summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-07-14Replace tabs by spaces after "#define". No functional changes, justVitaliy Makkoveev
prevent future diffs to be ugly. ok bluhm@
2022-07-14Time to bump versionClaudio Jeker
2022-07-14Suppress output of the deprecated -tls1 option in usage() and helpTheo Buehler
output. The option wasn't documented in the manpage. pointed out by jsing
2022-07-14Switch to using TLS_client_method()Theo Buehler
Apparently, TLSv1_client_method() is used for historical reasons. This behavior is no longer helpful if we want to know what ciphers a TLS connection could use. This could change again after further investigation of what the behavior should be... ok beck jsing
2022-07-14Only run the client connection test with supported ciphers. Avoids testTheo Buehler
breakage also noted by anton.
2022-07-14Document openssl ciphers -sTheo Buehler
ok beck jsing
2022-07-14Add -s option to openssl ciphersTheo Buehler
With this option, the command only shows the ciphers supported by the SSL method. ok beck jsing
2022-07-14syncTheo de Raadt
2022-07-13add .Xr links to SSL_CTX_set_security_level(3)Ingo Schwarze
2022-07-13add a few .Xr links to new manual pagesIngo Schwarze
2022-07-13In dsa.h rev. 1.34 (14 Jan 2022), tb@ provided DSA_bits(3).Ingo Schwarze
Document it from scratch. While here, merge a few details from the OpenSSL 1.1.1 branch, which is still under a free license, into the documentation of DSA_size(3).
2022-07-13In x509_vfy.h rev. 1.54, tb@ provided X509_VERIFY_PARAM_get_time(3)Ingo Schwarze
and X509_VERIFY_PARAM_set_auth_level(3). Document them. For the latter, i included a few sentences from the OpenSSL 1.1.1 branch, which is still under a free license.
2022-07-13link three new manual pages to the buildIngo Schwarze
2022-07-13Start documenting our new pet octopus, SSL_CTX_set_security_level(3).Ingo Schwarze
Or should we call it a centipede? Feedback and OK on a previous version from jsing@ and from our chief myriapodologist, tb@.
2022-07-13Cast int64_t to uint64_t before negating.Joel Sing
Avoid undefined behaviour/integer overflow by casting an int64_t to uint64_t before negating. Fixes oss-fuzz #49043 ok tb@
2022-07-13Write documentation for EVP_PKEY_check(3), EVP_PKEY_public_check(3),Ingo Schwarze
EVP_PKEY_param_check(3), and EVP_PKEY_security_bits(3) from scratch. Move the documentation of EVP_PKEY_size(3) and EVP_PKEY_bits(3) to the new manual page EVP_PKEY_size(3). Merge the documentation of the related function pointers from the OpenSSL 1.1.1 branch, which is still under a free license. OK tb@ on the new page EVP_PKEY_size(3).
2022-07-13Simplify computation of max_pub_key = dh->p - 1.Theo Buehler
ok jsing
2022-07-13New manual page written from scratch;Ingo Schwarze
tb@ recently added these functions to libcrypto and also provided feedback on my first draft of this page.
2022-07-13Remove #ifndef around the definition of OPENSSL_TLS_SECURITY_LEVEL.Theo Buehler
We do not intend to make this a compile-time option. Reminded by schwarze who asked about it ok jsing
2022-07-13On May 4 14:19:08 2006 UTC, while fixing a security issue, djm@Ingo Schwarze
provided the new public function DH_check_pub_key(3) in <openssl/dh.h>. Sorry for being a bit tardy in documenting the new function. Then again, OpenSSL doesn't document it either, yet. While here, drop a HISTORY entry about a constant that was renamed in OpenSSL 0.9.5. That's no longer relevant.
2022-07-13Fix apmd_flags example.Antoine Jacoutot
2022-07-13Do not make tables static so we can access them from regress.Theo Buehler
2022-07-13Revert BUILD_LLDB use, don't push manual repair on all people building from ↵Jeremie Courreges-Anglas
source Pointed out by sthen@ While make build indeed takes care of running make install in share/mk, running make obj first would error out when encountering the unknown BUILD_LLDB variable. I can wait a few days before committing this again.
