summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* New manuals ESS_SIGNING_CERT_new(3) and TS_REQ_new(3) writtenschwarze2016-12-143-1/+279
| | | | | | from scratch. All these functions are listed in <openssl/ts.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file.
* Start RSA_PSS_PARAMS_new(3) stub from scratch. Both functionsschwarze2016-12-132-1/+54
| | | | | | are listed in <openssl/rsa.h> and OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. More could probably be said about PSS, but this is a start...
* Complete the CBB conversion and cleanup of send_client_key_exchange().jsing2016-12-131-42/+12
| | | | ok doug@
* Convert ssl3_send_client_kex_gost() to CBB.jsing2016-12-131-17/+19
| | | | ok doug@
* tweak SEE ALSO; in particular,schwarze2016-12-139-36/+35
| | | | make sure that all PKCS7 pages point to PKCS7_new(3)
* Write PKCS7_new(3) manual page from scratch. All the functions areschwarze2016-12-132-1/+247
| | | | | public: listed in <openssl/pkcs7.h> and OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file.
* Convert ssl3_send_client_kex_ecdhe() to CBB. Also check the return value ofjsing2016-12-131-34/+35
| | | | | | the EC_POINT_point2oct() calls. Feedback from and ok doug@
* typo fix; ok schwarzejmc2016-12-131-3/+3
|
* Write OCSP_CRLID_new(3) and OCSP_SERVICELOC_new(3) from scratch.schwarze2016-12-125-4/+196
| | | | | | | | | | | These two and OCSP_CRLID_free(3) and OCSP_SERVICELOC_free(3) are public by being in OpenSSL doc/man3/X509_dup.pod. OCSP_crlID_new(3) and OCSP_url_svcloc_new(3) are related and, even though completely undocumented in OpenSSL, obviously much more important. If you had told me a year ago that i would ever write such text, i would have called you crazy.
* various cleanup;jmc2016-12-124-25/+26
|
* Document OCSP_CERTID_new(3) listed in <openssl/ocsp.h> and in OpenSSLschwarze2016-12-121-16/+52
| | | | | | | | doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what the OCSP_CERTID object actually represents, along with the pertinent STANDARDS reference.
* Document OCSP_SINGLERESP_new(3), OCSP_SINGLERESP_free(3),schwarze2016-12-121-3/+90
| | | | | | | | | | OCSP_CERTSTATUS_new(3), OCSP_CERTSTATUS_free(3), OCSP_REVOKEDINFO_new(3), and OCSP_REVOKEDINFO_free(3), all in <openssl/ocsp.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what these objects actually represent, along with the pertinent STANDARDS reference.
* Document OCSP_RESPONSE_new(3), OCSP_RESPONSE_free(3),schwarze2016-12-121-36/+144
| | | | | | | | | | | | OCSP_RESPBYTES_new(3), OCSP_RESPBYTES_free(3), OCSP_BASICRESP_new(3), OCSP_BASICRESP_free(3), OCSP_RESPDATA_new(3), OCSP_RESPDATA_free(3), OCSP_RESPID_new(3), and OCSP_RESPID_free(3), all in <openssl/ocsp.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what these objects actually represent, along with the pertinent STANDARDS reference. Sort functions into a logical order and apply minor wording tweaks.
* Document OCSP_SIGNATURE_new(3), OCSP_SIGNATURE_free(3),schwarze2016-12-121-26/+95
| | | | | | | | | | | OCSP_REQINFO_new(3), OCSP_REQINFO_free(3), OCSP_ONEREQ_new(3), OCSP_ONEREQ_free(3), all in <openssl/ocsp.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what these objects actually represent, along with the pertinent STANDARDS reference. Minor wording tweaks.
* Document DSAparams_dup(3). It is in <openssl/dsa.h> and documentedschwarze2016-12-121-2/+35
| | | | | | | | | | by OpenSSL, so it is clearly public. OpenSSL documents it in doc/man3/X509_dup.pod, but with wrong header file, wrong prototype, and misleading description. While here, fix the wrong d2i_DSA_SIG(3) return type and document those RETURN VALUES that i could easily figure out.
