minors due to symbol additions.jsing3-3/+3
2018-02-17Provide X509_get0_extensions() and X509_get0_signature()jsing4-7/+27
2018-02-17Provide SSL_SESSION_get_master_key()jsing3-2/+22
2018-02-17Provide SSL_get_client_random() and SSL_get_server_random()jsing3-3/+41
2018-02-17Provide SSL_CTX_get0_certificate()jsing3-2/+13
2018-02-17Provide SSL_CTX_get_tlsext_status_cb() and SSL_CTX_get_tlsext_status_arg().jsing3-4/+24
2018-02-17Provide EVP_MD_CTX_new(), EVP_MD_CTX_free() and EVP_MD_CTX_reset().jsing3-21/+49
2018-02-17Provide HMAC_CTX_new(), HMAC_CTX_free(), HMAC_CTX_reset() andjsing3-11/+56
HMAC_CTX_get_md().
2018-02-17s/DH/DSA/jsing1-2/+2
2018-02-17Provide BIO_meth_{free,new}() and BIO_meth_set_{create,crtl,destroy}()tb4-3/+104
and BIO_meth_set_{puts,read,write}(). ok jsing
2018-02-17Provide further parts of the OpenSSL 1.1 API: {DH,DSA}_get0_{key,pqg}(),tb9-29/+155
EVP_PKEY_get0_{DH,DSA,RSA}(), RSA_{g,s}et0_key(). ok jsing
2018-02-17Fix behaviour of OpenSSL_version().jsing1-2/+16
The constant values do not map 1:1 to SSLeay_version(), so implement it separately. Issue noted by schwarze@
2018-02-16typo fix s/issuserAltName/issuerAltName/schwarze1-4/+6
from Andrew Siplas <andrew at asiplas dot net> via OpenSSL commit 36cf10cf Oct 4 02:11:08 2017 -0400
2018-02-16Copy all function names from the SYNOPSIS to the NAME section becauseschwarze1-6/+108
i found another page containing an .Xr to one of the functions that were not in the NAME section. This manual page is ugly either way; just ugly is better than broken links in addition to ugly.
2018-02-16Merge OpenSSL commit a8c5ed81 Jul 18 13:57:25 2017 -0400schwarze1-4/+8
from <xemdetia at 808inorganic dot com>. Original commit message: "Document default section and library configuration. It is talked around but not explicitly stated in one part of the documentation that you should put library configuration lines at the start of the configuration file."
2018-02-16Add missing RETURN VALUES sections; from Paul Yangschwarze2-8/+36
via OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800 tweaked by me.
2018-02-16Add missing RETURN VALUES sections; from Paul Yangschwarze3-15/+78
via OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800, tweaked by me.
2018-02-15Merge the new RETURN VALUES section from Paul Yang,schwarze1-7/+78
OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800, with a number of fixes by me. Also include three earlier, minor improvements from OpenSSL.
2018-02-15Add missing RETURN VALUES section; from Paul Yangschwarze1-3/+9
via OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800.
2018-02-15Fix the STANDARDS section, but in a different way than in OpenSSLschwarze1-4/+8
because i see no indication that a 2016 revision of this standard might exist. Instead, use information from: https://www.iso.org/standard/39876.html and https://www.iso.org/standard/60475.html
2018-02-15Quite absurdly, the OpenSSL folks have been actively mucking aroundschwarze1-3/+9
with their random subsystem in 2017 rather than relying on the operating system, which made me check the changes to their manual pages, which caused me to notice that they document another public function as non-deprecated that we neutered: RAND_poll(3). Mention it briefly.
2018-02-15Add missing RETURN VALUES section;schwarze1-3/+11
from Paul Yang via OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800.
2018-02-15Document the additional public function OCSP_basic_sign(3);schwarze1-5/+42
from David Cooper <david.cooper@nist.gov> via OpenSSL commit cace14b8 Jan 24 11:47:23 2018 -0500.
2018-02-15Import the new manual page EVP_PKEY_meth_new(3) from OpenSSL,schwarze13-20/+557
removing parts that don't apply to OpenBSD.
2018-02-15In some EXAMPLES, correct calls to EVP_PKEY_CTX_new(3) thatschwarze5-35/+51
lacked an argument; from Jakub Jelen <jjelen at redhat dot com> via OpenSSL commit 9db6673a Jan 17 19:23:37 2018 -0500.
