summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2018-06-05Add missing csi_dh_params_dup() calls.Joel Sing
2018-06-04Use process-private futexes. This avoids the overhead of calling into uvmMark Kettenis
to look up the mapping for the futex address. ok visa@, mpi@
2018-06-03Allocate a dedicated buffer for use when deriving a shared key duringJoel Sing
client KEX DHE processing, rather than reusing the buffer that is used to send/receive handshake messages. ok beck@ inoguchi@
2018-06-03Check the return value from DH_size() in ssl3_send_client_kex_dhe().Joel Sing
ok beck@ inoguchi@
2018-06-03Sync manual with the const changes introduced in pcap.h rev 1.20.Theo Buehler
2018-06-03Change some libpcap functions which use pointers as arguments andStuart Henderson
returns to const pointers: - the prefix argument to pcap_perror(); - the return value of pcap_strerror(); - the filter expression argument to pcap_compile() and pcap_compile_nopcap(); - the BPF filter program argument to bpf_image(). Matches changes made earlier in tcpdump.org's version of libpcap. From Guy Harris, ok tb@, been through a bulk ports build.
2018-06-03for the witness(4) text, we already Xr the page in the first sentence, so addingJason McIntyre
"See witness(4)" is unneccessary, and just bulks this already large page: remove it;
2018-06-02Validate DH public values and allow for smaller keys to be generated whenJoel Sing
less keying material is needed. Based on code written by djm@ and markus@ for ssh.
2018-06-02Initial version of Crypto Simplified Interface (CSI).Joel Sing
This is a code base that intends on providing a simplified interface for mid-level cryptographic operations. In due course various applications and libraries will be able to benefit from a clean and robust API, rather than using libcrypto or other similar APIs directly. Discussed at length with deraadt@, djm@, markus@, beck@ and others.
2018-06-02Convert ssl3_get_client_kex_ecdhe_ecp() to CBS.Joel Sing
Also allocate a dedicated buffer to hold the shared secret, rather than reusing init_buf. ok inoguchi@ tb@
2018-06-02Remove the three remaining single DES cipher suites.Joel Sing
These are insecure and should not be used - furthermore, we would should not have been allowing their negotiation with TLSv1.2 (as noted by Robert Merget, Juraj Somorovsky and Simon Friedberger). Removing these cipher suites also fixes this issue. ok beck@ inoguchi@
2018-06-02Add a const qualifier to the argument of UI_method_get_closer(),Theo Buehler
UI_method_get_flusher(), UI_method_get_opener(), UI_method_get_prompt_constructor(), UI_method_get_reader(), and UI_method_get_writer(). tested in a bulk build by sthen ok jsing
2018-06-02Add const to the argument of the following callback getters:Theo Buehler
BIO_meth_get_callback_ctrl, BIO_meth_get_create, BIO_meth_get_ctrl, BIO_meth_get_destroy, BIO_meth_get_gets, BIO_meth_get_puts, BIO_meth_get_read, and BIO_meth_get_write. ok jsing
2018-05-30Add const to both arguments of X509_certificate_type() and clean upTheo Buehler
a little: Use X509_get0_pubkey() in place of X509_get_pubkey() and EVP_PKEY_free(). Check return value of the former in the appropriate place and simplify the logic for dealing with the potentially NULL pkey argument (includes a neat tweak from jsing). Finally, kill an ugly comment that has been rotting for twenty years and merge the lines around it. tested in a bulk build by sthen ok jsing
2018-05-30Add a const qualifier to the argument of EVP_PKEY_size().Theo Buehler
tested in a bulk build by sthen ok jsing
2018-05-30Add a const qualifier to the `name' argument ofTheo Buehler
X509_NAME_get_index_by_{OBJ,NID}(). tested in a bulk build by sthen suggested by & ok jsing
2018-05-30Add a const qualifier to the `uni' argument of OPENSSL_uni2asc().Theo Buehler
tested in a bulk build by sthen ok jsing
2018-05-30Add a const qualifier to the return value of BIO_s_file().Theo Buehler
tested in a bulk build by sthen ok bcook, jsing
2018-05-28Drop include of <arm64/swi.h> and remove it.Mark Kettenis
ok drahm@
2018-05-28Returns EBUSY if dup2(2) is called for a LARVAL file.Martin Pieuchot
This prevents a panic due to a double free if a program exits after having called accept(2) and dup2(2) on the same fd but without the corresponding connect(5). It will also allows us to simplify file descriptor locking. The error code has been choosed to match Linux's behavior. Pointed by Mathieu on tech@ after a discussion with guenther@. ok visa@
2018-05-28Clear the sign bit in the QNAN constants used by strtof, strtod and strtold,Jonathan Matthew
so passing "nan" and "-nan" produces a NaN with the right sign. Bug reported and diff provided by George Koehler. ok kettenis@
2018-05-27sync with usbhid.h; from david bernJason McIntyre
2018-05-26document the new kern.audio node; OK ratchov@Ingo Schwarze
2018-05-26minor markup improvement: .Fa *cctx -> .Pf * Fa cctxIngo Schwarze
2018-05-26Quote .Fa arguments containing blanks.Ingo Schwarze
Diff from Jack Burton <jack at saosce dot com dot au>.