2022-07-13Implement the fundamentals for suspend/resume on arm64. This uses PSCIMark Kettenis
to turn off the secondary CPUs and suspend the primary CPU using the CPU_OFF and SYSTEM_SUSPEND calls. A new "halt" IPI is added to turn off the ssecondary CPUs. This IPI is implemented for the ampintc(4) and agintc(4) interrupt controllers. Fulle suspend/resume support is only implemented for ampintc(4). This is enough to suspend and resume boards based on the Allwinner A64 SoC, provided the necessary wakeup interrupts have been set up (not part of this commit). ok patrick@
2022-07-13Enable Wycheproof primality tests.Theo Buehler
2022-07-13Enable BPSW primality test.Theo Buehler
ok jsing
2022-07-13Hook BPSW into BN_is_prime_fasttest_ex()Theo Buehler
ok jsing
2022-07-13Link bn_bpsw.c to buildTheo Buehler
ok jsing
2022-07-13Implement the Baillie-PSW primality testTheo Buehler
It has long been known that pure Miller-Rabin primality tests are insufficient. "Prime and Prejudice: Primality Testing Under Adversarial Conditions" https://eprint.iacr.org/2018/749 points out severe flaws in many widely used libraries. In particular, they exhibited a method to generate 2048-bit composites that bypass the default OpenSSL (and hence LibreSSL) primality test with a probability of 1/16 (!). As a remedy, the authors recommend switching to using BPSW wherever possible. This possibility has always been there, but someone had to sit down and actually implement a properly licensed piece of code. Fortunately, espie suggested to Martin Grenouilloux to do precisely this after asking us whether we would be interested. Of course we were! After a good first implementation from Martin and a lot of back and forth, we came up with the present version. This implementation is ~50% slower than the current default Miller-Rabin test, but that is a small price to pay given the improvements. Thanks to Martin Grenouilloux <martin.grenouilloux () lse ! epita ! fr> for this awesome work, to espie without whom it wouldn't have happened, and to djm for pointing us at this problem a long time back. ok jsing
2022-07-13Link bn_isqrt.c to buildTheo Buehler
ok jsing
2022-07-13Integer square root and perfect square testTheo Buehler
This adds an implementation of the integer square root using a variant of Newton's method with adaptive precision. The implementation is based on a pure Python description of cpython's math.isqrt(). This algorithm is proven to be correct with a tricky but very neat loop invariant: https://github.com/mdickinson/snippets/blob/master/proofs/isqrt/src/isqrt.lean Using this algorithm instead of Newton method, implement Algorithm 1.7.3 (square test) from H. Cohen, "A course in computational algebraic number theory" to detect perfect squares. ok jsing
2022-07-13drm/i915: Fix a race between vma / object destruction and unbindingJonathan Gray
From Thomas Hellstrom 51a405dea0ae54330b6441c5f7c3bb9ceadedce8 in linux 5.15.y/5.15.54 bc1922e5d349db4be14c55513102c024c2ae8a50 in mainline linux
2022-07-13drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systemsJonathan Gray
From Richard Gong 7a9e13b86536ce6dca54380f19d537b1c80caee3 in linux 5.15.y/5.15.54 aa482ddca85a3485be0e7b83a0789dc4d987670b in mainline linux
2022-07-13drm/amd: Refactor `amdgpu_aspm` to be evaluated per deviceJonathan Gray
From Mario Limonciello 0a9a60dcedaacde4b903337b7445cb431b4dd119 in linux 5.15.y/5.15.54 0ab5d711ec74d9e60673900974806b7688857947 in mainline linux
2022-07-13drm/amd/vcn: fix an error msg on vcn 3.0Jonathan Gray
From tiancyin f3647c369c178c1cdea7f6a60dc32d6118afac40 in linux 5.15.y/5.15.54 425d7a87e54ee358f580eaf10cf28dc95f7121c1 in mainline linux
2022-07-13drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bwJonathan Gray
From CHANDAN VURDIGERE NATARAJ 59bf2aca4b1c3eca28b337b5e797bb9b43d44f3b in linux 5.15.y/5.15.54 50e6cb3fd2cde554db646282ea10df7236e6493c in mainline linux
2022-07-13drm/amd/display: Set min dcfclk if pipe count is 0Jonathan Gray
From Michael Strauss f276634b12fa8f63988be9cf5492c7d60d5ad7b1 in linux 5.15.y/5.15.54 bc204778b4032b336cb3bde85bea852d79e7e389 in mainline linux
2022-07-13drm/i915: Replace the unconditional clflush with drm_clflush_virt_range()Jonathan Gray
From Ville Syrjala b33035945b0a6853f8f6f63fb3c3bc9ea869337e in linux 5.15.y/5.15.54 ef7ec41f17cbc0861891ccc0634d06a0c8dcbf09 in mainline linux
2022-07-13drm/i915/gt: Register the migrate contexts with their enginesJonathan Gray
From Thomas Hellstrom 9cf3a1c1288e43af00d70a8520ea9efbea01615e in linux 5.15.y/5.15.54 3e42cc61275f95fd7f022b6380b95428efe134d3 in mainline linux
2022-07-13drm/i915: Disable bonding on gen12+ platformsJonathan Gray
From Matthew Brost d839d15b50743164d7ad95f436ea284a2946c179 in linux 5.15.y/5.15.54 ce7e75c7ef1bf8ea3d947da8c674d2f40fd7d734 in mainline linux
2022-07-12Use __func__ in interface media debug printf().Alexander Bluhm
2022-07-12Protect interface media list with a mutex. This is just a startAlexander Bluhm
to make make media structures MP safe. OK mvs@
2022-07-12Enter the lldb and lldb-server directories for make obj, even if not builtJeremie Courreges-Anglas
Apparently favored by deraadt@, pointed out by patrick@, ok patrick@
2022-07-12Only build lldb support libraries on archs where lldb is installedJeremie Courreges-Anglas
Shaves off a significant amount of time (eg on riscv64) in base builds. Note that you'll need bsd.own.mk rev 1.213 (which make build should take care of). ok miod@ patrick@
2022-07-12Introduce a BUILD_LLDB switch, currently active on amd64 and arm64Jeremie Courreges-Anglas
ok miod@ patrick@
2022-07-12Unbreak the tree, after the previous commit.Joel Sing
2022-07-12grep: simplify printline, no functional changesOmar Polo
in the previous revision (1.66) I added an extra variable to track wether we have printed the separator or not. Well, that's what the `n' variable is for, so no need to duplicate the logic.
2022-07-12Zap trailing whitespace on one line to appease mandoc -TlintTheo Buehler
2022-07-12Document announce add-path sendClaudio Jeker
With input from jmc@ and sthen@
2022-07-12Use db_rint() in sfuart(4)Jeremie Courreges-Anglas
This lets me enter ddb(4) even when the riscv64 machines I manage get unusable because of NFS. Suggested by miod@, ok miod@ kettenis@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-22 12:39:44 +0000