aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Add the Cammelia cipher to libcrypto.Brent Cook2014-11-171-1/+5
| | | | | | | | | | | | | | | | | | | | from miod@: There used to be a strong reluctance to provide this cipher in LibreSSL in the past, because the licence terms under which Cammelia was released by NTT were free-but-not-in-the-corners, by restricting the right to modify the source code, as well retaining the right to enforce their patents against anyone in the future. However, as stated in http://www.ntt.co.jp/news/news06e/0604/060413a.html , NTT changed its mind and made this code truly free. We only wish there had been more visibility of this, for we could have had enabled Cammelia earlier (-: Licence change noticed by deraadt@. General agreement from the usual LibreSSL suspects. Crank libcrypto.so minor version due to the added symbols.
* Quiet clang warnings about unused arguments in general.Brent Cook2014-11-031-1/+13
| | | | | Check if we are using clang, rather than simply if we are on OS X. Note: recent LLVM releases do not seem to need this anyway.
* make 'autoreconf' work from dist tarballBrent Cook2014-11-032-1/+3
| | | | We need to include VERSION for it to run.
* override native arc4random_buf on FreeBSDBrent Cook2014-11-035-4/+19
| | | | | | | | | | | | | | | | The FreeBSD-native arc4random_buf implementation falls back to weak sources of entropy if the sysctl fails. Remove these dangerous fallbacks by overriding locally. Unfortunately, pthread_atfork() is broken on FreeBSD (at least 9 and 10) if a program does not link to -lthr. Callbacks registered with pthread_atfork() simply fail silently. So, it is not always possible to detect a PID wraparound. I wish we could do better. This improves arc4random_buf's safety compared to the native FreeBSD implementation. Tested on FreeBSD 9 and 10. ok beck@ deraadt@
* override native arc4random_buf on OS XBrent Cook2014-11-031-0/+4
| | | | | | | | While the native OS X implementation is fork-safe, it does not seed safely, as of the latest released OS X libc sources, version 997.90.3. It only uses weak sources of entropy if accessing /dev/urandom fails. ok beck@ deraadt@
* update README to reflect current porting approachBrent Cook2014-11-031-10/+6
| | | | ok beck@ deraadt@
* Add an OpenSSL compatible ./config wrapperBrent Cook2014-10-311-0/+17
| | | | | | | | This allows sofware expecting OpenSSL's config script, to a limited extent, to continue building without changes. Thanks to technion for pointing this out and providing the initial patch.
* wrap arc4random headerBrent Cook2014-10-301-0/+4
| | | | ok @doug
* Improve and simplify function and header detection logic.Brent Cook2014-10-3010-112/+52
| | | | | | | | | Simplify autoconf checks by using AC_CHECK_FUNCS/HEADERS. Clarify some ambiguous dependencies around strnlen/strndup. Unconditionally enable pidwraptest for all arc4random implementations. Remove HAVE_VASPRINTF conditional, since asprintf requires vasprintf. ok @doug
* use the correct HOST_OS for the Windows buildBrent Cook2014-10-301-1/+1
| | | | ok doug@
* enable -lcrypto -lssl with all test programs directly.Brent Cook2014-10-302-2/+3
| | | | | | This removes the need to specify each one individually. ok doug@
* remove duplicate (and overlapping) .1 manpagesBrent Cook2014-10-261-16/+12
| | | | | | openssl.1 contains all of the information from the other application manpages, and is the only one packaged in OpenBSD. So, remove the other obsolete .1 manpages (and avoid overlapping system pages like passwd.1)
* set various glibc flags that also are useful with mingwBrent Cook2014-10-221-1/+2
| | | | for example, asprintf/vasprintf are unmasked with _GNU_SOURCE in mingw
* undef LIBRESSL_INTERNAL for the pidwrap test.Brent Cook2014-10-221-0/+1
|
* update string.h for include strings.h for HPUX environmentkinichiro2014-10-221-2/+2
|
* include a proper check for memmem when configuring unit testsBrent Cook2014-10-222-0/+7
| | | | This allows the proper compatibility header definition to be exposed.
* bump versionBrent Cook2014-10-221-1/+1
|
* update with 2.1.1 changesBrent Cook2014-10-151-0/+5
| | | | ok beck@
* LibreSSL portable README updateBrent Cook2014-10-151-18/+34
| | | | Add more info on how to build from source, where to download it from.