2018-02-15Import the new manual page EVP_PKEY_asn1_get_count(3) from OpenSSL,schwarze2-1/+161
fixing half a dozen bugs and typos and also tweaking the wording a bit.
2018-02-15In x509_vfy.h rev. 1.20 2018/02/14 17:06:34, jsing@ providedschwarze2-19/+57
X509_STORE_CTX_set0_untrusted(3), X509_STORE_CTX_set0_trusted_stack(3), X509_STORE_CTX_get0_untrusted(3), and X509_STORE_CTX_get0_cert(3). Merge the related documentation from OpenSSL.
2018-02-15In x509.h rev. 1.28 2018/02/14 16:57:25, jsing@schwarze2-1/+76
provided X509_get0_notBefore(3) and its three friends. Write a manual page from scratch because what OpenSSL has is confusing and incomplete. By the way, providing two identical functions differing only in the constness of the returned structure is crazy. Are application programmers expected to be too stupid to write const ASN1_TIME *notBefore = X509_getm_notBefore(x) if that's what they want?
2018-02-15Fix typo: s/Vt strict tm/Vt struct tm/schwarze1-3/+3
2018-02-15In asn1.h rev. 1.44 2018/02/14 16:46:04, jsing@schwarze1-8/+25
provided ASN1_STRING_get0_data(3). Merge the corresponding documentation from OpenSSL.
2018-02-14In evp.h rev. 1.54 2018/02/14 16:40:42, jsing@ provided EVP_PKEY_up_ref(3).schwarze1-4/+22
Merge the documentation from OpenSSL commits 0c497e96 Dec 14 18:10:16 2015 +0000 and c5ebfcab Mar 7 22:45:58 2016 +0100 with tweaks by me.
2018-02-14In x509.h rev. 1.27 2018/02/14 16:18:10, jsing@ providedschwarze2-1/+80
X509_get_signature_nid(3). Add a new manual page for it based on the relevant parts of OpenSSL X509_get0_signature.pod.
2018-02-14In ssl.h rev. 1.136 2018/02/14 17:08:44, jsing@ providedschwarze1-15/+32
SSL_CTX_up_ref(3). Merge the related documentation from OpenSSL, but tweak the wording to be less confusing and simplify the RETURN VALUES section.
2018-02-14In ssl.h rev. 1.135 2018/02/14 16:16:10, jsing@ providedschwarze1-4/+42
SSL_CTX_get0_param(3) and SSL_get0_param(3). Merge the related documentation from OpenSSL, with small tweaks.
2018-02-14Bump lib{crypto,ssl,tls} minors due to symbol additions.jsing3-3/+3
2018-02-14Provide SSL_CTX_up_ref().jsing3-2/+11
2018-02-14Provide X509_STORE_CTX_get0_{cert,untrusted}() andjsing3-3/+35
X509_STORE_CTX_set0_{trusted_stack,untrusted}().
2018-02-14Provide X509_get{0,m}_not{Before,After}().jsing3-5/+41
2018-02-14Provide ASN1_STRING_get0_data().jsing3-3/+11
2018-02-14Provide EVP_PKEY_up_ref().jsing3-2/+11
2018-02-14Start providing parts of the OpenSSL 1.1 API.jsing3-2/+24
This will ease the burden on ports and others trying to make software work with LibreSSL, while avoiding #ifdef mazes. Note that we are not removing 1.0.1 API or making things opaque, hence software written to use the older APIs will continue to work, as will software written to use the 1.1 API (as more functionality become available). Discussed at length with deraadt@ and others.
2018-02-14Provide X509_get_signature_nid().jsing3-12/+21
2018-02-14Provide SSL_CTX_get0_param() and SSL_get0_param().jsing3-5/+20
Some applications that use X509_VERIFY_PARAM expect these to exist, since they're also part of the OpenSSL 1.0.2 API.
2018-02-14Update keypair regress to match revised keypair hash handling.jsing1-11/+10
Apparently I failed to commit this when I committed the libtls change...
2018-02-14New manual page EVP_PKEY_asn1_new(3) from Richard Levitteschwarze8-13/+475
via OpenSSL commit 751148e2 Oct 27 00:11:11 2017 +0200, including only the parts related to functions that exist in OpenBSD. The design of these interfaces is not particularly pretty, they are not particularly easy to document, and the manual page does not look particularly good when formatted, but what can we do, things are as they are...
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-14 02:50:47 +0000