summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* import openssl.cnf(5) and x509v3.cnf(5) from OpenSSL;schwarze2016-12-116-14/+1259
| | | | below OpenBSD quality standards, but better than nothing...
* Distribute the text of ec(3) to the individual EC manuals where it belongs.schwarze2016-12-1111-107/+70
| | | | | | Make sure EC_GROUP_new(3) points to all EC manuals and all EC manuals point back to EC_GROUP_new(3), and add some other useful links as well. Change all links to ec(3) to point to EC_GROUP_new(3) instead.
* Merge all of rsa(3) into RSA_new(3).schwarze2016-12-113-93/+86
| | | | | In this case, keep the text about individual struct fields because it contains some actual information.
* Change all references to rsa(3) to point to RSA_new(3) instead.schwarze2016-12-1117-50/+51
| | | | Make sure all RSA pages point back to RSA_new(3).
* add missing section number to Xr;jmc2016-12-111-3/+3
|
* some fixes for the dsa.3 -> DSA_new.3 changes;jmc2016-12-113-9/+8
|
* Merge one sentence and the references from dsa(3) to DSA_new(3) andschwarze2016-12-103-80/+23
| | | | | | | discard the rest of the text. There is no value in documenting some of the fields of a structure and then going on to say that the structure is intended as opaque. Besides, i doubt that we want such strong marketing of ENGINE support.
* Change all references to dsa(3) to point to DSA_new(3).schwarze2016-12-1012-35/+33
| | | | Make sure all DSA pages point back to DSA_new(3).
* Merge one sentence and the references from dh(3) to DH_new(3) andschwarze2016-12-103-67/+12
| | | | | | | discard the rest of the text. There is no value in documenting some of the fields of a structure and then going on to say that the structure is intended as opaque. Besides, i doubt that we want such strong marketing of ENGINE support.
* Replace all references to dh(3) with DH_new(3).schwarze2016-12-1012-34/+30
| | | | Make sure that all DH pages point back to DH_new(3).
* Add Copyright and license; jmc@ noticed that i forgot this file.schwarze2016-12-101-30/+53
| | | | | | | | Correct the header: It's <openssl/ui_compat.h>, not <openssl/des_old.h>. Delete documentation of des_read_password(3) and des_read_2passwords(3) which no longer exist. Probably, the rest of this ought to be deleted as well...
* Add Copyright and license; jmc@ noticed that i missed this file.schwarze2016-12-101-1/+50
|
* Merge bn(3) into BN_new(3).schwarze2016-12-103-76/+41
| | | | | | | OpenSSL removed bn(3) without replacement, but the introductory text does seem helpful, and it is good for a sub-library to have a central page pointing to all other pages and pointed at from all other pages of the sub-library.
* replace all references to bn(3) with BN_new(3),schwarze2016-12-1024-70/+74
| | | | and make sure all BN*(3) pages point back to BN_new(3)
* Add Copyright and license; jmc@ noticed that i missed this file.schwarze2016-12-101-2/+50
| | | | | | I'm not merging documentation for X509_STORE_set_verify_func(3) from OpenSSL because their documentations does not appear to match the code we have, and i don't understand what the code does.
* Copyright and license; jmc@ noticed that is forgot this fileschwarze2016-12-101-2/+50
|
* Add Copyright and license.schwarze2016-12-101-1047/+149
| | | | | | | | | | | | | | Delete all the function prototypes. They are all available from their individual manual pages. Here, they were incomplete and nothing but a maintenance nightmare. Add several missing cross reference, such that this page now references all libssl manual pages. Delete a sentence that said nothing and correct a typo. Now all libssl manuals have proper Copyright notices and licenses, and i have merged all improvements from OpenSSL that i could find.
* Write an SSL_get_shared_ciphers(3) manual from scratch; another oneschwarze2016-12-102-1/+72
| | | | | | | | where BUGS is longer than DESCRIPTION. The function is listed in ssl(3) and <openssl/ssl.h>, so it's clearly public. The code looks slightly mysterious to me, so it would be welcome if somebody more familiar with TLS protocols could check factual accuracy.
* New manual pages SSL_get_certificate(3), SSL_get_state(3), andschwarze2016-12-105-4/+286
| | | | | SSL_num_renegotiations(3) written from scratch. These functions are listed in ssl(3) and <openssl/ssl.h>, so they are clearly public.
* Document SSL_version(3). It's listed in ssl(3) and <openssl/ssl.h>,schwarze2016-12-101-7/+20
| | | | so it's clearly a public interface.
* some Vt fixes;jmc2016-12-085-18/+18
|
* minor cleanup;jmc2016-12-085-24/+20
|
* various cleanup;jmc2016-12-0812-61/+58
|
* Fix regressions introduce in the fix for CVE-2016-6559.millert2016-12-081-6/+5
| | | | From FreeBSD (glebius)
* Write SSL_renegotiate(3) manual from scratch; this function is listedschwarze2016-12-072-1/+58
| | | | | | | in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. More could probably be said, the code looks somewhat mysterious to me, but i think this stub is already better than nothing.
* add missing .Nm SSL_peek in the NAME sectionschwarze2016-12-071-3/+4
|
* Write SSL_copy_session_id(3) manual from scratch. This function isschwarze2016-12-072-1/+78
| | | | | | | listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. We might wish to merge the improved code from OpenSSL 1.1.0, but that's major bump, so i'm documenting the BUGS for now.
