summaryrefslogtreecommitdiff
path: root/lib/libcrypto
AgeCommit message (Collapse)Author
2016-10-16Move libcrypto, librpcsvc and gnu/usr.bin/cc/include from RDIRS to PRDIRS,Theo Buehler
and add prereq targets, so some header files are generated by BUILDUSER during 'make prereq' instead of by root during 'make includes'. Switch the order of 'make cleandir' and 'make includes' during 'make build' so we don't generate many files twice. Except for some machine@ symlinks from ${MACHINE}/stand, /usr/obj is now clean from files generated by root during 'make build'. Those will be cleaned up in a second step. help, testing & ok deraadt, input from natano, further testing rpe
2016-10-05Fix some broken .Xr links, loosely based on a diffIngo Schwarze
from Rob Pierce <rob at 2keys dot ca>. The content of this page may also need expert attention, i suspect it may be lacking modern algorithms and over-emphasizing obsolete ones, but i dare not touch the content.
2016-10-02In X509_cmp_time(), pass asn1_time_parse() the tag of the field beingPhilip Guenther
parsed so that a malformed GeneralizedTime field is recognized as an error instead of potentially being interpreted as if it was a valid UTCTime. Reported by Theofilos Petsios (theofilos (at) cs.columbia.edu) ok beck@ tedu@ jsing@
2016-09-23Append to CLEANFILES instead of replacing it, so libcrypto.pc isMartin Natano
deleted on make clean. ok millert
2016-09-22revert documentation update for the clearning behavior we already revertedBrent Cook
2016-09-14Generate pkg-config files at build time like everything else. ThisMartin Natano
avoids permission problems due to the build and install stages being run by different users. ok deraadt jasper
2016-09-11Files in /etc/ssl belong to root. ok deraadtMartin Natano
2016-09-09back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Cipher/Encrypt/DecryptFinalBrent Cook
Software that refers to ctx after calling Final breaks with these changes. revert parts of 1.31 and 1.32
2016-09-05remove CMS manuals; beck@ agress with the general ideaIngo Schwarze
2016-09-04Remove cms.Joel Sing
2016-09-04Remove cms.Joel Sing
ok beck@, guenther@, tedu@
2016-09-04Expand DECLARE_ASN1_.*FUNCTIONS macros.Joel Sing
No change in preprocessed output, ignoring whitespace and line numbers.
2016-09-04Expand DECLARE_ASN1_.*FUNCTIONS macros.Joel Sing
No change in preprocessed output, ignoring whitespace and line numbers.
2016-09-04Expand DECLARE_ASN1_.*FUNCTIONS macros.Joel Sing
No change in preprocessed output, ignoring whitespace and line numbers.
2016-09-04Expand DECLARE_ASN1_.*FUNCTIONS macros.Joel Sing
No change in preprocessed output, ignoring whitespace and line numbers.
2016-09-04Expand DECLARE_ASN1_.*FUNCTIONS macros.Joel Sing
No change in preprocessed output, ignoring whitespace and line numbers.
2016-09-04Expand DECLARE_ASN1_.*FUNCTIONS macros.Joel Sing
No change in preprocessed output, ignoring whitespace and line numbers.
2016-09-04Expand DECLARE_ASN1_.*FUNCTIONS macros.Joel Sing
No change in preprocessed output, ignoring whitespace.
2016-09-04Place IMPLEMENT_PEM macros under #ifndef LIBRESSL_INTERNAL.Joel Sing
2016-09-04Sort and group functions.Joel Sing
2016-09-04Expand IMPLEMENT_PEM macros.Joel Sing
No change in generated assembly.
2016-09-04Less S390.Joel Sing
ok deraadt@
2016-09-04Less IA64.Joel Sing
ok deraadt@
2016-09-04Less vax.Joel Sing
ok deraadt@
2016-09-04include <sys/types.h> to get <sys/cdefs.h> instead (for __warn_references)Brent Cook
corrected by deraadt@ / guenther@
2016-09-04include <sys/cdefs.h> for portableBrent Cook
2016-09-04Add ISRG Root X1, the letsencrypt CA root. This is now included in its ownStuart Henderson
right in Mozilla's CA list, rather than relying on IdenTrust cross-signing. ok beck@ jca@
2010-10-01import OpenSSL-1.0.0aDamien Miller
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2005-04-29import of openssl-0.9.7g; tested on platforms from alpha to zaurus, ok deraadt@Damien Miller
2016-09-03switch to a constant-time gather procedure for amd64 mont5 asmBrent Cook
from OpenSSL commit 7f98aa7403a1244cf17d1aa489f5bb0f39bae431 CVE-2016-0702 ok beck@
2016-09-03add constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF.Brent Cook
Patch based on OpenSSL commit d7a854c055ff22fb7da80c3b0e7cb08d248591d0 "Performance penalty varies from platform to platform, and even key length. For rsa2048 sign it was observed to reach almost 10%." CVE-2016-0702 ok beck@
2016-09-03BN_mod_exp_mont_consttime: check for zero modulus.Brent Cook
Don't dereference d when top is zero. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03 ok jsing@
2016-09-03remove unused variableBob Beck
2016-09-02LIB=crypto, kind of neccessaryTheo de Raadt
2016-09-02Fix Makefile for file location movesBob Beck
2016-09-02Remove the libcrypto/crypto directoryBob Beck
2016-09-02add iOS support for getentropyBrent Cook
from jacob berkman
2016-09-02warn on use of deprecated EVP functionsBrent Cook
This adds a linker warning for EVP_EncryptFinal(), EVP_DecryptFinal(), EVP_CipherFinal(), and documents the recent behavior updates. ok beck@
2016-09-02missing space after commaTheo Buehler
ok bcook
2016-09-02BN_mod_exp_mont_consttime: check for zero modulus.Brent Cook
Don't dereference d when top is zero. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03 ok jsing@
2016-09-01remove sparc supportTed Unangst
2016-08-31Crank minor due to API additionBob Beck
2016-08-31Avoid undefined-behavior right-shifting by a word-size # of bits.Brent Cook
Found with STACK, originally from OpenSSL, ok @beck
2016-08-31Bring in functions used by stunnel and exim from BoringSSL - this bringsBob Beck
in X509_check_host, X509_check_email, X509_check_ip, and X509_check_ip_asc, with some cleanup on the way in by myself and jsing@ ok bcook@
2016-08-31Fix some very unnecessary convoultion.Bob Beck
ok krw@
2016-08-07Update the link for the getentropy(2) manual to man.openbsd.org/Theo Buehler
ok deraadt@
2016-08-05Do not *printf %s NULLTheo de Raadt
ok bcook
2016-07-31bump for LibreSSL 2.5.xBrent Cook
2016-07-18don't mix code and decls, ok tedu@Brent Cook