summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-04-15we don't use these files for buildingTed Unangst
2014-04-1512 years ago, old_des.h was used to provide compatibility with libdes.Ted Unangst
The man page says "Compatibility des_ functions are provided for a short while" and indeed even the original commit message says "The compatibility functions will be removed in some future release, at the latest in version 1.0." So here we are, a short while later. Now I've only been an OpenBSD developer for 11 years, one year less than this header has existed, but in that brief time, I've learned a thing or two about deleting obsolete code. It doesn't delete itself. And worse, people will continue using it until you force them onto a better path.
2014-04-1512 years ago, old_des.h was used to provide compatibility with libdes.Ted Unangst
The man page says "Compatibility des_ functions are provided for a short while" and indeed even the original commit message says "The compatibility functions will be removed in some future release, at the latest in version 1.0." So here we are, a short while later. Now I've only been an OpenBSD developer for 11 years, one year less than this header has existed, but in that brief time, I've learned a thing or two about deleting obsolete code. It doesn't delete itself. And worse, people will continue using it until you force them onto a better path.
2014-04-15imake died in a fire a long time agoTed Unangst
2014-04-15repair some whitespaceTed Unangst
2014-04-15Crank major for libcrypto and libssl; more symbol removals to occur during theMiod Vallat
next few moments, don't rush your update. Requested by deraadt@
2014-04-15The NO_ASN1_OLD define was introduced in 0.9.7, 8 years ago, to allow forMiod Vallat
obsolete (and mostly internal) routines to be compiled out. We don't expect any reasonable software to stick to these interfaces, so better clean up the view and unifdef -DNO_ASN1_OLD. The astute reader will notice the existence of NO_OLD_ASN1 which serves a similar purpose, but is more entangled. Its time will come, soon.
2014-04-15Just like every web browser expands until it can read mail, every modularMiod Vallat
library expands until it has its own dlfcn wrapper, and libcrypto is no exception. Remove the non-dlfcn DSO methods. This causes public DSO_METHOD_{beos,dl,vms,win32} to disappear (major bump coming soon). Note that portable software ought to use DSO_METHOD_openssl instead of picking the backend directly (which makes one wonder why the backends are exposed, as it is unlikely that more than one can work on your system). ok beck@ deraadt@
2014-04-15remove FIPS mode support. people who require FIPS can buy something thatTed Unangst
meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt
2014-04-15Go home, VMS, you're drunkMiod Vallat
2014-04-15remove FIPS mode support. people who require FIPS can buy something thatTed Unangst
meets their needs, but dumping it in here only penalizes the rest of us. ok miod
2014-04-15In EC_POINT_invert(), actually check the correct function pointer for NULLMiod Vallat
before attempting to invoke it; trivial one-liner in OpenSSL RT #2569 ignored for 2.5 years.
2014-04-15No licence.Miod Vallat
2014-04-15Moved to regress/lib/libcrypto.Miod Vallat
2014-04-15Remove the GOST engine: It is not compiled or used and depends on theReyk Floeter
"dynamic engine" feature that is not enabled in our build. People who need it can still pull it out of the Attic; if it is to have a Russian engine just because it's a Russian engine. OK deraadt@ beck@
2014-04-15Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternityBob Beck
with the bearded ones... some API's that nobody should be using will dissapear with this commit.
2014-04-15Toss a `unifdef -U OPENSSL_SYS_WINDOWS' bomb into crypto/bio.Joel Sing
ok miod@
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15As we now remove it permanently, we no longer need NO_WINDOWS_BRAINDEATHBob Beck
as a build time option... ok deraadt@ miod@
2014-04-15Remove VMS code.Joel Sing
ok miod@ beck@
2014-04-15Replace the old OpenSSL PRNG by direct use of arc4random_buf(), keeping theMiod Vallat
existing RAND interfaces unchanged. All interfaces allowing external feed or seed of the RNG (either from a file or a local entropy gathering daemon) are kept for ABI compatibility, but are no longer do anything. While the OpenSSL PRNG was required 15+ years ago when many systems lacked proper entropy collection, things have evolved and one can reasonably assume it is better to use the kernel (system global) entropy pool rather than trying to build one's own and having to compensate for thread scheduling... <RANT> Whoever thought that RAND_screen(), feeding the PRNG with the contents of the local workstation's display, under Win32, was a smart idea, ought to be banned from security programming. </RANT> ok beck@ deraadt@ tedu@
2014-04-15remove a test directory. If anyone wants something this again, this isTheo de Raadt
the wrong place and it will need heavy lifting. Love the .bat files and the reference to pre-draft pthreads code at MIT. ok beck
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversionsBob Beck
where the return value is ignored changing to (void) snprintf. ok deraadt@
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15remove pentium specific benchmark codeJonathan Gray
ok miod@
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5. There is still a huge amount of inconsistency within these headers.
2014-04-15correct cases of code occuring directly after goto/break/returnJonathan Gray
ok miod@ guenther@
2014-04-14revert 1.2 and define OPENSSL_NO_EC_NISTP_64_GCC_128 again, it has a downsideStuart Henderson
(breaks ssh ecdsa keys)
2014-04-14Flense all use of BIO_snprintf from ssl source - use the real one instead,Bob Beck
and allow for the normal posix mandated return values instead of the nonstandard one from BIO_snprintf. ok miod@
2014-04-14make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miodTed Unangst
2014-04-14Remove eng_cryptodev.c (merged into old-name hw_cryptodev.c); moveMiod Vallat
undo the move of crypto/engines/eng_padlock to engines/e_padlock. Requested by reyk@. Note that eng_padlock is not compiled in currently.
2014-04-14used for windows dll builds onlyMiod Vallat
2014-04-14unifdef -U OPENBSD_DEV_CRYPTO and OPENSSL_OPENBSD_DEV_CRYPTO. This code was theMiod Vallat
early attempt at getting kernel-assisted crypto(4) used by libcrypto, before the engine API existed, and has been #if 0'd out for ages anyway. No API/ABI change.
2014-04-14So the OpenSSL codebase does "get the time, add it as a random seed"Theo de Raadt
in a bunch of places inside the TLS engine, to try to keep entropy high. I wonder if their moto is "If you can't solve a problem, at least try to do it badly". ok miod
2014-04-14convert the use of OPENSSL_DIR_XXX functions to opendir() and frends.Bob Beck
ok deraadt@
2014-04-14remove auto-generated dependencies from the old unused build system, soTheo de Raadt
that it is easier to find code pieces. They are getting in the way. ok miod
2014-04-14Remove the GMP engine: It was an experimental engine using libgmp asReyk Floeter
an alternative backend for BIGNUM calculations. It is PoC code that is not enabled in OpenSSL and probably not used by anymore. ok deraadt@
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14Remove the CAPI engine: It is a backend for the Windows CryptoAPI andReyk Floeter
could be maintained in an external package. "it should probably go" beck@
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14replace PTR_SIZE_INT (only used for VMS) with uintptr_t, tweaks from jca@,Stuart Henderson
makes sense to beck@
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 16:31:06 +0000