summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* fix a few bugs observed on http://www.viva64.com/en/b/0250/tedu2014-04-167-7/+5
| | | | ok krw miod
* Thanks to the knobs in http://tools.ietf.org/html/rfc5746, we have a knobbeck2014-04-164-14/+6
| | | | | | to say "allow this connection to negotiate insecurely". de-fang the code that respects this option to ignore it. ok miod@
* disentangle SRP code from TLStedu2014-04-1623-1804/+2
|
* whack the ifdef pinata:tedu2014-04-162-520/+10
| | | | | | | | | | | | | | | | | | OPENSSL_SYSNAME_VXWORKS OPENSSL_SYS_VMS OPENSSL_SYS_MSDOS OPENSSL_UNISTD OPENSSL_SYS_WIN16 WIN_CONSOLE_BUG OPENSSL_SYS_WINCE SGTTY OPENSSL_SYS_MACINTOSH_CLASSIC MAC_OS_GUSI_SOURCE OPENSSL_SYS_NETWARE OPENSSL_SYS_SUNOS __DJGPP__ OPENSSL_SYS_BEOS OPENSSL_SYS_WIN32
* SSLv3_client_method() doesn't support TLSv1.*; use SSLv23_client_method()guenther2014-04-162-4/+4
| | | | | | | | the for anything where version negotiation would be useful. Also, constipate a couple formatting strings to make compilers and linkers happier. ok tedu@
* Zero-pad usec format to handle values less than 100,000 correctlyguenther2014-04-162-2/+2
| | | | ok matthew@ tedu@
* Initial KNF.jsing2014-04-165-1143/+1006
|
* Initial KNF.jsing2014-04-164-1035/+825
|
* Mandatory Surgeon Guenther's Warning: This code could not possibly betedu2014-04-162-48/+48
| | | | | | | correct because it doesn't zerofill the front of usecs, but that's the way I found it. a more thorough emulation of the old code, but with fewer whacky snprintf pointer arithmetic antics. ok beck guenther
* Initial KNF.jsing2014-04-162-1903/+1662
|
* More KNF.jsing2014-04-162-100/+119
|
* First pass for KNF.jsing2014-04-162-1294/+1235
|
* revert. the full horror has only now revealed itself.tedu2014-04-162-52/+42
|
* replace some bio_snprintf crazy with regular snprintf.tedu2014-04-162-42/+52
| | | | | beck had a diff to convert to strftime, but it's easier to verify this is functionally the same. ok beck.
* Kill the bogus "send an SSLv3/TLS hello in SSLv2 format" crap fromguenther2014-04-1614-650/+346
| | | | | | | | | the SSLv23_* client code. The server continues to accept it. It also kills the bits for SSL2 SESSIONs; even when the server gets an SSLv2-style compat handshake, the session that it creates has the correct version internally. ok tedu@ beck@
* More KNF.jsing2014-04-1620-208/+218
|
* Make this byzantine horror a shell of it's former self by stubbing thebeck2014-04-162-1320/+34
| | | | | | | functions. The ability to set the debug mem functions died with mem.c, but some of the rest of this is still exposed API so we can't delete it.. yet... ok tedu@
* Some software expects RAND_status() to return 1 for success, so alwaysreyk2014-04-162-4/+20
| | | | | | | return 1 in the arc4random backend because there is no possible error condition. Unbreaks lynx, git and friends. ok miod@ dcoppa@
* Clean up non-fatal error handling - we know which error numbers we havejsing2014-04-166-210/+0
| | | | | | defined. ok miod@ beck@
* unbreak install; /usr/share/man/man3/EVP_PKEY_print_private.3 should link tosthen2014-04-161-2/+2
| | | | /usr/share/man/man3/EVP_PKEY_print_public.3 not itself, from deraadt
* Sync the list of man pages for libcrypto, explicity rename conflictingmpi2014-04-1625-179/+1662
| | | | | | | pages instead of doing it in the Makefiles and move a libssl page where it belongs. ok miod@
* Remove pointless man pages that were not installed.mpi2014-04-164-383/+0
| | | | ok miod@
* adapt to test file movesjsg2014-04-161-63/+50
| | | | md2test and rsatest targets removed as the files have been removed
* adapt to the less old des apijsg2014-04-161-49/+49
|
* Remove _CRAY references. Note that this pleads for the use of <stdint.h>miod2014-04-1612-80/+10
| | | | | fixed-width types instead of choosing int or long depending upon what we think the architecture support.
* Remove DES_read_password and DES_read_2passwords which are `modern' flavoursmiod2014-04-165-290/+1
| | | | | | of des_old.h routines, acting as wrappers about the OpenSSL UI API. Nothing should use these functions directly. Riding the recent libcrypto major bump (in a `des' car).
