Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-01-23 | Move the stats struct from SSL_CTX to internal. | Joel Sing | |
ok beck@ | |||
2017-01-22 | Link libc with compiler_rt not libgcc if COMPILER_VERSION is clang. | Jonathan Gray | |
This is not a list of archs with compiler_rt as it is intended that any arch switching to clang will have the required md bits added to compiler_rt first. ok kettenis@ patrick@ | |||
2017-01-22 | Move most of the SSL3_STATE fields to internal - the ones that remain are | Joel Sing | |
known to be used by ports. ok beck@ | |||
2017-01-22 | Disable session cache and tickets by default. | Claudio Jeker | |
OK beck@ jsing@ | |||
2017-01-22 | Move most of DTLS1_STATE to internal. | Bob Beck | |
ok jsing@ | |||
2017-01-22 | Move ALPN and NPN fields from SSL/SSL_CTX to internal. | Joel Sing | |
ok beck@ | |||
2017-01-22 | Move internal parts of ssl_session_st to internal | Bob Beck | |
ok jsing@ | |||
2017-01-22 | Move recently added min_version/max_version from SSL and SSL_CTX to their | Joel Sing | |
opaque structs. | |||
2017-01-22 | Wrap long lines. | Joel Sing | |
2017-01-22 | Bump majors for libssl and libtls following the translucent struct change. | Joel Sing | |
Further changes to the publically visible structs will ride this bump. | |||
2017-01-22 | Convert publically visible structs to translucent structs. | Joel Sing | |
This change adds an internal opaque struct for each of the significant publically visible structs. The opaque struct is then allocated and attached to the publically visible struct when the appropriate *_new() function is called, then cleared and freed as necessary. This will allow for changes to be made to the internals of libssl, without requiring a major bump each time the publically visible structs are modified. ok beck@ | |||
2017-01-22 | Clean up ssl3_new() - in particular, we do not need to zero fields that | Joel Sing | |
are within a struct that was just allocated via calloc. ok beck@ | |||
2017-01-22 | There is no point in setting struct fields to zero, when you've already | Joel Sing | |
zeroed the entire struct via memset. ok beck@ | |||
2017-01-21 | use BN_div_nonct where it is safe to do so. | Bob Beck | |
ok guenther@ | |||
2017-01-21 | Add ct and nonct versions of BN_mod_inverse for internal use | Bob Beck | |
ok jsing@ | |||
2017-01-21 | Split out BN_div and BN_mod into ct and nonct versions for Internal use. | Bob Beck | |
ok jsing@ | |||
2017-01-21 | Make explicit _ct and _nonct versions of bn_mod_exp funcitons that | Bob Beck | |
matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@ | |||
2017-01-21 | Nuke whitespace foolish enough to expose itself during the great | Kenneth R Westerback | |
"warning:" rectification. | |||
2017-01-21 | 1. When shrinking a chunk allocation, compare the size of the current | Otto Moerbeek | |
allocation to the size of the new allocation (instead of the requested size). 2. Previously realloc takes the easy way and always reallocates if C is active. This commit fixes by carefully updating the recorded requested size in all cases, and writing the canary bytes in the proper location after reallocating. 3. Introduce defines to test if MALLOC_MOVE should be done and to compute the new value. | |||
2017-01-21 | Specify minimum and maximum protocol version for each method. This is | Joel Sing | |
currently unused, but will be in the near future. ok beck@ | |||
2017-01-21 | Make crtbegin.c and crtbeginS.c consistent on stylistic points | Philip Guenther | |
ok kettenis@ | |||
2017-01-21 | p_comm is the process's command and isn't per thread, so move it from | Philip Guenther | |
struct proc to struct process. ok deraadt@ kettenis@ | |||
2017-01-21 | Place {DECLARE,IMPLEMENT}_OBJ_BSEARCH{_GLOBAL,}_CMP_FN macros undef | Joel Sing | |
LIBRESSL_INTERNAL. | |||
2017-01-21 | Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros. | Joel Sing | |