* Document DIRECTORYSTRING_new(3), DIRECTORYSTRING_free(3),schwarze2016-12-121-6/+32
| | | | | | | | | | | DISPLAYTEXT_new(3), DISPLAYTEXT_free(3). These functions are clearly public because OpenSSL documents them and they are in the public <openssl/asn1.h> header. OpenSSL documents these four functions in doc/man3/X509_dup.pod [sic], but the information given is completely wrong: wrong header file, wrong prototypes, misleading description. Why, oh why do people even bother to write documentation if nothing of what they write is true?
* import openssl.cnf(5) and x509v3.cnf(5) from OpenSSL;schwarze2016-12-116-14/+1259
| | | | below OpenBSD quality standards, but better than nothing...
* Distribute the text of ec(3) to the individual EC manuals where it belongs.schwarze2016-12-1111-107/+70
| | | | | | Make sure EC_GROUP_new(3) points to all EC manuals and all EC manuals point back to EC_GROUP_new(3), and add some other useful links as well. Change all links to ec(3) to point to EC_GROUP_new(3) instead.
* Merge all of rsa(3) into RSA_new(3).schwarze2016-12-113-93/+86
| | | | | In this case, keep the text about individual struct fields because it contains some actual information.
* Change all references to rsa(3) to point to RSA_new(3) instead.schwarze2016-12-1117-50/+51
| | | | Make sure all RSA pages point back to RSA_new(3).
* add missing section number to Xr;jmc2016-12-111-3/+3
|
* some fixes for the dsa.3 -> DSA_new.3 changes;jmc2016-12-113-9/+8
|
* Merge one sentence and the references from dsa(3) to DSA_new(3) andschwarze2016-12-103-80/+23
| | | | | | | discard the rest of the text. There is no value in documenting some of the fields of a structure and then going on to say that the structure is intended as opaque. Besides, i doubt that we want such strong marketing of ENGINE support.
* Change all references to dsa(3) to point to DSA_new(3).schwarze2016-12-1012-35/+33
| | | | Make sure all DSA pages point back to DSA_new(3).
* Merge one sentence and the references from dh(3) to DH_new(3) andschwarze2016-12-103-67/+12
| | | | | | | discard the rest of the text. There is no value in documenting some of the fields of a structure and then going on to say that the structure is intended as opaque. Besides, i doubt that we want such strong marketing of ENGINE support.
* Replace all references to dh(3) with DH_new(3).schwarze2016-12-1012-34/+30
| | | | Make sure that all DH pages point back to DH_new(3).
* Add Copyright and license; jmc@ noticed that i forgot this file.schwarze2016-12-101-30/+53
| | | | | | | | Correct the header: It's <openssl/ui_compat.h>, not <openssl/des_old.h>. Delete documentation of des_read_password(3) and des_read_2passwords(3) which no longer exist. Probably, the rest of this ought to be deleted as well...
* Add Copyright and license; jmc@ noticed that i missed this file.schwarze2016-12-101-1/+50
|
* Merge bn(3) into BN_new(3).schwarze2016-12-103-76/+41
| | | | | | | OpenSSL removed bn(3) without replacement, but the introductory text does seem helpful, and it is good for a sub-library to have a central page pointing to all other pages and pointed at from all other pages of the sub-library.
* replace all references to bn(3) with BN_new(3),schwarze2016-12-1024-70/+74
| | | | and make sure all BN*(3) pages point back to BN_new(3)
* Add Copyright and license; jmc@ noticed that i missed this file.schwarze2016-12-101-2/+50
| | | | | | I'm not merging documentation for X509_STORE_set_verify_func(3) from OpenSSL because their documentations does not appear to match the code we have, and i don't understand what the code does.
