summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-02-15syncChristian Weisgerber
2018-02-15Merge the new RETURN VALUES section from Paul Yang,Ingo Schwarze
OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800, with a number of fixes by me. Also include three earlier, minor improvements from OpenSSL.
2018-02-15Add missing RETURN VALUES section; from Paul YangIngo Schwarze
via OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800.
2018-02-15Zap a stray sentence that I should have removed in my previous commit.Theo Buehler
2018-02-15Fix the STANDARDS section, but in a different way than in OpenSSLIngo Schwarze
because i see no indication that a 2016 revision of this standard might exist. Instead, use information from: https://www.iso.org/standard/39876.html and https://www.iso.org/standard/60475.html
2018-02-15Quite absurdly, the OpenSSL folks have been actively mucking aroundIngo Schwarze
with their random subsystem in 2017 rather than relying on the operating system, which made me check the changes to their manual pages, which caused me to notice that they document another public function as non-deprecated that we neutered: RAND_poll(3). Mention it briefly.
2018-02-15Add missing RETURN VALUES section;Ingo Schwarze
from Paul Yang via OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800.
2018-02-15Document the additional public function OCSP_basic_sign(3);Ingo Schwarze
from David Cooper <david.cooper@nist.gov> via OpenSSL commit cace14b8 Jan 24 11:47:23 2018 -0500.
2018-02-15Import the new manual page EVP_PKEY_meth_new(3) from OpenSSL,Ingo Schwarze
removing parts that don't apply to OpenBSD.
2018-02-15In some EXAMPLES, correct calls to EVP_PKEY_CTX_new(3) thatIngo Schwarze
lacked an argument; from Jakub Jelen <jjelen at redhat dot com> via OpenSSL commit 9db6673a Jan 17 19:23:37 2018 -0500.
2018-02-15Import the new manual page EVP_PKEY_asn1_get_count(3) from OpenSSL,Ingo Schwarze
fixing half a dozen bugs and typos and also tweaking the wording a bit.
2018-02-15In x509_vfy.h rev. 1.20 2018/02/14 17:06:34, jsing@ providedIngo Schwarze
X509_STORE_CTX_set0_untrusted(3), X509_STORE_CTX_set0_trusted_stack(3), X509_STORE_CTX_get0_untrusted(3), and X509_STORE_CTX_get0_cert(3). Merge the related documentation from OpenSSL.
2018-02-15In x509.h rev. 1.28 2018/02/14 16:57:25, jsing@Ingo Schwarze
provided X509_get0_notBefore(3) and its three friends. Write a manual page from scratch because what OpenSSL has is confusing and incomplete. By the way, providing two identical functions differing only in the constness of the returned structure is crazy. Are application programmers expected to be too stupid to write const ASN1_TIME *notBefore = X509_getm_notBefore(x) if that's what they want?
2018-02-15Fix typo: s/Vt strict tm/Vt struct tm/Ingo Schwarze
2018-02-15tweak previous; ok dlgJason McIntyre
2018-02-15vmd(8): Properly return the correct byte when doing byte-aligned PCIMike Larkin
config space reads. ok kettenis@, ccardenas@
2018-02-15update tunnelttl to talk about the "copy" argumentDavid Gwynne
2018-02-15say that the only optional header we support is the Key.David Gwynne
2018-02-15there are more GRE rfcsDavid Gwynne
2018-02-15make a start at documenting egre(4)David Gwynne
2018-02-15take egre(4) packets out early in gre inputDavid Gwynne
this lets us look up the gre(4) interface before looking at the protocols it might be carrying.
2018-02-15In asn1.h rev. 1.44 2018/02/14 16:46:04, jsing@Ingo Schwarze
provided ASN1_STRING_get0_data(3). Merge the corresponding documentation from OpenSSL.
