summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2017-10-08Fix typo.Visa Hankala
2017-10-08hyphenate DER/PEM-encoded, for consistency;Jason McIntyre
2017-10-07Document tls_peer_cert_chain_pem().Joel Sing
ok beck@
2017-10-07Add fktrace to the NAME sectionPhilip Guenther
ok jmc@
2017-10-05Document that connect(2) and sendto(2) may return with errnoAlexander Bluhm
EADDRNOTAVAIL if local address is not available. OK deraadt@ millert@
2017-10-05do not return f() where f is a void function; loop var type fixOtto Moerbeek
2017-10-05Use dprintf instead of snprintf/writeOtto Moerbeek
2017-10-04iscntrl(0) is != 0 at least since Version 7 AT&T UNIX, and POSIXIngo Schwarze
requires that, too (in XBD 7.3.1), even though the C standard leaves it implementation-defined; found during my kcgi audit on behalf of CAPEM; OK deraadt (stupid me forgot to commit before lock).
2017-10-04pasto in function name in the SYNOPSIS; from semarie@Ingo Schwarze
2017-09-27Document how ioctl(2) LIOCSFD on /dev/klog registers a socket pairAlexander Bluhm
to receive sendsyslog(2) messages. discussed with martijn@; OK jmc@ deraadt@
2017-09-27Xr; from jan staryJason McIntyre
2017-09-26bump version in advance of final releaseBrent Cook
2017-09-26bump wo 2.6.2Brent Cook
2017-09-25sendsyslog should take a const char * everywhere.Marc Espie
okay bluhm@, deraadt@
2017-09-25If tls_config_parse_protocols() is called with a NULL pointer, return theJoel Sing
default protocols instead of crashing - this makes the behaviour more useful and mirrors what we already do in tls_config_set_ciphers() et al.
2017-09-25Annotate some API-side memory leaks for future resolution.Joel Sing
2017-09-25Fix various issues in the OCSP extension parsing code:Joel Sing
- When parsing the OCSP extension we can have multiple responder IDs - pull these out correctly. - Stop using CBS_stow() - it's unnecessary since we just need access to the data and length (which we can get via CBS_data() and CBS_len()). - Use a temporary pointer when calling d2i_*() functions, since it will increment the pointer by the number of bytes it consumed when decoding. The original code incorrectly passes the pointer allocated via CBS_stow() (using malloc()) to a d2i_*() function and then calls free() on the now incremented pointer, most likely resulting in a crash. This issue was reported by Robert Swiecki who found the issue using honggfuzz. ok beck@
2017-09-25When building the OCSP extension, only add the length prefixed extensionsJoel Sing
after we finish building the responder ID list. Otherwise adding to the responder ID list fails. ok beck@
2017-09-23Kill unused functionJeremie Courreges-Anglas
Spotted by krw@
2017-09-23Make delayed free non-optional and make F do an extensive double free check.Otto Moerbeek
ok tb@ tedu@
2017-09-21tweak previous: remove trailing blank and improve a wording;Ingo Schwarze
requested by jmc@
2017-09-20Properly document the typical write(2) loop,Ingo Schwarze
and delete misleading parts from the CAVEATS; issue reported by <ScottCheloha at gmail dot com> on bugs@; OK espie@ millert@
2017-09-20Keep track of which keypair is in use by a TLS context.Joel Sing
This fixes a bug where by a TLS server with SNI would always only return the OCSP staple for the default keypair, rather than returning the OCSP staple associated with the keypair that was selected via SNI. Issue reported by William Graeber and confirmed by Andreas Bartelt. Fix tested by William Graeber and Andreas Bartelt - thanks!
2017-09-20Slightly restructure tls_ocsp_verify_cb() to make it more like libtls code.Joel Sing
2017-09-20Provide a useful error if there are no OCSP URLs in the peer certificate.Joel Sing
2017-09-20Fix indentation.Joel Sing
2017-09-18Document readdir_r() return value and update style of the exampleTodd C. Miller
code. Adapted from a diff by Ross L Richardson.