* Copyright and license; jmc@ noticed that is forgot this fileschwarze2016-12-101-2/+50
|
* Add Copyright and license.schwarze2016-12-101-1047/+149
| | | | | | | | | | | | | | Delete all the function prototypes. They are all available from their individual manual pages. Here, they were incomplete and nothing but a maintenance nightmare. Add several missing cross reference, such that this page now references all libssl manual pages. Delete a sentence that said nothing and correct a typo. Now all libssl manuals have proper Copyright notices and licenses, and i have merged all improvements from OpenSSL that i could find.
* Write an SSL_get_shared_ciphers(3) manual from scratch; another oneschwarze2016-12-102-1/+72
| | | | | | | | where BUGS is longer than DESCRIPTION. The function is listed in ssl(3) and <openssl/ssl.h>, so it's clearly public. The code looks slightly mysterious to me, so it would be welcome if somebody more familiar with TLS protocols could check factual accuracy.
* New manual pages SSL_get_certificate(3), SSL_get_state(3), andschwarze2016-12-105-4/+286
| | | | | SSL_num_renegotiations(3) written from scratch. These functions are listed in ssl(3) and <openssl/ssl.h>, so they are clearly public.
* Document SSL_version(3). It's listed in ssl(3) and <openssl/ssl.h>,schwarze2016-12-101-7/+20
| | | | so it's clearly a public interface.
* some Vt fixes;jmc2016-12-085-18/+18
|
* minor cleanup;jmc2016-12-085-24/+20
|
* various cleanup;jmc2016-12-0812-61/+58
|
* Fix regressions introduce in the fix for CVE-2016-6559.millert2016-12-081-6/+5
| | | | From FreeBSD (glebius)
* Write SSL_renegotiate(3) manual from scratch; this function is listedschwarze2016-12-072-1/+58
| | | | | | | in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. More could probably be said, the code looks somewhat mysterious to me, but i think this stub is already better than nothing.
* add missing .Nm SSL_peek in the NAME sectionschwarze2016-12-071-3/+4
|
* Write SSL_copy_session_id(3) manual from scratch. This function isschwarze2016-12-072-1/+78
| | | | | | | listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. We might wish to merge the improved code from OpenSSL 1.1.0, but that's major bump, so i'm documenting the BUGS for now.
* Write new SSL_dup(3) manual from scratch. This function is listedschwarze2016-12-072-1/+61
| | | | in ssl(3) and <openssl/ssl.h>, so it is clearly public.
* New SSL_dup_CA_list(3) manual written from scratch.schwarze2016-12-072-1/+53
| | | | Mentioned in ssl(3) and <openssl/ssl.h>, so it is public.
* Add documentation for SSL_add_file_cert_subjects_to_stack(3) andschwarze2016-12-071-25/+103
| | | | | | | | | | | | | | | SSL_add_dir_cert_subjects_to_stack(3), written from scratch. Both functions are listed in ssl(3) and <openssl/ssl.h> and recommended for the use by browsers in source code comments, so they are clearly public interfaces. Mention deduplication. Purge some duplicate text and improve some wording while here. Two additional cross references instead of the useless ssl(3). Add HISTORY, AUTHORS, and BUGS. It is depressing that BUGS (purely from code inspection) became longer than the DESCRIPTION.
* Convert ssl3_send_client_kex_dhe() to CBB.jsing2016-12-071-14/+23
| | | | ok doug@
* Ensure that we zero memory that contiansthe ASN.1 encoded session, sincejsing2016-12-071-26/+29
| | | | | | this contains the session master key. ok deraadt@ doug@
* Ensure that we zero memory used to hold the ASN.1 encoded session, sincejsing2016-12-071-1/+4
| | | | | | this contains the session master key. ok deraadt@ doug@
* Fix a typo, decrement rem, don't increment for single digit hex bytes.millert2016-12-071-2/+2
| | | | From Henri Kemppainen
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-25 00:19:37 +0000