2018-02-15use the arm64 openprom.c on arm64Jonathan Gray
ok patrick@
2018-02-14prune files.* entries that refer to files not in treeJonathan Gray
ok krw@ mpi@
2018-02-14In evp.h rev. 1.54 2018/02/14 16:40:42, jsing@ provided EVP_PKEY_up_ref(3).Ingo Schwarze
Merge the documentation from OpenSSL commits 0c497e96 Dec 14 18:10:16 2015 +0000 and c5ebfcab Mar 7 22:45:58 2016 +0100 with tweaks by me.
2018-02-14syncStuart Henderson
2018-02-14create virtual interfaces before starting all interface config.David Gwynne
this resolves an ordering problem when adding pseudo interfaces to bridges tweaks from kn@ ok mpi@ sthen@
2018-02-14In x509.h rev. 1.27 2018/02/14 16:18:10, jsing@ providedIngo Schwarze
X509_get_signature_nid(3). Add a new manual page for it based on the relevant parts of OpenSSL X509_get0_signature.pod.
2018-02-14In ssl.h rev. 1.136 2018/02/14 17:08:44, jsing@ providedIngo Schwarze
SSL_CTX_up_ref(3). Merge the related documentation from OpenSSL, but tweak the wording to be less confusing and simplify the RETURN VALUES section.
2018-02-14Zero as (un)mount flag is valid; ok millert@Otto Moerbeek
2018-02-14In ssl.h rev. 1.135 2018/02/14 16:16:10, jsing@ providedIngo Schwarze
SSL_CTX_get0_param(3) and SSL_get0_param(3). Merge the related documentation from OpenSSL, with small tweaks.
2018-02-14Sync.Joel Sing
2018-02-14Bump lib{crypto,ssl,tls} minors due to symbol additions.Joel Sing
2018-02-14Provide SSL_CTX_up_ref().Joel Sing
2018-02-14Provide X509_STORE_CTX_get0_{cert,untrusted}() andJoel Sing
X509_STORE_CTX_set0_{trusted_stack,untrusted}().
2018-02-14Provide X509_get{0,m}_not{Before,After}().Joel Sing
2018-02-14Provide ASN1_STRING_get0_data().Joel Sing
2018-02-14Provide EVP_PKEY_up_ref().Joel Sing
2018-02-14Start providing parts of the OpenSSL 1.1 API.Joel Sing
This will ease the burden on ports and others trying to make software work with LibreSSL, while avoiding #ifdef mazes. Note that we are not removing 1.0.1 API or making things opaque, hence software written to use the older APIs will continue to work, as will software written to use the 1.1 API (as more functionality become available). Discussed at length with deraadt@ and others.
2018-02-14Ensure that D mod (P-1) and D mod (Q-1) are calculated in constant time.Joel Sing
This avoids a potential side channel timing leak. ok djm@ markus@
2018-02-14Provide X509_get_signature_nid().Joel Sing
2018-02-14Provide SSL_CTX_get0_param() and SSL_get0_param().Joel Sing
Some applications that use X509_VERIFY_PARAM expect these to exist, since they're also part of the OpenSSL 1.0.2 API.
2018-02-14Some obvious freezero() conversions.Joel Sing
This also zeros an ed25519_pk when it was not being zeroed previously. ok djm@ dtucker@
2018-02-14Update keypair regress to match revised keypair hash handling.Joel Sing
Apparently I failed to commit this when I committed the libtls change...
2018-02-14whitespacerob
2018-02-14Localize _f in do_upgrade().Theo Buehler
ok rpe
2018-02-14kern_mutex.c is gone.Martin Pieuchot
2018-02-14Put WITNESS only functions with the rest of the locking primitives.Martin Pieuchot
2018-02-14Make sure lo5 is tied to rdomain 5.Martin Pieuchot
2018-02-14New manual page EVP_PKEY_asn1_new(3) from Richard LevitteIngo Schwarze
via OpenSSL commit 751148e2 Oct 27 00:11:11 2017 +0200, including only the parts related to functions that exist in OpenBSD. The design of these interfaces is not particularly pretty, they are not particularly easy to document, and the manual page does not look particularly good when formatted, but what can we do, things are as they are...
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 04:12:54 +0000