summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2015-02-10Place the IMPLEMENT_ASN1_.*FUNCTION.* macros under an #ifndefJoel Sing
LIBRESSL_INTERNAL - we do not need them any more.
2015-02-10Add a stub option for big_writes. This is needed by gvfs.Antoine Jacoutot
committing on behalf of slacker syl@
2015-02-10Expand IMPLEMENT_ASN1_NDEF_FUNCTION and IMPLEMENT_ASN1_PRINT_FUNCTIONJoel Sing
macros so that the code is visible and functions can be readily located. Change has been scripted and there is no change to the generated assembly. Discussed with beck@ miod@ tedu@
2015-02-10Expand IMPLEMENT_ASN1_ENCODE_FUNCTIONS_fname macros that got missed.Joel Sing
2015-02-10move scheck.c into zic.cTed Unangst
2015-02-10Expand the IMPLEMENT_ASN1_ALLOC_FUNCTIONS macro so that the code is visibleJoel Sing
and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@
2015-02-10Manually expand ASN1_ITEM_rptr macros that should have been expanded withJoel Sing
the IMPLEMENT_ASN1_DUP_FUNCTION macro.
2015-02-10Expand the -IMPLEMENT_ASN1_ENCODE_FUNCTIONS_(const_)?fname macros so thatJoel Sing
the code is visible and functions can be readily located. Change has been scripted and there is no change to the generated assembly. Discussed with beck@ miod@ tedu@
2015-02-10Expand the IMPLEMENT_ASN1_DUP_FUNCTION macro so that the code is visibleJoel Sing
and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@
2015-02-10Expand the IMPLEMENT_ASN1_FUNCTIONS_{const,fname,name} macros so that theJoel Sing
code is visible and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@
2015-02-10now we're cooking with gas...Ted Unangst
replace difftime with a clever gift from matthew. ok guenther.
2015-02-10matthew suggests a double cast so sf mortgages work right. :)Ted Unangst
2015-02-10remove CMU gtimeTed Unangst
2015-02-09typoMiod Vallat
2015-02-09Expand the IMPLEMENT_ASN1_FUNCTIONS macro so that the code is visible andJoel Sing
functions can be readily located. Change has been scripted and there is no change to the generated assembly. Discussed with beck@ miod@ tedu@
2015-02-09Expand the IMPLEMENT_ASN1_FUNCTIONS macro so that the code is visible andJoel Sing
functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@
2015-02-09BN_CTX_get() can fail - consistently check its return value.Joel Sing
There are currently cases where the return from each call is checked, the return from only the last call is checked and cases where it is not checked at all (including code in bn, ec and engine). Checking the last return value is valid as once the function fails it will continue to return NULL. However, in order to be consistent check each call with the same idiom. This makes it easy to verify. Note there are still a handful of cases that do not follow the idiom - these will be handled separately. ok beck@ doug@
2015-02-09Expand the IMPLEMENT_ASN1_FUNCTIONS macro so that the code is visible andJoel Sing
functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@
2015-02-09it is not strictly necessary to cast the "return value" of free() to void.Ted Unangst
2015-02-09- register int idays; /* unsigned would be so 2003 */Ted Unangst
+ int idays; /* unsigned would be so 2003 */ register is so 1973
2015-02-09always define ALL_STATE (which, contrary to the name is not about allTed Unangst
states, but rather heap allocating the state) and unifdef the rest
2015-02-09the one true type of time_t is a signed integerTed Unangst
2015-02-09remove INITIALIZE macro and do it the hard way.Ted Unangst
2015-02-09unifdef the rest of the HAVEs and HAVE notsTed Unangst
2015-02-09unifdef have gettext. don't have it, won't have it.Ted Unangst
2015-02-09move include lines around a bitTed Unangst
2015-02-09trim down some of the ifndef redefine madnessTed Unangst
2015-02-09replace homegrown is_digit with correct calls to isdigit()Ted Unangst
2015-02-09move zic and zdump source to appropriate directoriesTed Unangst
2015-02-09stop trying to workaround malloc bugs that have not existed for 20 years.Ted Unangst
ok deraadt
2015-02-09search engines replaced these files a long TIME agoTheo de Raadt
