summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-12-15Add error handling for EVP_DigestInit_ex().Doug Hogan
A few EVP_DigestInit_ex() calls were left alone since reporting an error would change the public API. Changed internal ssl3_cbc_digest_record() to return a value due to the above change. It will also now set md_out_size=0 on failure. This is based on part of BoringSSL's commit to fix malloc crashes: https://boringssl.googlesource.com/boringssl/+/69a01608f33ab6fe2c3485d94aef1fe9eacf5364 ok miod@
2014-12-14unconditionally align SSL payloadsBrent Cook
Remove support for conditional payload alignment, since we would never want to turn it off. Also, consistently use size_t for calculating the alignment. ok miod@
2014-12-14Convert all of the straight forward client handshake handling code to useJoel Sing
the new handshake functions. ok miod@
2014-12-14Provide functions for starting, finishing and writing SSL handshakeJoel Sing
messages. This will allow for removal of repeated/duplicated code. Additionally, DTLS was written by wholesale copying of the SSL/TLS code, with some DTLS specifics being added to the duplicated code. Since these SSL handshake message functions know how to handle both SSL/TLS and DTLS, upon conversion the duplicate versions will become identical (or close to), at which point the DTLS versions can be removed and the SSL/TLS versions used for both protocols. Partially based on similar changes in OpenSSL. ok miod@
2014-12-14Remove trailing whitespace.Joel Sing
2014-12-14unifdef OPENSSL_NO_NEXTPROTONEG, which is one of the last standing #ifndefJoel Sing
mazes in libssl. NPN is being replaced by ALPN, however it is still going to be around for a while yet. ok miod@
2014-12-14unifdef NETSCAPE_HANG_BUG from the DTLS code. The code is not currentlyJoel Sing
enabled and I would hope that no one is using client certificates with DTLS and Netscape, assuming it even supported it... ok bcook@ miod@
2014-12-14macro cleanup; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-13Provide our own copy of {round,trunc}_page() now that uvm's is unreachable fromMiod Vallat
non-_KERNEL code.
2014-12-13macro cleanup; from Kaspars Bankovskis, tweaked a bitIngo Schwarze
2014-12-12catch up with swab.c rev. 1.9:Ingo Schwarze
update SYNOPSIS and DESCRIPTION and add STANDARDS
2014-12-12markup fixes from Kaspars at Bankovskis dot net;Ingo Schwarze
some of this is already contained upstream in NetBSD, the rest will be sent there
2014-12-12markup fixes, and repair some wrong argument types while here;Ingo Schwarze
from Kaspars at Bankovskis dot net
2014-12-12sysctl kern.global_ptrace.Ted Unangst
controls whether you can ptrace any process with appropriate privileges or only one own's children. ok deraadt
2014-12-12Xr getdtablecountTheo de Raadt
2014-12-11update swab() to match the current posix definition. "rationale: none."Ted Unangst
rewrite the function to be simpler as well. the compiler can unroll the loop for us if necessary. ok schwarze
2014-12-11we do not need the complexity of an assembly swab function here.Ted Unangst
ok deraadt
2014-12-11Fix previous:Ingo Schwarze
As pointed out by stsp@, LC_CTYPE *does* affect the ctype.h functions. Use a wording similar to a suggestion by deraadt@. Feedback and OK jmc@, OK stsp@.
2014-12-11Remove an undocumented limit on the length of the pattern and stringTodd C. Miller
to match of PATH_MAX. As fnmatch() is used for matching more than just pathnames, this can prevent legitimate matches for long strings or partterns. OK miod@ tedu@
2014-12-10add missing sentence to RETURN VALUES; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10use .Rv and simplify wording; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10use .Rv; no change of meaning; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10ssl3_init_finished_mac() calls BIO_new() which can fail since it in turnJoel Sing
calls malloc(). Instead of silently continuing on failure, check the return value of BIO_new() and propagate failure back to the caller for appropriate handling. ok bcook@
2014-12-10Remove support for GOST R 34.10-94 signature authentication, along withJoel Sing
the two ciphersuites that use it. GOST94 public/private keys have been long obsoleted and libcrypto does not have support for them anyway. Discussed with Dmitry Eremin-Solenikov.
2014-12-10libssl major++Joel Sing
2014-12-10Add support for ALPN.Joel Sing
Based on OpenSSL and BoringSSL. ok bcook@
2014-12-10add stdint.h to ssl.h.Brent Cook
ok jsing@
2014-12-10Prefer .In and .Rv -stdPhilip Guenther
2014-12-10Improve the description and layout of the RUSAGE_* values, and do somePhilip Guenther
general cleanup diff from Kaspars Bankovskis (kaspars (at) bankovskis.net) ok and tweaks schwarze@, jmc@
2014-12-09Xr and Ox fixes;Jason McIntyre
2014-12-09random seed buffer must be unsignedTheo de Raadt
2014-12-09put back some information what the character classes actually mean;Ingo Schwarze
while here, remove the lie that regex(3) character classes would depend on the locale; ok jmc@
2014-12-09LC_CTYPE has no effect on ctype(3), but on wctype(3); ok jmc@Ingo Schwarze
2014-12-09Import new amd64 assembly versions of strchr/index, strrchr/rindex,Reyk Floeter
and strlen that provide a significantly faster performance than our previous .c or .S implementations. Based on NetBSD's code. Tested with different amd64 CPUs. ok deraadt@ mikeb@
2014-12-09no more string(3);Jason McIntyre
2014-12-09no more ctype(3);Jason McIntyre
2014-12-09fix NAME;Jason McIntyre
2014-12-09improve warnings from rand_r(), rand(), and random()Theo de Raadt
It may take a few iterations to get the tone right. previously discussed with millert
2014-12-09In ingo's new world order, we do not want multiple manual pages describingTheo de Raadt
the same thingies. Therefore these "lists of functions" man pages can go away. Hurray! I've wanted these pages to die for around 10 years! ok ingo (and i think jmc)
2014-12-09more standardsier: cast to int to make sure we keep the negative numbers.Ted Unangst
observed by jonas termansen
2014-12-08Oops, got the sense of the test backwards. Hilarious that we didn't spot it.Theo de Raadt
2014-12-08Change rand(), random(), drand48(), lrand48(), mrand48(), and srand48()Theo de Raadt
to returning strong random by default, source from arc4random(3). Parameters to the seeding functions are ignored, and the subsystems remain in strong random mode. If you wish the standardized deterministic mode, call srand_deterministic(), srandom_determistic(), srand48_deterministic(), seed48_deterministic() or lcong48_deterministic() instead. The re-entrant functions rand_r(), erand48(), nrand48(), jrand48() are unaffected by this change and remain in deterministic mode (for now). Verified as a good roadmap forward by auditing 8800 pieces of software. Roughly 60 pieces of software will need adaptation to request the deterministic mode. Violates POSIX and C89, which violate best practice in this century. ok guenther tedu millert
2014-12-08typoTheo de Raadt
2014-12-08major++Ted Unangst
2014-12-08Add chflagsat(), modeled on fchmodat() with name to match FreeBSD.Philip Guenther
2014-12-08more libc, less kernel documentationTed Unangst
2014-12-08tweak recommendation to use arc4random_bufTed Unangst
2014-12-08delete documentation for deleted DES interfacesTed Unangst
2014-12-08remove cfree from documentationTed Unangst
2014-12-08don't do silly (and slow) one byte reads in unbuffered mode.Ted Unangst
from enh at google
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-22 17:04:06 +0000