No change to generated assembly excluding line numbers. | |||
2017-01-21 | Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros. | Joel Sing | |
No change to generated assembly excluding line numbers. | |||
2017-01-21 | Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros. | Joel Sing | |
No change to generated assembly excluding line numbers. | |||
2017-01-21 | /usr/bin/unifdef -D MONT_MUL_MOD -D MONT_EXP_WORD -D RECP_MUL_MOD -m bn_exp.c | Bob Beck | |
with some style cleanup after. no binary change ok jsing@ | |||
2017-01-21 | Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros. | Joel Sing | |
No change to generated assembly excluding line numbers. | |||
2017-01-21 | Expand DECLARE_OBJ_BSEARCH_GLOBAL_CMP_FN macro. | Joel Sing | |
No change in preprocessor output (ignoring whitespace and line numbers). | |||
2017-01-21 | Expand IMPLEMENT_OBJ_BSEARCH_GLOBAL_CMP_FN macro. | Joel Sing | |
No change in generated assembly. | |||
2017-01-21 | Pull in declarations for main() and __init() to make clang happy. | Philip Guenther | |
Mark __init() as hidden ok kettenis@ deraadt@ | |||
2017-01-21 | Fix misspelling in comment | Philip Guenther | |
2017-01-21 | Hook up libcompiler_rt, libcxx and libcxxabi to the build. Since their | Patrick Wildt | |
Makefiles are now guarded to not compile on non-clang architectures, we can safely add them. ok deraadt@ | |||
2017-01-21 | fix bogus comment | Bob Beck | |
ok jsing@ | |||
2017-01-21 | Make return value of X509_verify_cert be consistent with the error code, | Bob Beck | |
with the caveat that we force V_OK when a user provided callback has us returning success. ok inoguchi@ jsing@ | |||
2017-01-21 | amd64 can build rcrt0.o with the stack-protector | Philip Guenther | |
ok kettenis@ deraadt@ | |||
2017-01-21 | Declare the symbols that label the .ctors, .dtors, .eh_frame, and .jcr | Philip Guenther | |
sections as extern hidden arrays of indefinite size, so that the compiler (well, clang) doesn't believe it knows the exact contents and thus optimize things into infinite loops. Actually set the symbols to be in the sections and insert the leading and trailing values via __asm(). Problem pointed out by patrick@ testing and ok kettenis@ | |||
2017-01-20 | Implement gcc suggestion of extra parentheses. No functional change. | Kenneth R Westerback | |
ok guenther@ | |||
2017-01-20 | Depend compilation on the compiler version, so that we can always | Patrick Wildt | |
enter the directory to create an objdir. ok deraadt@ | |||
2017-01-20 | Rework internal_verify, mostly from OpenSSL. so we can progress | Bob Beck | |
towards cleaning up the V_OK stuff. ok kinichiro@ | |||
2017-01-19 | MD_START is now always ___start, so expand and eliminate it | Philip Guenther | |
ok phessler@ deraadt@ | |||
2017-01-13 | whitespace | Theo de Raadt | |
2017-01-12 | Inline strlen() call to reduce/simplify code. | Joel Sing | |
2017-01-12 | Inline tls_get_new_cb_bio() from the only place that it gets called, | Joel Sing | |
simplifying the code. Also check the provided read and write callbacks before assigning to the context. | |||
2017-01-12 | If tls_set_cbs() fails an error will already be specified, so do not | Joel Sing | |
replace it with a less specific one. | |||
2017-01-12 | change two trailing Xr to Fn; ok schwarze | Jason McIntyre | |
2017-01-12 | Simplify the TLS callback BIO code - a pointer to the tls context can be | Joel Sing | |
stored directly in bio->ptr, rather than allocating and deallocating an intermediate struct. Diff from Marko Kreen <markokr at gmail dot com> - thanks! | |||
2017-01-12 | If tls_get_new_cb_bio() fails, an error will already be set. | Joel Sing | |
2017-01-12 | If no callbacks are specified, return after setting an error rather than | Joel Sing | |
continuing on. Also noticed by Marko Kreen. | |||
2017-01-11 | Add support for AArch64. | Patrick Wildt | |