summaryrefslogtreecommitdiff
path: root/src (unfollow)
Commit message (Collapse)AuthorFilesLines
2022-01-07Prepare to provide EVP_AEAD_CTX_{new,free}()tb2-3/+29
ok jsing
2022-01-07Revert previous accidental committb1-2/+2
2022-01-07Rename dh_tmp to dhe_params.jsing5-33/+39
Support for non-ephemeral DH was removed a long time ago - as such, the dh_tmp and dh_tmp_cb are used for DHE parameters. Rename them to reflect reality. ok inoguchi@ tb@
2022-01-07Stop attempting to duplicate the public and private key of dh_tmp.jsing1-17/+1
Support for non-ephemeral DH was removed a very long time ago - the only way that dh_tmp is set is via DHparams_dup(), hence the public and private keys are always going to be NULL. ok inoguchi@ tb@
2022-01-07Convert legacy server to tls_key_share.jsing6-233/+115
This requires a few more additions to the DHE key share code - we need to be able to either set the DHE parameters or specify the number of key bits for use with auto DHE parameters. Additionally, we need to be able to serialise the DHE parameters to send to the client. This removes the infamous 'tmp' struct from ssl3_state_internal_st. ok inoguchi@ tb@
2022-01-07A few more files need asn1_locl.h.tb3-3/+8
2022-01-07include asn1_locl.h where it will be needed for the bump.tb7-7/+19
discussed with jsing
2022-01-07Prepare to make RSA and RSA_METHOD opaque by including rsa_locl.htb9-9/+19
where it will be needed in the upcoming bump. discussed with jsing
2022-01-07Add an essentially empty ocsp_local.h and include it in the filestb10-9/+95
that will need it in the upcoming bump. discussed with jsing
2022-01-07gost needs to look into ecs_locl.htb2-2/+4
2022-01-07Prepare the move of DSA_SIG, DSA_METHOD and DSA to dsa_locl.h bytb10-10/+25
including the local header where it will be needed. discussed with jsing
2022-01-07Add an essentially empty dh_local.h and include it in the files wheretb10-9/+88
it will be needed in the upcoming bump. discussed with jsing
2022-01-07zap trailing whitespacetb1-9/+9
2022-01-07Let dtlstest peek into bio_local.htb2-2/+4
2022-01-07Add a new, mostly empty, bio_local.h and include it in the filestb23-22/+128
that will need it in the upcoming bump. discussed with jsing
2022-01-06refer to longindex as an argument, not a field;jmc1-3/+3
from uwe@netbsd -r1.22 ok millert
2022-01-06Revise for change to tls_key_share_peer_public()jsing1-3/+2
2022-01-06Convert legacy TLS client to tls_key_share.jsing7-256/+181
This requires adding DHE support to tls_key_share. In doing so, tls_key_share_peer_public() has to lose the group argument and gains an invalid_key argument. The one place that actually needs the group check is tlsext_keyshare_client_parse(), so add code to do this. ok inoguchi@ tb@
2022-01-06Allocate and free the EVP_AEAD_CTX struct in tls13_record_protection.jsing1-7/+13
This brings the code more in line with the tls12_record_layer and reduces the effort needed to make EVP_AEAD_CTX opaque. Prompted by and ok tb@
2022-01-06Add regress tests for ASN1_BIT_STRING.jsing1-2/+113
2022-01-06Add a comment that explains why build_addr_block_tests isn't consttb2-3/+8
2022-01-06Convert SCT verification to CBB.jsing1-56/+57
ok inoguchi@ tb@
2022-01-06Sync from libssl.jsing2-2/+21
2022-01-06Test CBB_add_u64()jsing1-2/+6
2022-01-06Provide CBB_add_u64()jsing2-2/+21
Prompted by and ok tb@
2022-01-06minor tweaks, no code changetb1-4/+3
Adjust a comment to reality, zap a stray empty line and fix whitespace before comment after #endif
2022-01-06With openssl-ruby-tests 20220105, test_post_connection_check_wildcard_santb1-2/+2
is now an unexpected pass, so remove it from the expected failures.
2022-01-06Free memory before assign to avoid leakinoguchi1-1/+7
CID 313263 313301 313322
2022-01-06Free memory if error occurredinoguchi1-2/+4
2022-01-06Remove NULL check before freeinoguchi1-3/+2
2022-01-06Fix a copy-paste error that led to an out-of-bounds access.tb1-2/+2
Found via a crash on bluhm's i386 regress test box
2022-01-06Add test coverage for SCT validation.jsing4-7/+116
Of note, the public APIs for this mean that the only way you can add a CTLOG is by reading a configuration file from disk - there is no programmatic way to do this.
2022-01-06t_syscall was a test for the gcc 1.x off_t syscall padding,guenther2-125/+2
which was an implementation detail and has been deleted, so delete the test
2022-01-05Prepare to provide DSA_bits()tb2-2/+11
Used by Qt5 and Qt6 and slightly reduces the patching in there. ok inoguchi jsing
2022-01-05Prepare to provide BIO_set_retry_reason()tb2-2/+11
Needed by freerdp. ok inoguchi jsing
2022-01-05Prepare to provide a number of RSA accessorstb2-2/+67
This adds RSA_get0_{n,e,d,p,q,dmp1,dmq1,iqmp,pss_params}() which will be exposed in the upcoming bump. ok inoguchi jsing
2022-01-05Prepare to provide ECDSA_SIG_get0_{r,s}()tb2-2/+19
ok inoguchi jsing
2022-01-05Prepare to provide DH_get_length()tb2-2/+11
Will be needed by openssl(1) dhparam. ok inoguchi jsing
2022-01-05Prepare to provide DSA_get0_{p,q,g,{priv,pub}_key}()tb2-2/+39
ok inoguchi jsing
2022-01-05Prepare to provide DH_get0_{p,q,g,{priv,pub}_key}()tb2-2/+39
These are accessors that allow getting one specific DH member. They are less error prone than the current getters DH_get0_{pqg,key}(). They are used by many ports and will also be used in base for this reason. Who can remember whether the pub_key or the priv_key goes first in DH_get0_key()? ok inoguchi jsing
2022-01-05Prepare to provide BIO_set_next().tb2-2/+11
This will be needed in libssl and freerdp after the next bump. ok inoguchi jsing
2022-01-05Prepare to provide X509_{set,get}_verify() and X509_STORE_get_verify_cb()tb2-7/+37
as well as the X509_STORE_CTX_verify_cb and X509_STORE_CTX_verify_fn types This will fix the X509_STORE_set_verify_func macro which is currently broken, as pointed out by schwarze. ok inoguchi jsing
2022-01-05Unindent a few lines of code and avoid shadowed variables.tb1-12/+7
2022-01-05Rename {c,p}_{min,max} into {child,parent}_{min,max}tb1-7/+8
2022-01-05Two minor KNF tweakstb1-5/+5
2022-01-05Use child_aor and parent_aor instead of aorc and aorptb1-15/+15
suggested by jsing
2022-01-05Rename fp and fc into parent_af and child_af for readability.tb1-24/+29
suggested by jsing
2022-01-05Globally rename all IPAddressFamily *f into af since this is slightlytb1-64/+65
more readable. Repeated complaints by jsing
2022-01-05Add a helper function to turn unchecked (but sound) use oftb1-13/+18
sk_find + sk_value into something easier to follow and swallow. ok inoguchi jsing
2022-01-05Hoist IPAddressFamily_cmp() to the other IPAddressFamily functions.tb1-29/+29
ok inoguchi jsing
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-25 15:40:50 +0000