2015-02-09Jettison SCTP support in BIO dgram.Joel Sing
OpenBSD does not have SCTP support and it sees little use in the wild. OPENSSL_NO_SCTP is already specified via opensslfeatures.h, hence this is a code removal only and symbols should remain unchanged. ok beck@ miod@ tedu@
2015-02-09Jettison DTLS over SCTP.Joel Sing
OpenBSD does not have SCTP support and it sees little use in the wild. OPENSSL_NO_SCTP is already specified via opensslfeatures.h, hence this is a code removal only and symbols should remain unchanged. ok beck@ miod@ tedu@
2015-02-09if isascii isn't defined, don't define a retarded versionTed Unangst
2015-02-09When parsing the host in tls_connect(), first check if it is a numericReyk Floeter
IPv4 or IPv6 address before trying to resolve the address with the AI_ADDRCONFIG flag set. This makes sure that attempts to connect to numeric IPs or loopback addresses are always possible and not prevented by AI_ADDRCONFIG. OK jsing@ tedu@
2015-02-09greatly simplfy and correct difftime for large time_t. ok guentherTed Unangst
2015-02-09this removes just a few ifdef checks for things that should always be enabled,Ted Unangst
and which we definitely don't want to workaround. no change in the compiled code (yet). some of these, like the first chunk are plain silly. the compiler used to compile asctime has nothing to do with the format strings strftime should support. ok deraadt
2015-02-09Return NULL when there are no shared ciphers.Doug Hogan
OpenSSL added this change to avoid an out-of-bounds write since they're accessing p[-1]. We initialize buf and use strrchr() so we aren't subject to the same OOB write. However, we should return NULL rather than an empty string when there are no shared ciphers. Also, KNF a particularly bad section above here that miod noticed. Based on OpenSSL commits: 4ee356686f72ff849f6f3d58562224ace732b1a6 308505b838e4e3ce8485bb30f5b26e2766dc7f8b ok miod@
2015-02-09This is neither code not proper documentation.Miod Vallat
2015-02-09Remove unused GOST test that prevents clang from building libcrypto.Doug Hogan
clang warns that it is unused and we have -Werror enabled. This test isn't hooked up to anything yet. We can add it back with a future GOST update. clang 3.5 can now build libssl and libcrypto as long as you use CFLAGS=-Wno-pointer-sign. "seems reasonable" bcook@, miod@
2015-02-08Use `> 0' instead of `!= 0' as a successful condition forMiod Vallat
EC_POINT_is_at_infinity() and EC_POINT_is_on_curve(), for they may return -1 should an error arise. ok doug@ jsing@
2015-02-08Move a few typedef up in this file in order to be able to use them in env_md_stMiod Vallat
and get rid of a silly FIXME comment. ok doug@ jsing@
2015-02-08Check memory allocation results in EVP_PBE_alg_add_type().Miod Vallat
ok doug@ jsing@
2015-02-08Check memory allocation results, as well as stack pushes.Miod Vallat
Also fix a memory leak in one of the error paths of SMIME_read_ASN1(), spotted by doug@ tweaks&ok doug@ jsing@
2015-02-08Rely upon enc_flags rather than the tls version, to upgrade SHA1+MD5 toMiod Vallat
SHA256 in ssl_get_algorithm2(). From OpenSSL HEAD; ok jsing@
2015-02-08Lob a KNF grenade into the ecdsa code.Joel Sing
2015-02-08Use the AI_ADDRCONFIG flag in tls_connect(). This tells the resolverReyk Floeter
to ignore unsupported address families - eg. don't resolv IPv6 on IPv4-only hosts. OK jsing@
2015-02-07Added tls_load_file()Reyk Floeter
2015-02-07Add manpage bits for tls_load_file() and tls_accept_socket().Reyk Floeter
The tls_accept_socket() has been previously removed because the API is not fixed yet; but it is also already used by httpd(8) and spamd(8) so it is time to add it again and eventually change it later. OK tedu@
2015-02-07Add tls_load_file() as a helper to load certificates or encrypted keysReyk Floeter
into memory. This can be used for tls_config_set_ca_mem(), tls_config_set_cert_mem() or tls_config_set_key_mem(). With input from jsing@, tedu@ and henning@ OK tedu@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 07:15:52 +0000