summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-07-10KNFMiod Vallat
2014-07-10Fix a double free in a can't-fail error path in PKCS7_decrypt(), by removingMiod Vallat
the error path altogether and simplifying the local variables as a result. joint work with jsing@; ok jsing@ tedu@
2014-07-10remove unused variable from ssl3_get_client_helloBrent Cook
ok tedu@ miod@
2014-07-10Inline the only use of the HEX_SIZE macro and nuke both DECIMAL_SIZE andJoel Sing
HEX_SIZE. ok beck@ miod@
2014-07-10Make sure srp_Calc_k() digest operations are checked for error; fromMiod Vallat
Florian Zumbiehl (florz , florz . de) on tech@
2014-07-10Make sure SRP_Calc_client_key() returns NULL instead of a pristine BN_new()Miod Vallat
upon error; from Florian Zumbiehl (florz , florz . de) on tech@
2014-07-10Nuke OPENSSL_NONPIC_relocated since nothing uses it.Joel Sing
ok miod@
2014-07-10Kill a blatantly outdated (and now wrong) commentMiod Vallat
2014-07-10Try and fix the horrible coding style of the example code snippets.Miod Vallat
2014-07-10Stop including standard headers via cryptlib.h - pull in the headers thatJoel Sing
are needed in the source files that actually require them. ok beck@ miod@
2014-07-10Remove empty sections and references to des_modes(7) which we don't have.Miod Vallat
2014-07-10Fewer lies, also do not document DES_3cbc_encrypt anymore.Miod Vallat
2014-07-10Features introduce in OpenSSL 0.9.8 do not deserve their own section.Miod Vallat
Instead, fold their description in the main documentation, and update the history section to mention them as well.
2014-07-10Attempt to (incompletely) document EVP_aes_*().Miod Vallat
When EVP_des_cbc() was suggested, suggest EVP_aes_256_cbc() instead. Remove mention of EVP_des_ede3_cbc() being the algorithm of choice for S/MIME. Don't mention US-export limited RC2 algorithms, you'd better not know about them.
2014-07-10RSA_setup_blinding() gets a BN with BN_CTX_get(), returns `out of memory'Miod Vallat
if it fails, then never uses it anymore, and may invoke a function which needs more than one BN from the BN_CTX anyway, so this is pointless - remove the BN_CTX_get() call and the test. ok jsing
2014-07-10make asn1 free safe to call with null pointers of any type.Ted Unangst
ok jsing miod
2014-07-10One sure hopes that OPENSSL_cleanse will:Joel Sing
/* Clear password from memory */
2014-07-10Remove #if 0 code which dumps your data to stdout.Miod Vallat
2014-07-10Tweak some comments. We do not really need to know that "New!" flags wereJoel Sing
added 10+ years ago (they're kinda somewhat stale by now...)
2014-07-10Remove more compression tendrils.Joel Sing
ok tedu@
2014-07-10Stop playing with the RSA_FLAG_BLINDING flag. It does nothing.Joel Sing
ok miod@
2014-07-10delete some casts. ok miodTed Unangst
2014-07-10Missing allocation checks and potential NULL pointer dereference in theMiod Vallat
error path in PEM_X509_INFO_read_bio(); ok guenther@ jsing@
2014-07-10Remove RSA_FLAG_NO_EXP_CONSTTIME, which was deprecated 12+ years ago.Joel Sing
sthen@ confirmed that no ports are referencing it. ok miod@.
2014-07-10Remove more compression related code.Joel Sing
2014-07-10Remove DEBUG_KEYGEN and DEBUG_DECRYPT support.Miod Vallat
2014-07-10replace getservbyname_r with getaddrinfo for portabilityBrent Cook
ok jsing@
2014-07-10Put back some parts of the public SSL API that should not have beenJoel Sing
completely decompressed.
2014-07-10Remove bogus preprocessor statements trying to pick the largest integerMiod Vallat
type for BF_LONG, MD[45]_LONG and SHA_LONG. First, the preprocessor symbols they check for a 64-bit system is __ILP64__ which no sane system provides; second, on the platforms which have assembler code to speed things up, the assembler code assumes a 32-bit type will be used.
2014-07-10crank major for decompression featureTed Unangst
2014-07-10decompress libssl. ok beck jsingTed Unangst
2014-07-10KNF comments, reflowing and moving out of the middle of argument lists inPhilip Guenther
places ok jsing@
2014-07-10remove unused ecc_pkey_size.Brent Cook
ok jsing@ miod@
2014-07-10BN_free, BN_clear_free, BN_CTX_free, BN_BLINDING_free and BN_MONT_CTX_freeJoel Sing
all have implicit NULL checks, so we do not need them here. ok miod@
2014-07-10Use a while loop instead of an ifdowhile loop.Joel Sing
ok miod@ tedu@
2014-07-09include <limits.h> for LONG_MIN/LONG_MAX.Brent Cook
Also remove <sys/filio.h> added from previous commit. This was the wrong way to get FIONBIO. ok jsing@
2014-07-09ASN1_STRING_free can handle NULL, so callers don't need to check. ok miodTed Unangst
2014-07-09reset host, port, path to null after freeing so the caller doesn'tTed Unangst
accidentally free them again. actually a bug in the caller and (hey hey) apps/ocsp.c has exactly that bug, but it's easier/safer to fix here.
2014-07-09stale prototypeTed Unangst
2014-07-09Make comments readable.Joel Sing
2014-07-09More KNF.Joel Sing
2014-07-09KNF.Joel Sing
2014-07-09ocsp_check_ids says "If algoritm mismatch let caller deal with it" beforeTed Unangst
returning 2. The one and only caller doesn't check for that, so... Stop returning it. ok miod
2014-07-09Update to match the current state of crypto/rand, and remove MLINKS forMiod Vallat
RAND_event and RAND_screen.
2014-07-09Remove mention that the PRNG needs to be seeded before invoking someMiod Vallat
functions.
2014-07-09Unifdef -UPKCS_TESTVECT - we don't want the random data used in OAEP paddingMiod Vallat
to get overwritten by a known value, ever.
2014-07-09{malloc,reallocarray} + memset(,0,) -> callocMiod Vallat
ok tedu@
2014-07-09Replace memset(a, 0, ...); free(a); by explicit_bzero(a, ...); free(a); inMiod Vallat
fear a smartass-optimizing compiler decides memset is useless immediately before free(). ok jsing@ deraadt@ tedu@
2014-07-09Remove leading underscore from _BYTE_ORDER and _{LITTLE,BIG}_ENDIAN, to beMiod Vallat
more friendly to systems where the underscore flavours may be defined as empty. Found the hard way be bcook@; joint brainstrom with bcook beck and guenther
2014-07-09miod@ fixed the "bug" so remove reference to it in the man pod^Wpage.Joel Sing
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-25 10:59:37 +0000