summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Write new SSL_dup(3) manual from scratch. This function is listedschwarze2016-12-072-1/+61
| | | | in ssl(3) and <openssl/ssl.h>, so it is clearly public.
* New SSL_dup_CA_list(3) manual written from scratch.schwarze2016-12-072-1/+53
| | | | Mentioned in ssl(3) and <openssl/ssl.h>, so it is public.
* Add documentation for SSL_add_file_cert_subjects_to_stack(3) andschwarze2016-12-071-25/+103
| | | | | | | | | | | | | | | SSL_add_dir_cert_subjects_to_stack(3), written from scratch. Both functions are listed in ssl(3) and <openssl/ssl.h> and recommended for the use by browsers in source code comments, so they are clearly public interfaces. Mention deduplication. Purge some duplicate text and improve some wording while here. Two additional cross references instead of the useless ssl(3). Add HISTORY, AUTHORS, and BUGS. It is depressing that BUGS (purely from code inspection) became longer than the DESCRIPTION.
* Convert ssl3_send_client_kex_dhe() to CBB.jsing2016-12-071-14/+23
| | | | ok doug@
* Ensure that we zero memory that contiansthe ASN.1 encoded session, sincejsing2016-12-071-26/+29
| | | | | | this contains the session master key. ok deraadt@ doug@
* Ensure that we zero memory used to hold the ASN.1 encoded session, sincejsing2016-12-071-1/+4
| | | | | | this contains the session master key. ok deraadt@ doug@
* Fix a typo, decrement rem, don't increment for single digit hex bytes.millert2016-12-071-2/+2
| | | | From Henri Kemppainen
* An SSL_SESSION_print(3) manual written from scratch. It's clearlyschwarze2016-12-062-1/+68
| | | | | a public interface since it's listed both in ssl(3) and in <openssl/ssl.h>. Nothing to pilfer from OpenSSL in this case...
* s/SSL_CTX_need_tmp_rsa/SSL_CTX_need_tmp_RSA/schwarze2016-12-061-5/+5
| | | | | | | | | | | | | | because that's what <openssl/ssl.h> #defines. That's likely a typo in the header file because all the other functions are called *tmp_rsa*(). But it would be a bad idea to fix such a bug in interfaces that are only provided for backward compatibility in the first place, so i'm adjusting the manual to be bug-compatible with the code, for now. But, pretty please, for the next major bump, somebody go get Bob's flensing knife and excise this part of the interface. Like, export ciphers? Really?
* Copyright and license for the remaining manuals in this directoryschwarze2016-12-066-13/+296
|
* CVE-2016-6559: fix potential buffer overflow(s) in link_ntoa(3).millert2016-12-061-19/+35
| | | | | | | A specially crafted struct sockaddr_dl argument can trigger a stack overflow of a static buffer in libc. An attacker may be able to use this to write to arbitrary locations in the data segment. From FreeBSD (glebius); OK deraadt@ mestre@
* Add Copyright and license.schwarze2016-12-061-8/+52
| | | | | | Garbage collect empty RETURN VALUES section. Delete useless cross reference to ssl(3). Add cross reference to SSL_SESSION_new(3).
* New manual page SSL_SESSION_new(3) written from scratch.schwarze2016-12-062-1/+64
| | | | | | The function prototype is listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface, but OpenSSL has no documentation about it whatsoever.
* Copyright and licenseschwarze2016-12-061-2/+50
|
* Copyright and licenseschwarze2016-12-061-2/+53
|
* We don't support Certificate Transparency Extensions andschwarze2016-12-061-8/+2
| | | | | we don't define preprocessor constants for the related NIDs, so delete the subsection discussing them.
* Delete most references to crypto(3). That page isn't useful enoughschwarze2016-12-0614-42/+28
| | | | to be pointed to from random individual pages.
* make sure that all the BIO pages point back to the master page BIO_new(3)schwarze2016-12-0620-41/+75
|
* Add Copyright and license.schwarze2016-12-061-41/+107
| | | | | | | | | | | | | | Mention AES, Chacha20, ECDSA, OCSP, OPENSSL_config. Improve many cross references. Convert the table into some real text and polish some wording. Stop talking about SSL. Drop vague references to undocumented internals (objects, stack, txt_db). Delete verbiage that says nothing or is duplicate. Ultimately, the content of this page should be merged into OPENSSL_init_crypto(3), but we don't have that function yet, so the merge has to wait.
