summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Zap trailing whitespacetb2023-04-261-3/+1
|
* Add RCS tagtb2023-04-261-0/+1
|
* Take X509_POLICY_NODE_print() behind the barntb2023-04-264-100/+3
| | | | | | | | This used to be public API but is now only used for debug code that has certainly never been used since it was released to the public. It drags that debug nonsense with it. ok beck
* Add the new policy code to the build.beck2023-04-261-1/+2
| | | | ok tb@ jsing@
* Make the new policy code in x509_policy.c to be selectable at compile time.beck2023-04-2612-15/+106
| | | | | | | The old policy codes remains the default, with the new policy code selectable by defining LIBRESSL_HAS_POLICY_DAG. ok tb@ jsing@
* Add a shim to mimic the BoringSSL sk_delete_if function.beck2023-04-261-0/+23
| | | | | | | We add this locally as a function to avoid delving into the unholy macro madness of STACK_OF(3). ok tb@ jsing@
* Add lookup name+function pointer table for improved diagnosticsjob2023-04-261-4/+29
| | | | OK tb@
* Adapt the sk_find calls from BoringSSL's api to ours.beck2023-04-261-6/+5
| | | | ok tb@ jsing@
* Add the STACK_OF declarations we require.beck2023-04-261-2/+46
| | | | ok tb@ jsing@
* Change OPENSSL_malloc|free|memset and friends to the normal versions.beck2023-04-261-6/+6
| | | | ok tb@ jsing@
* Fix error code goopbeck2023-04-261-5/+8
| | | | ok tb@ jsing@
* Use the correct headers to compile with libresslbeck2023-04-261-5/+4
|
* Import policy.c from BoringSSL as x509_policy.cbeck2023-04-261-0/+790
| | | | | | | | | | | This is an implementation of the X509 policy processing using a DAG instead of a tree to avoid the problem of exponential expansion of the policy tree as specified in RFC 5280 For details see: https://boringssl-review.googlesource.com/c/boringssl/+/55762 ok tb@ jsing@
* Document those BIO_ctrl(3) command constantsschwarze2023-04-265-37/+162
| | | | that correspond to more than one macro each.
* Remove the now unused bio_pk7.ctb2023-04-262-65/+1
|
* Move BIO_new_PKCS7() to the the other streaming stuff in pk7_mime.ctb2023-04-262-8/+8
|
* KNF nittb2023-04-261-2/+3
|
* Clean up ec.h a little.tb2023-04-261-186/+31
| | | | | The doxygen comments are either obvious or otherwise unhelpful and generally an eye sore. Go read the manpage if the header isn't enough.
* Parameter names are not neededjob2023-04-261-4/+4
|
* Remove unneeded parenthesesjob2023-04-261-4/+4
|
* No need to pass around const pointer cpder2job2023-04-261-18/+16
| | | | Suggested by tb@
* Shrink signature as cpder is only needed as local variablejob2023-04-261-14/+15
| | | | Suggested by tb@
* Replace macros with functionsjob2023-04-261-99/+115
| | | | Requested by tb@
* Some more EC2M cleanuptb2023-04-262-48/+4
|
* Garbage collect test using the nseq commandtb2023-04-261-7/+1
| | | | reminded by anton
* Rename dercache regress test to x509_asn1job2023-04-262-5/+5
| | | | Requested by jsing@
* Remove e_old.c againtb2023-04-263-171/+1
| | | | | | | | | Also remove nonexistent symbols #defined to other symbols that confuse some linkers in -portable. This commit entails no ABI change on OpenBSD. Discussed with jsing
* Reinstate e_old.c it is still used by -portabletb2023-04-252-1/+161
|
* Add regress test for invalidation of DER cache in select X509 setter functionsjob2023-04-252-2/+200
|
* Remove documentation of BN_BLINDING_{g,s}et_thread_idtb2023-04-251-17/+2
|
* e_old can also gotb2023-04-252-161/+1
|
* Remove the deprecated API from BNtb2023-04-254-174/+5
|
* GF2m bites the dust. It won't be missed.tb2023-04-2512-4655/+11
|
* ASN1_item_ndef_i2d also goes. discussed with deraadttb2023-04-251-1/+0
|
* bio_asn1: adjust for more recent churntb2023-04-252-2/+6
|
* Remove commented version of OPENSSL_NO_EC2Mtb2023-04-251-1/+0
|
* Remove duplicate NID definitionstb2023-04-251-11/+1
|
* LIBRESSL_NEXT_API is no longer neededtb2023-04-251-2/+0
|
* Remove prototype of EC_GFp_nist_method()tb2023-04-251-8/+1
|
* Move EC_KEY_{insert,set}_key_method_data() to internal-onlytb2023-04-254-22/+15
|
* Move low level BIO_new_NDEF API to internal-onlytb2023-04-256-25/+29
|
* Remove proxy cert remnantstb2023-04-254-492/+2
|
* Remove NETSCAPE_CERT_SEQUENCEtb2023-04-254-191/+4
|
* Move the policy STACK_OF stuff to pcy_int.h as welltb2023-04-252-50/+45
|
* Remove SXNETtb2023-04-259-638/+7
| | | | Unused and no authorative information was found online in 2016
* Move truncated sha-2 and sha3 out of #ifdef wrapperstb2023-04-251-5/+1
|
* Use X509_STORE_CTX_get1_{certs,crls}() instead of an aliastb2023-04-251-3/+3
|
* X509_STORE_get1_{certs,crls} become X509_STORE_CTX_* also intb2023-04-251-2/+2
| | | | Symbols.namespace
* X509_STORE_get1_{certs,crls} become X509_STORE_CTX_*tb2023-04-253-28/+5
| | | | This matches the OpenSSL 1.1 API a bit better.
* Move the policy tree code to internal-onlytb2023-04-258-86/+42
| | | | | A few hooks remain in the legacy validator, which will soon be replaced with something better. The rest of the tentacles are now largely contained.