* add extended ChangeLog fileBrent Cook2014-10-142-1/+61
| | | | help people more easily find the code and changes
* update gitignore to see changelogBrent Cook2014-10-141-1/+2
|
* add missing commas from man linksBrent Cook2014-10-141-6/+6
|
* update man linksBrent Cook2014-10-141-0/+6
|
* don't fail to make dist on a clean repoBrent Cook2014-10-141-1/+1
|
* crank versionBrent Cook2014-10-141-1/+1
|
* update to new converted SSL manpagesBrent Cook2014-10-141-1/+10
|
* clear local manpage cache before generating a release tarballBrent Cook2014-09-261-0/+1
| | | | | Remove the possibility of having any bad or old manpages in releases while still being able to cache for quick development tarballs.
* update for upstream move of the openssl appBrent Cook2014-08-271-17/+15
|
* ensure compatibility with posix shellBrent Cook2014-08-181-1/+1
| | | | remove bash comparison, thanks kinichiro
* add --disable-asm flag for disabling inline asmBrent Cook2014-08-171-0/+4
| | | | | Surprisingly (or not), a lot of OpenSSL's inline assembly actually makes things slower with a relatively modern compiler (read, gcc >= 4.x).
* allow inline asmBrent Cook2014-08-162-2/+1
| | | | use default of -std=gnu99 for it to be recognized
* set _DEFAULT_SOURCE on linux hostsBrent Cook2014-08-161-1/+1
| | | | this is the replacement for _BSD_SOURCE on newer glibc's
* update stdio.h for including stdarg.hinoguchi2014-08-121-0/+1
| | | | | | | | | | | | | | it seems that including stdarg.h is needed for defining va_list environment is hpux 11.31(ia64) with gcc 4.7.1. without stdarg.h, I got compilation error like this. "error: 'va_list' undeclared (first use in this function)" I checked with gcc -E, then I noticed that __va_list is defined but va_list is not. "typedef __gnuc_va_list __va_list;" with including stdarg.h, va_list is defined. "typedef __gnuc_va_list va_list;"
* remove configure.am.tpl, pull in VERSION directlyBrent Cook2014-08-123-4/+1
| | | | from wouter@
* rebase on pull when updating the openbsd branchBrent Cook2014-08-081-1/+1
| | | | this avoids inadvertent local merges
* conditionally build strnlen if needed.Brent Cook2014-08-023-0/+9
| | | | | | it is only used by strndup prodded by Sortie@
* tie master libressl branch to openbsd masterBrent Cook2014-07-312-8/+8
| | | | Added OPENBSD_BRANCH to set what branch update.sh should checkout.
* Crank version on HEAD to 2.1.0 2.0 cointinues on OPENBSD_5_6 branchBob Beck2014-07-311-1/+1
|
* define MAP_ANON for systems with MAP_ANONYMOUSBrent Cook2014-07-301-3/+3
| | | | switch the sense of this check
* merge endian definitions between AIX/HP-UX/SolarisBrent Cook2014-07-301-7/+1
|
* update include/machine/endian.h for hpux portability.inoguchi2014-07-301-0/+3
| | | | ok bcook@
* harmonize asprintf with OpenSSHBrent Cook2014-07-304-111/+39
| | | | | | | | | * use the original name for the file from OpenSSH (remove duplicate version) * add va_copy/__va_copy checks to configure * incorporate proposed fixes to openssh version: + include more system headers directly for various definitions + limit the scope of va_copy/va_end to their affected vsnprintf calls + simplify error handling, removing a dead assignment
* include comment on windows servicesBrent Cook2014-07-291-0/+5
|
* add sys/mman.h shim to define MAP_ANON if neededBrent Cook2014-07-292-0/+15
| | | | | | thanks to kinichiro for pointing this out ok deraadt@ beck@
* stub win32 issetugid implementationBrent Cook2014-07-292-0/+24
| | | | ok deraadt@ beck@
* added dist.sh script - generates tarballBrent Cook2014-07-291-0/+6
| | | | ok deraadt@ beck@
* produce a error if platform has no arc4random hookBrent Cook2014-07-291-7/+8
| | | | ok deraadt@ beck@
* add asprintf / vasprintf from OpenSSH portableBrent Cook2014-07-295-0/+115
| | | | ok deraadt@ beck@
* Update endian.h for AIX/IRIXpgmassey2014-07-291-0/+8
| | | | | | Added AIX/IRIX compatibility for endian detection. ok bcook@ deraadt@ beck@
* Guard individual compatibility header prototypes.Brent Cook2014-07-284-55/+81
| | | | | | | | This is to avoid redefining prototypes from the libc headers. Also, simplify the autoconf function checks and remove some copy/paste errors checking for 'write'. ok wouter@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-16 13:33:56 +0000