* tweak previous;jmc2016-12-061-6/+6
|
* Convert ssl3_send_client_kex_rsa() to CBB.jsing2016-12-061-14/+36
| | | | ok doug@
* Now that ssl3_send_{client,server}_certificate() are using the commonjsing2016-12-064-176/+6
| | | | handshake functions, we can remove more copied code from DTLS.
* Convert certificate handshake message generation to CBB, with some cleanjsing2016-12-065-64/+168
| | | | | | | | | | up and restructure. This also adds CBB based variants of the ssl3_handshake_msg_{start,finish} functions - for the time being these use a CBB to build the messages, then copy back into the init_buf. ok doug@
* We don't want section 3 manual pages with names that do not correspondschwarze2016-12-064-154/+108
| | | | | | | | | to functions, so delete the BIO(3) manual page and merge its content into BIO_new(3) and BIO_push(3). Sort the content of BIO_new(3) into a logical order and improve the wording in various ways. Add the required cross references to BIO_push(3).
* replace all references to BIO(3) with references to BIO_new(3)schwarze2016-12-0616-48/+48
|
* Add Copyright and license.schwarze2016-12-051-3/+91
| | | | | | Merge documentation of d2i_X509_AUX(3) and i2d_X509_AUX(3) from OpenSSL. Correct the prototype of d2i_X509(3), from OpenSSL. Merge warnings against "reuse" functionality from OpenSSL.
* Add Copyright and license.schwarze2016-12-051-7/+54
| | | | Update a cross reference, from OpenSSL.
* Add Copyright and license.schwarze2016-12-052-4/+181
| | | | | Merge documentation of some additional {d2i,i2d}_{D,R}SA_PUBKEY_{bio,fp}(3) functions from OpenSSL.
* Copyright and licenseschwarze2016-12-059-18/+454
|
* import d2i_PrivateKey(3) from OpenSSLschwarze2016-12-052-1/+157
|
* tweak previous;jmc2016-12-052-5/+6
|
* Add Copyright and license.schwarze2016-12-051-2/+50
| | | | Add one cross reference, from OpenSSL.
* Copyright and locenseschwarze2016-12-051-2/+50
|
* Add Copyright and license.schwarze2016-12-051-5/+69
| | | | Merge documentation of X509_up_ref(3) from OpenSSL.
* delete two cross references to functions we don't haveschwarze2016-12-051-4/+2
|
* import the relevant parts of six more X509 manuals from OpenSSLschwarze2016-12-057-1/+1173
|
* various cleanup;jmc2016-12-058-41/+35
|
* import the relevant parts of X509_STORE_get0_param(3) from OpenSSL, butschwarze2016-12-052-1/+76
| | | | since we don't have that function, call the page X509_STORE_set1_param(3)
* import three X509_check_*(3) manuals from OpenSSLschwarze2016-12-054-1/+435
|
* Copyright and licenseschwarze2016-12-052-5/+101
|
* Add Copyright and license.schwarze2016-12-051-2/+55
| | | | Mention that X509_STORE_CTX_free(3) accepts NULL.
* Copyright and license.schwarze2016-12-051-4/+52
| | | | | Never include <openssl/x509_vfy.h> directly; from OpenSSL. Merge a typo fix from OpenSSL.
* import X509_PUBKEY_new(3) from OpenSSLschwarze2016-12-052-1/+275
|
* Add Copyright and license.schwarze2016-12-051-6/+57
| | | | Better explain the last argument of X509_NAME_oneline(3), from OpenSSL.
* Add Copyright and license.schwarze2016-12-051-4/+72
| | | | | More explanations about X509_NAME_get_index_by_NID(3) from OpenSSL. Merge a typo fix in EXAMPLES from OpenSSL.
* Add Copyright and license.schwarze2016-12-051-8/+57
| | | | Merge correction of buggy EXAMPLES from OpenSSL.
* Copyright and licenseschwarze2016-12-051-2/+50
|
* import five newish X509 pages from OpenSSLschwarze2016-12-046-1/+1181
|
* Update regress test to handle change to ssl_cipher_list_to_bytes().jsing2016-12-041-10/+11
|
* Convert ssl_cipher_list_to_bytes() to CBB, changing the function to returnjsing2016-12-044-32/+53
| | | | | | | the number of bytes written via an explicit *outlen argument and retaining the return value to indicate success or failure. ok doug@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-28 15:14:29 +0000