* Your operating system memory allocation functions are your friend. If theybeck2014-04-165-884/+400
| | | | | | | | are not please fix your operating system. Replace mem.c with an API-compatible wrapper that just calls the system functions and does not allow a one word modification of a variable in a running shared library to turn on memory debug functions that expose things that should not be seen. ok tedu@
* dead filetedu2014-04-162-1042/+0
|
* API compat fix. RAND_load_file can never fail now. discovered and ok beck.tedu2014-04-162-6/+14
|
* missed vms commenttedu2014-04-161-4/+0
|
* first round of unifdef hammeringtedu2014-04-167-188/+2
|
* Remove non-posix support. Why is OPENSSL_isservice even here?tedu2014-04-162-458/+0
| | | | | Is this a crypto library or a generic platform abstraction library? "A hack to make Visual C++ 5.0 work correctly" ... time to upgrade.
* spray the apps directory with anti-VMS napalm.tedu2014-04-1646-449/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | so that its lovecraftian horror is not forever lost, i reproduce below a comment from the deleted code. /* 2011-03-22 SMS. * If we have 32-bit pointers everywhere, then we're safe, and * we bypass this mess, as on non-VMS systems. (See ARGV, * above.) * Problem 1: Compaq/HP C before V7.3 always used 32-bit * pointers for argv[]. * Fix 1: For a 32-bit argv[], when we're using 64-bit pointers * everywhere else, we always allocate and use a 64-bit * duplicate of argv[]. * Problem 2: Compaq/HP C V7.3 (Alpha, IA64) before ECO1 failed * to NULL-terminate a 64-bit argv[]. (As this was written, the * compiler ECO was available only on IA64.) * Fix 2: Unless advised not to (VMS_TRUST_ARGV), we test a * 64-bit argv[argc] for NULL, and, if necessary, use a * (properly) NULL-terminated (64-bit) duplicate of argv[]. * The same code is used in either case to duplicate argv[]. * Some of these decisions could be handled in preprocessing, * but the code tends to get even uglier, and the penalty for * deciding at compile- or run-time is tiny. */
* strncpy(d, s, strlen(s)) is a special kind of stupid. even when it's right,tedu2014-04-164-24/+34
| | | | | it looks wrong. replace with auditable code and eliminate many strlen calls to improve efficiency. (wait, did somebody say FASTER?) ok beck
* Remove disabled code that wouldn't work now that cleanse_ptr wasmatthew2014-04-162-70/+36
| | | | | | | | removed. Also, fix some nearby KNF nits that were bothering me. ok beck
* KNFmcbride2014-04-162-722/+1238
|
* you do not want to do the things this program doestedu2014-04-162-1864/+0
|
* strip this to the bonetedu2014-04-152-134/+6
|
* Three wrappers in this file: OPENSSL_strncasecmp, OPENSSL_strcasecmp,deraadt2014-04-152-186/+8
| | | | | | | | | | | | and OPENSSL_memcmp. All modern systems have strncasecmp. No need to rewrite it. Same with memcmp, call the system one! It is more likely to be hot in the icache, and is specifically optimized for the platform. I thought these OpenSSL people cared about performance? ok tedu
* use explicit_bzero instead of a bizarro "no compiler could ever be smarttedu2014-04-152-140/+6
| | | | enough to optimize this" monstrosity.
* remove BIO_snprintf usage - convert to snprintf.beck2014-04-151-7/+8
| | | | | | Interestingly this fixes a bug, as the code appears to have been assuming that BIO_snprintf returns what snprintf does when it does not. ok tedu@
* remove md2, jpake, and seed clutter.tedu2014-04-1532-4780/+0
|
* don't even pretend to build md2, seed, or jpaketedu2014-04-151-17/+3
| | | | ok beck deraadt
* o_dir.c had a very funny odor. all users of this now use standard functions.beck2014-04-155-250/+0
| | | | | consign it to the Attic. ok deraadt@
* Remove wraparounds for operating systems which lack issetugid().deraadt2014-04-152-162/+30
| | | | | | | I will note that some were missing, looking at you Solaris!!! Anyone home? Using my own copyright on the file now, since this is a rewrite of a trivial wrapper around a system call I invented. ok beck
* All the other old Makefiles are gone, so also remove unused enginesreyk2014-04-151-135/+0
| | | | | Makefile. The directory is empty and will silently disappear in the Attic (but there are more engines in another directory).
* remove ssl2 support even more completely.tedu2014-04-1525-4509/+13
| | | | | | in the process, always include ssl3 and tls1, we don't need config options for them. when the time comes to expire ssl3, it will be with an ax. checked by miod
* the VMS code is legiontedu2014-04-151-395/+0
|
* $infile="/home/eay/ssl/SSLeay/MINFO";tedu2014-04-1524-3708/+0
| | | | I wonder when these scripts were last used...
* we don't use this makefiletedu2014-04-151-106/+0
|
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-27 18:52:27 +0000