summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-09-12use .Cm rather than .Ar for fixed string argumentsIngo Schwarze
2015-09-12Remove most of the SSLv3 version checks and a few TLS v1.0.Doug Hogan
We can now assume >= TLS v1.0 since SSL2_VERSION, SSL3_VERSION and DTLS1_BAD_VER support was removed. "reads ok" miod@
2015-09-12Use kbind for lazy binding GOT/PLT updates on arm.Philip Guenther
While here add some gcc __predict hints. Much testing, discussion, pondering, and flailing from miod and deraadt ok miod@
2015-09-12use sysctl() to get FSCALE value; ok guentherTheo de Raadt
2015-09-12mark up arguments individually and drop redundant .BkIngo Schwarze
2015-09-12syncTheo de Raadt
2015-09-12Add openssl(1) speed support for AEAD algorithms.Brent Cook
This adds aes-128-gcm aes-256-gcm chacha20-poly1305 from Adam Langley's original patch for OpenSSL ok beck@ jsing@
2015-09-12don't use literal brackets to indicate optional syntax elements,Ingo Schwarze
use the .Op macro (or in this case, .Oo/.Oc)
2015-09-12Cleanup enginetest a bit.Brent Cook
It was the only thing preventing -Werror from building on some systems due to the unchecked asprintf's.
2015-09-12Wrap <dbm.h> and <ndbm.h> so that calls go direct and the symbols are all weakPhilip Guenther
2015-09-12Wrap <bsd_auth.h> so that calls go direct and the symbols are all weakPhilip Guenther
2015-09-12Wrap <assert.h> so that __assert2() goes directPhilip Guenther
2015-09-12add missing .Ar macrosIngo Schwarze
2015-09-12use .Cm for fixed string argumentsIngo Schwarze
2015-09-12Uncopy and unpaste dtls1_send_newsession_ticket() - another 111 lines ofJoel Sing
code deduped.
2015-09-12Fix the openssl(1) prime command: When checking a decimal number forLawrence Teo
primality, do not unnecessarily convert the original decimal number to hex in the output. Hex numbers explicitly specified with -hex remain unchanged. ok beck@ deraadt@ jsing@ miod@
2015-09-12Move handshake message header length determination into a separateJoel Sing
ssl3_handshake_msg_hdr_len() function. Use this to correct several places that have magic numbers with header lengths hardcoded as '4'. ok beck@
2015-09-12ktrcsw(9) has been removed, so remove its man page too.Lawrence Teo
ok guenther@ miod@ sthen@
2015-09-12Wrap shm_open() to go direct and mark shm_{mkstemp,unlink}() as weakPhilip Guenther
2015-09-12Wrap <unistd.h> so that internal calls go direct and they're all weak symbolsPhilip Guenther
Delete unused 'fd' argument from internal function oldttyname()
2015-09-12Wrap <getopt.h> to make the functions weak and make access to the initializedPhilip Guenther
variables go direct. (Common variables cannot be aliased.)
2015-09-12Provide an ftpproxy6 rc script. ftp-proxy can only open one listening socketStuart Henderson
at a time, so a second instance of the daemon is required. OK mikeb stsp ajacoutot
2015-09-12Wrap <time.h> so that internal calls go direct and symbols not in C99 are weakPhilip Guenther
Add prototypes to localtime.c for offtime(), time2posix(), posix2time() to reduce noise with -Wmissing-prototypes Eliminate unnecessary #includes
2015-09-12Uncopy and unpaste dtls1_send_certificate_request() - removes another 80Joel Sing
lines of code, while gaining SIGALGs support.
2015-09-12Wrap <syslog.h> so that internal calls go direct and they're all weak symbolsPhilip Guenther
Delete code that's a no-op now that we don't use sockets Eliminate unnecessary #includes
2015-09-12Uncopy and unpaste dtls1_send_server_key_exchange(). Removes another 329Joel Sing
lines of code, while gaining bug fixes and SIGALGs support.
2015-09-12obvious macros fixes:Ingo Schwarze
* use .Cm for fixed argument strings * properly use .Ar on individual arguments * drop redundant .Bk
2015-09-12Use rtfree() instead of playing with the refcount directly. Some care isClaudio Jeker
needed since rt0 as passed from the upper layer is freed by that layer. Also if_output does not free the rt so handle that as well. With and OK mpi@
2015-09-12It is not necessary to reset errno to 0 since we use logerrorx().Alexander Bluhm
Spotted by jung@
2015-09-12Uncopy and unpaste dtls1_send_server_done().Joel Sing
2015-09-12Wrap <dirent.h> so that internal calls go direct and they're all weak symbolsPhilip Guenther
2015-09-12Introduce if_input_local() a function to feed local traffic back toMartin Pieuchot
the protocol queues. It basically does what looutput() was doing but having a generic function will allow us to get rid of the loopback hack overwwritting the rt_ifp field of RTF_LOCAL routes. ok mikeb@, dlg@, claudio@
2015-09-12Wrap <fts.h> and <ftw.h> so that internal calls to fts_*() go direct andPhilip Guenther
fts_*(), ftw(), and nftw() are weak symbols
2015-09-12Uncopy and unpaste dtls1_send_server_hello().Joel Sing
2015-09-12Make these timer_* stubs weak symbolsPhilip Guenther
Provide declarations to reduce noise when using -Wmissing-prototypes
2015-09-12Uncopy and unpaste dtls1_send_hello_request().Joel Sing
2015-09-12Convert the rest of the server handshake functions to ssl3_handshake_msg_*.Joel Sing
ok beck@
2015-09-12Uncopy and unpaste dtls1_send_client_verify() - theJoel Sing
ssl3_send_client_verify() is different, but it correctly supports things like SIGALGS. Another 74 lines of code bites the dust.
2015-09-12Remove dead get_host_seed() function; Martin NatanoMiod Vallat
2015-09-12Uncopy and unpaste dtls1_send_client_key_exchange() - theJoel Sing
ssl3_send_client_key_exchange() is effectively identical, in fact it has a number of bug fixes and improvements that never got merged into the DTLS copy of the code. Flenses another 264 lines of code. ok beck@
2015-09-12Use explicit_bzero() instead of memset() when clearing private keys.Joel Sing
ok bcook@ beck@ miod@
2015-09-12Old diff found in my tree: Add HISTORY; info from the CSRG CDs.Ingo Schwarze
2015-09-12typo that breaks the buildChristian Weisgerber
2015-09-12Fix two cases where it was possible to call if_put with an uninitialized ifpClaudio Jeker
Found by jsg@ with clang
2015-09-12show a few more lines of trace; discussed in the roomTheo de Raadt
2015-09-12Pull variable assignment out from function call, fix indentation and setJoel Sing
state after calling ssl3_handshake_msg_finish().
2015-09-12More ifmedia64 fallout; that should be the last.Miod Vallat
2015-09-12style(9) and whitespace cleanups.Joel Sing
2015-09-12vhif_ifp in struct carp_ifs is set but never used. it can be trimmed.David Gwynne
ok claudio@ mpi@
2015-09-12ifmedia64 fixes.Miod Vallat