2017-09-17__progname has type char *, we cannot change its type without causingOtto Moerbeek
havoc all over the place. So add some casts to silence the compiler. ok deraadt@ guenther@
2017-09-12mapalign returns MAP_FAILED for failuer; from George KoehlerOtto Moerbeek
2017-09-12Update the documentation regarding /dev/mem and /dev/kmem;Ingo Schwarze
Theo already clamped down on these devices last year. Triggered by a question from Nan Xiao <xiaonan830818 at gmail dot com>. OK deraadt@
2017-09-11check double free before canary for chunks; ok millert@Otto Moerbeek
2017-09-10shm_open(), sysconf(), tcflow(), and tcsendbreak() are not permitted to bePhilip Guenther
cancellation points in POSIX, so change them to invoke the non-cancellation point versions of open(), close(), nanosleep(), and write() ok deraadt@ millert@
2017-09-10Fix spelling of 4.3BSD-Net/2.Ingo Schwarze
2017-09-10sysctl strings include the termingating NUL character in both in and out lengthsTom Cosgrove
Prompted by Nan Xiao noticing the redundancy of bzero+termination - thanks. ok deraadt@
2017-09-08In compiler-rt, a few assembler implementations for i386 floating pointChristian Weisgerber
conversion functions use SSE2 instructions, but these are not guarded by #ifdef __SSE2__, and there is no implementation using general purpose registers. For these functions, use the generic C variants instead, otherwise they will cause SIGILL on older processors. From FreeBSD; ok deraadt@ mlarkin@ patrick@
2017-09-05Remove unused 32bit version of elf_hash().Martin Pieuchot
Riding previous libc bump. ok kettenis@
2017-09-05New POSIX xlocale implementation written from scratch.Ingo Schwarze
Complete in the sense that all POSIX *locale(3) and *_l(3) functions are included, but in OpenBSD, we of course only really care about LC_CTYPE and we only support ASCII and UTF-8. With important help from kettenis@, guenther@, and jca@. Repeated testing in ports bulk builds by naddy@. Additional testing by jca@, sebastia@, dcoppa@, and others. OK kettenis@ dcoppa@, and guenther@ on an earlier version. Riding guenther@'s libc/librthread major bump.
2017-09-05Add additional errno values required by POSIX.Jonathan Gray
ok jca@ kettenis@ deraadt@
2017-09-05Move mutex, condvar, and thread-specific data routes, pthread_once, andPhilip Guenther
pthread_exit from libpthread to libc, along with low-level bits to support them. Major bump to both libc and libpthread. Requested by libressl team. Ports testing by naddy@ ok kettenis@
2017-09-03Checking sizeof size_t by SIZE_MAX instead of _LP64Kinichiro Inoguchi
ok bcook@
2017-09-02delete pointless .Tn ASCII found by jca@ with mandoc -TlintIngo Schwarze
2017-08-31Remove OPENSSL_NO_NEXTPROTONEG - some software creates conflictingJoel Sing
prototypes if we have both OPENSSL_NO_NEXTPROTONEG and the prototypes defined.
2017-08-31Mention strtok_r in STANDARDSJeremie Courreges-Anglas
POSIX 2001 instead of POSIX.1c suggested by millert@ and jmc@, ok jmc@
2017-08-30Move the full extension building into tlsext_{client,server}hello_build(),Joel Sing
leaving ssl_add_{client,server}hello_tlsext() as pointer to CBB wrappers. ok doug@
2017-08-30Bump libssl/libtls minors due to symbol (re)addition.Joel Sing
2017-08-30Bring back the NPN related symbols.Joel Sing
Several pieces of software make use of these based on a conditional around OPENSSL_NPN_NEGOTIATED, rather than using the presence of the symbols, the non-existence of a OPENSSL_NO_NEXTPROTONEG define or even the existence of the TLS extension type. Unfortunately we cannot remove OPENSSL_NPN_NEGOTIATED since the API for ALPN was effectively botched and reuses two parts from the NPN implementation, rather than providing ALPN specific or generic versions.
2017-08-30Bring back the RSA_SSLV23_PADDING define.Joel Sing
Several pieces of software expect this to be available unconditionally.
2017-08-30Fix ifdef to if in gcm128.cKinichiro Inoguchi
ok deraadt@ bcook@
2017-08-29When OCSP status type is unknown, ignore the extension.Doug Hogan
This needs to skip past the CBS data or it will be treated as a decode error even though it returns 1. ok jsing@
2017-08-29It is confusing to talk about priorities being ordered from highTodd C. Miller
to low when they are actually numbered in the opposite (numerical) order. Use "ordered by decreasing importance" instead. Also try to make it clear that LOG_UPTO uses the numerical priorities where a larger value means a lower priority. OK jmc@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-15 22:16:05 +0000