* Write new SSL_dup(3) manual from scratch. This function is listedschwarze2016-12-072-1/+61
| | | | in ssl(3) and <openssl/ssl.h>, so it is clearly public.
* New SSL_dup_CA_list(3) manual written from scratch.schwarze2016-12-072-1/+53
| | | | Mentioned in ssl(3) and <openssl/ssl.h>, so it is public.
* Add documentation for SSL_add_file_cert_subjects_to_stack(3) andschwarze2016-12-071-25/+103
| | | | | | | | | | | | | | | SSL_add_dir_cert_subjects_to_stack(3), written from scratch. Both functions are listed in ssl(3) and <openssl/ssl.h> and recommended for the use by browsers in source code comments, so they are clearly public interfaces. Mention deduplication. Purge some duplicate text and improve some wording while here. Two additional cross references instead of the useless ssl(3). Add HISTORY, AUTHORS, and BUGS. It is depressing that BUGS (purely from code inspection) became longer than the DESCRIPTION.
* Convert ssl3_send_client_kex_dhe() to CBB.jsing2016-12-071-14/+23
| | | | ok doug@
* Ensure that we zero memory that contiansthe ASN.1 encoded session, sincejsing2016-12-071-26/+29
| | | | | | this contains the session master key. ok deraadt@ doug@
* Ensure that we zero memory used to hold the ASN.1 encoded session, sincejsing2016-12-071-1/+4
| | | | | | this contains the session master key. ok deraadt@ doug@
* Fix a typo, decrement rem, don't increment for single digit hex bytes.millert2016-12-071-2/+2
| | | | From Henri Kemppainen
* An SSL_SESSION_print(3) manual written from scratch. It's clearlyschwarze2016-12-062-1/+68
| | | | | a public interface since it's listed both in ssl(3) and in <openssl/ssl.h>. Nothing to pilfer from OpenSSL in this case...
* s/SSL_CTX_need_tmp_rsa/SSL_CTX_need_tmp_RSA/schwarze2016-12-061-5/+5
| | | | | | | | | | | | | | because that's what <openssl/ssl.h> #defines. That's likely a typo in the header file because all the other functions are called *tmp_rsa*(). But it would be a bad idea to fix such a bug in interfaces that are only provided for backward compatibility in the first place, so i'm adjusting the manual to be bug-compatible with the code, for now. But, pretty please, for the next major bump, somebody go get Bob's flensing knife and excise this part of the interface. Like, export ciphers? Really?
* Copyright and license for the remaining manuals in this directoryschwarze2016-12-066-13/+296
|
* CVE-2016-6559: fix potential buffer overflow(s) in link_ntoa(3).millert2016-12-061-19/+35
| | | | | | | A specially crafted struct sockaddr_dl argument can trigger a stack overflow of a static buffer in libc. An attacker may be able to use this to write to arbitrary locations in the data segment. From FreeBSD (glebius); OK deraadt@ mestre@
* Add Copyright and license.schwarze2016-12-061-8/+52
| | | | | | Garbage collect empty RETURN VALUES section. Delete useless cross reference to ssl(3). Add cross reference to SSL_SESSION_new(3).
* New manual page SSL_SESSION_new(3) written from scratch.schwarze2016-12-062-1/+64
| | | | | | The function prototype is listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface, but OpenSSL has no documentation about it whatsoever.
* Copyright and licenseschwarze2016-12-061-2/+50
|
* Copyright and licenseschwarze2016-12-061-2/+53
|
* We don't support Certificate Transparency Extensions andschwarze2016-12-061-8/+2
| | | | | we don't define preprocessor constants for the related NIDs, so delete the subsection discussing them.
* Delete most references to crypto(3). That page isn't useful enoughschwarze2016-12-0614-42/+28
| | | | to be pointed to from random individual pages.
* make sure that all the BIO pages point back to the master page BIO_new(3)schwarze2016-12-0620-41/+75
|
* Add Copyright and license.schwarze2016-12-061-41/+107
| | | | | | | | | | | | | | Mention AES, Chacha20, ECDSA, OCSP, OPENSSL_config. Improve many cross references. Convert the table into some real text and polish some wording. Stop talking about SSL. Drop vague references to undocumented internals (objects, stack, txt_db). Delete verbiage that says nothing or is duplicate. Ultimately, the content of this page should be merged into OPENSSL_init_crypto(3), but we don't have that function yet, so the merge has to wait.
* tweak previous;jmc2016-12-061-6/+6
|
* Convert ssl3_send_client_kex_rsa() to CBB.jsing2016-12-061-14/+36
| | | | ok doug@
* Now that ssl3_send_{client,server}_certificate() are using the commonjsing2016-12-064-176/+6
| | | | handshake functions, we can remove more copied code from DTLS.
* Convert certificate handshake message generation to CBB, with some cleanjsing2016-12-065-64/+168
| | | | | | | | | | up and restructure. This also adds CBB based variants of the ssl3_handshake_msg_{start,finish} functions - for the time being these use a CBB to build the messages, then copy back into the init_buf. ok doug@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-25 00:23:08 +0000