Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Put back i2d_ASN1_SET() and d2i_ASN1_SET() from the NO_ASN1_OLD prune, as there | miod | 2014-04-18 | 7 | -1/+518 |
| | | | | | | | are still some 3rd-party code using it, and fixing them is not trivial. As an excuse gift, the memory leaks on failure in resurrected a_set.c have been fixed. | ||||
* | this file is not relevant | deraadt | 2014-04-18 | 1 | -25/+0 |
| | |||||
* | guenther would prefer more separation | tedu | 2014-04-18 | 2 | -0/+4 |
| | |||||
* | we need to crank | tedu | 2014-04-18 | 2 | -2/+2 |
| | |||||
* | remove include files not needed | deraadt | 2014-04-18 | 4 | -34/+4 |
| | |||||
* | Document support for "openssl s_client -starttls lmtp" | guenther | 2014-04-18 | 1 | -1/+1 |
| | |||||
* | Finish zapping SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION usage; only keep | guenther | 2014-04-18 | 5 | -25/+19 |
| | | | | | | | the #define for compat, but document that it's a no-op now. Also, neuter the -legacy_renegotiation option to "openssl s_{client,server}" ok beck@ | ||||
* | use the portable construct around asprintf; pointed out by halex | deraadt | 2014-04-18 | 3 | -3/+6 |
| | |||||
* | Some dude named Tavis Ormandy reported a bug which has gone unfixed. | tedu | 2014-04-18 | 2 | -0/+10 |
| | | | | | | | | | | | http://marc.info/?l=openssl-users&m=138014120223264&w=2 Arguably a doc bug, but we argue not. If you parse a new cert into memory occupied by a previously verified cert, the new cert will inherit that state, bypassing future verification checks. To avoid this, we will always start fresh with a new object. grudging ok from guenther, after i threatened to make him read the code yet again. "that ok was way more painful and tiring then it should have been" | ||||
* | since e_os.h is dead, and e_os2.h is installed, we can fetch from there. | deraadt | 2014-04-18 | 1 | -8/+2 |
| | | | | This means we don't need the reach-around anymore. | ||||
* | Put the final pieces from e_os.h in the required places, and remove it. | deraadt | 2014-04-18 | 28 | -204/+9 |
| | | | | | "dance on it's grave" says beck ok guenther beck | ||||
* | blank lines between decls and code | tedu | 2014-04-18 | 2 | -0/+10 |
| | |||||
* | These files were never installed in the past, and are not generally | deraadt | 2014-04-18 | 45 | -1465/+0 |
| | | | | | used. They can go away. ok guenther reyk | ||||
* | Use asprintf() for generating path, instead of multiple | deraadt | 2014-04-18 | 1 | -7/+1 |
| | | | | return-value-not-checked strlcpy and strlcat | ||||
* | in CONF_get1_default_config_file(), don't calculate a buffer size, | deraadt | 2014-04-18 | 2 | -30/+10 |
| | | | | | | | malloc it, do unbounded strlcpy's to it... but instead of asnprintf. While there, let's put a '/' between the two path components! Wonder how old that bug is.. ok guenther | ||||
* | More KNF. | jsing | 2014-04-18 | 2 | -152/+160 |
| | |||||
* | another round of chemo for the RAND code to provide clarity. | tedu | 2014-04-18 | 9 | -761/+172 |
| | | | | ok deraadt | ||||
* | More KNF. | jsing | 2014-04-18 | 14 | -850/+1070 |
| | |||||
* | egd support is too dangerous to leave where somebody might find it. | tedu | 2014-04-18 | 6 | -244/+4 |
| | | | | ok deraadt. | ||||
* | More KNF. | jsing | 2014-04-18 | 14 | -928/+1028 |
| | |||||
* | unistd.h for protos where needed | deraadt | 2014-04-18 | 14 | -0/+14 |
| | |||||
* | define RFILE only in the file that needs it | deraadt | 2014-04-18 | 3 | -11/+2 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 34 | -1030/+1324 |
| | |||||
* | add braces missed when fixing leaks | jsg | 2014-04-18 | 2 | -2/+4 |
| | |||||
* | KNF, since this is no longer script generated | deraadt | 2014-04-18 | 1 | -172/+171 |
| | |||||
* | simplify file:file:... stuff | deraadt | 2014-04-18 | 12 | -14/+13 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 22 | -1328/+1626 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 16 | -406/+390 |
| | |||||
* | whitespace normalization | tedu | 2014-04-18 | 8 | -91/+81 |
| | |||||
* | repair whitespace. this is what happens when functions take 20 params. | tedu | 2014-04-18 | 1 | -20/+20 |
| | |||||
* | Remove MAIN and PROG defines now that we do not compile non-monolithic. | jsing | 2014-04-18 | 47 | -180/+93 |
| | | | | ok tedu@ | ||||
* | igetest.c moved to regress we don't need another copy | jsg | 2014-04-18 | 2 | -1006/+0 |
| | | | | ok miod@ | ||||
* | fix another potential double free | jsg | 2014-04-18 | 2 | -4/+4 |
| | | | | ok miod@ lteo@ jca@ | ||||
* | -netware | tedu | 2014-04-18 | 2 | -12/+4 |
| | |||||
* | undef NETWARE_CLIB and NETWARE_LIBC | tedu | 2014-04-18 | 1 | -15/+0 |
| | |||||
* | unterminated comment | tedu | 2014-04-18 | 1 | -1/+1 |
| | |||||
* | KaboomNF | tedu | 2014-04-18 | 51 | -13869/+12180 |
| | |||||
* | spelling fix from Micha Borrmann on openssl-dev | tedu | 2014-04-18 | 1 | -1/+1 |
| | |||||
* | blunt force knf | tedu | 2014-04-18 | 38 | -2490/+1848 |
| | |||||
* | Remove support for unwanted operating systems. | jsing | 2014-04-18 | 3 | -82/+0 |
| | | | | ok miod@ | ||||
* | Unifdef OPENSSL_FIPS. | jsing | 2014-04-18 | 3 | -25/+0 |
| | | | | ok miod@ | ||||
* | lob a few more knf grenades in here to soften things up. | tedu | 2014-04-18 | 108 | -3592/+1998 |
| | |||||
* | putting most of the braces in the right column is the very least we can do. | tedu | 2014-04-18 | 108 | -4060/+4068 |
| | |||||
* | whack a bunch of disabled code. ok beck lteo | tedu | 2014-04-17 | 16 | -486/+6 |
| | |||||
* | Make MONOLITH the default and only option | matthew | 2014-04-17 | 5 | -52/+3 |
| | | | | ok deraadt | ||||
* | stab at indentation | tedu | 2014-04-17 | 10 | -1474/+1450 |
| | |||||
* | don't fake up SSIZE_MAX | tedu | 2014-04-17 | 2 | -16/+0 |
| | |||||
* | more windows/netware leftovers | tedu | 2014-04-17 | 4 | -44/+6 |
| | |||||
* | delete if 0 code | tedu | 2014-04-17 | 8 | -154/+28 |
| | |||||
* | more spring VMS cleanup | giovanni | 2014-04-17 | 6 | -28/+0 |
| | | | | ok miod@ lteo@ |