summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Add ISRG Root X1, the letsencrypt CA root. This is now included in its ownsthen2016-09-041-1/+55
| | | | | right in Mozilla's CA list, rather than relying on IdenTrust cross-signing. ok beck@ jca@
* only regen pkg-config files when required; ok jaspernatano2016-09-042-8/+10
|
* test wcrtomb(3)schwarze2016-09-042-0/+93
|
* Options that take a time argument....take an argumentguenther2016-09-041-2/+3
| | | | diff from Kinichiro Inoguchi (kinichiro.inoguchi (at) gmail.com)
* test mbrtowc(3) in conjunction with mbsinit(3)schwarze2016-09-032-0/+93
|
* squash some possibly-used-uninitialized warningsbcook2016-09-031-3/+3
|
* switch to a constant-time gather procedure for amd64 mont5 asmbcook2016-09-031-199/+314
| | | | | | | from OpenSSL commit 7f98aa7403a1244cf17d1aa489f5bb0f39bae431 CVE-2016-0702 ok beck@
* import new BN tests from OpenSSLbcook2016-09-032-167/+434
| | | | | | | New tests that various BIGNUM methods behave correctly on zero/even inputs. from OpenSSL ok beck@
* add constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF.bcook2016-09-031-16/+55
| | | | | | | | | | Patch based on OpenSSL commit d7a854c055ff22fb7da80c3b0e7cb08d248591d0 "Performance penalty varies from platform to platform, and even key length. For rsa2048 sign it was observed to reach almost 10%." CVE-2016-0702 ok beck@
* BN_mod_exp_mont_consttime: check for zero modulus.bcook2016-09-031-9/+33
| | | | | | | Don't dereference d when top is zero. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03 ok jsing@
* remove unneeded reach-around includebcook2016-09-031-2/+2
|
* add iOS support for getentropybcook2016-09-031-1/+12
| | | | from Jacob Berkman, ok beck@
* deprecate EVP_EncryptFinal(), EVP_DecryptFinal() and EVP_CipherFinal()bcook2016-09-032-7/+23
| | | | | | | | | | This switches EVP_CipherFinal() to work as EVP_EncryptFinal() and EVP_DecryptFinal() do, always clearing the cipher context on completion. Indicate that, since it is not possible to tell whether this function will clear the context (the API has changed over time in OpenSSL), it is better to use the _ex() variants and explicitly clear instead. ok beck@
* BN_mod_exp_mont_consttime: check for zero modulus.bcook2016-09-031-4/+5
| | | | | | | Don't dereference |d| when |top| is zero. Also test that various BIGNUM methods behave correctly on zero/even inputs. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03
* Avoid undefined-behavior right-shifting by a word-size # of bits.bcook2016-09-031-3/+2
| | | | Found with STACK, originally from OpenSSL, ok @beck
* shorten s_time; help/ok bcookjmc2016-09-031-91/+22
|
* Make tree build againbeck2016-09-036-12/+482
|
* remove unused variablebeck2016-09-031-2/+1
|
* Fix some very unnecessary convoultion.beck2016-09-031-16/+6
| | | | ok krw@
* crank minor for API addiiton of x509_email, etc. functionsbeck2016-09-032-2/+2
|
* Bring in functions used by stunnel and exim from BoringSSL - this bringsbeck2016-09-032-2/+452
| | | | | | in X509_check_host, X509_check_email, X509_check_ip, and X509_check_ip_asc, with some cleanup on the way in by myself and jsing@ ok bcook@
* Remove the libcrypto/crypto directorybeck2016-09-0341-6330/+0
|
* Remove the libssl/ssl directorybeck2016-09-032-54/+0
|
* Remove the libssl/src directorybeck2016-09-031190-386114/+0
|
* Print SKIPPED if a regress test cannot be executed for some reason.bluhm2016-09-021-2/+3
| | | | This allows to identify such tests by looking at their output.
* shorten s_server;jmc2016-09-021-134/+72
|
* Fix build of regress after source movesbeck2016-09-021-2/+2
|
* Make this regress build againbeck2016-09-022-4/+4
|
* Less lock contention by using more pools for mult-threaded programs.otto2016-09-012-94/+190
| | | | tested by many (thanks!) ok tedu, guenther@
* black magic for sparc page size can gotedu2016-09-011-4/+2
|
* shorten s_client;jmc2016-09-011-142/+50
|
* Crank minor due to API additionbeck2016-08-311-1/+1
|
* We don't need any VMS access tricks.deraadt2016-08-311-27/+4
| | | | ok beck tedu
* Add OPTION_ARG_TIME for parsing a (64 bit if needed) time_tderaadt2016-08-303-4/+15
| | | | prodding & ok jsing
* buf[][] with strange use all over the place is ridiculous, especiallyderaadt2016-08-301-15/+14
| | | | | if buf[1] is never used. ok guenther beck
* Fix 32-bit time handling, using time_t and make it work on systemsderaadt2016-08-302-24/+25
| | | | | where that is long long. ok beck guenther
* shorten rsautl;jmc2016-08-301-152/+13
|
* shorten the rsa text; of note, i've also reduced the descriptionjmc2016-08-281-278/+44
| | | | | for -inform/-outform/-text and removed the oft-repeated header/footer blurb;
* Don't call lstat() before readlink() just to see if it's a symlink,guenther2016-08-281-14/+17
| | | | | | as readlink() will tell you that more cheaply. ok millert@
* shorten the req text;jmc2016-08-271-452/+189
|
* Enable ALPN regress now that it passes.jsing2016-08-271-4/+2
|
* Be more strict when parsing TLS extensions.jsing2016-08-272-34/+74
| | | | | | Based on a diff from Kinichiro Inoguchi. ok beck@
* Pull in <stdio.h> for NULLguenther2016-08-271-1/+2
| | | | ok deraadt@
* Repeated occurances of the idiom buf[5][BUFSIZ] -- ridiculous. Give eachderaadt2016-08-261-86/+87
| | | | | | buf a special name, recognize that most are PATH_MAX, and remove a few that are not needed at all. ok jsing beck
* Pull in <time.h> for clock_gettime()guenther2016-08-261-1/+2
| | | | ok deraadt@
* shorten the pkeyutl text;jmc2016-08-251-83/+40
| | | | help/ok guenther
* shorten the pkeyparam text;jmc2016-08-241-23/+8
|
* shorten the pkey text;jmc2016-08-241-73/+25
|
* shorten pkcs12;jmc2016-08-231-187/+42
|
* Various clean up and reorganisation of the connection info handling code.jsing2016-08-223-69/+97
| | | | | | | | | In particular, rename tls_free_conninfo() to tls_conninfo_free() and make it a real free function. Rename tls_get_conninfo() to tls_conninfo_populate() and have it allocate the struct tls_conninfo (after freeing any existing one). ok beck@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-27 20:14:12 +0000