2018-05-24As calloc does the zeroing for us in EVP_PKEY_asn1_new() already, no needTheo Buehler
to do it a second time by hand, badly. While here, do some style cleanup. This incomplete list of function pointers appears in EVP_PKEY_asn1_copy() as well, fix it by adding sig_print to the members copied over. ok bcook
2018-05-22Implement support for libfuse use_ino option. This returns the filehelg
system's ino for VOP_GETATTR(9) and VOP_READDIR(9) rather than the internally generated fuse ino. ok mpi@
2018-05-21Reformat debug output to one line per opcode to make it easier tohelg
interpret. ok mpi@
2018-05-20Implement FBT_FLUSH. This is sent whenever a file descriptor is closed withhelg
VOP_CLOSE(9). The associated FUSE file handle is however not closed at this time and is instead closed on VOP_RELEASE(9) because that's the only time it's guaranteed to be no longer used. Directory handles are now only closed on VOP_RELEASE(9) for the same reason. ok mpi@
2018-05-19In ui.h rev. 1.10 2018/05/19 11:03:33, tb@ added a const qualifierIngo Schwarze
to the argument of UI_create_method(3). Adjust the manual.
2018-05-19In x509.h rev. 1.67 2018/05/19 10:58:08, tb@ added a const qualifierIngo Schwarze
to the ASN1_OBJECT argment of X509_NAME_add_entry_by_OBJ(3). Adjust the manual.
2018-05-19In asn1.h rev. 1.49 2018/05/19 10:46:28, tb@ added a const qualifierIngo Schwarze
to the input argument of ASN1_STRING_to_UTF8(3). Adjust the manual.
2018-05-19In ec.h rev. 1.13 2018/05/19 10:37:02, tb@ added a const qualifierIngo Schwarze
to the input argument of i2o_ECPublicKey(3). Adjust the manual.
2018-05-19In x509.h rev. 1.64 2018/05/18 19:24:08, tb@ added const qualifiersIngo Schwarze
to both arguments of X509_check_private_key(3). Adjust the manual.
2018-05-19In x509.h rev. 1.61 2018/05/18 18:37:23 and rev. 1.65 2018/05/18 19:28:27,Ingo Schwarze
tb@ added const qualifiers to the pointer arguments of some X509_get_ext*(3) and X509_REVOKED_get_ext*(3) functions. Adjust the manual.
2018-05-19In x509.h rev. 1.59 2018/05/18 18:19:31 and rev. 1.60 2018/05/18 18:23:24,Ingo Schwarze
tb@ added a const qualifier to the X509_NAME argument of these output functions. Adjust the manual.
2018-05-19In x509.h rev. 1.56 2018/05/18 18:05:57 to rev. 1.58 2018/05/18 18:16:39,Ingo Schwarze
tb@ added const qualifiers to some arguments of X509_NAME read accessors. Adjust the manual.
2018-05-19In x509.h rev. 1.54 2018/05/18 17:59:16, tb@ added a const qualifierIngo Schwarze
to the X509_NAME_ENTRY argument of X509_NAME_add_entry(3) and in x509.h rev. 1.55 2018/05/18 18:02:07 to the "bytes" argument of X509_NAME_add_entry_by_OBJ(3) and X509_NAME_add_entry_by_NID(3). Adjust the manual.
2018-05-19In x509.h rev. 1.52 2018/05/18 17:53:09 and rev. 1.53 2018/05/18 17:56:12, tb@Ingo Schwarze
added const qualifiers to some arguments of some X509_NAME_ENTRY functions. Adjust the manual.
2018-05-19In x509.h rev. 1.51 2018/05/18 16:55:58, tb@ added const qualifiersIngo Schwarze
to one argument each of X509_EXTENSION_set_object(3) and X509_EXTENSION_get_critical(3). Adjust the manual.
2018-05-19Clean out a pile of cruft from ssl3_get_client_kex_ecdhe_ecp().Joel Sing
For pure ECDHE we do not need to construct a new key using the one that was set up during the other half of the key exchange. Also, since we do not support any form of ECDH the n == 0 case is not valid (per RFC 4492 section 5.7), so we can ditch this entirely. ok inoguchi@ tb@
2018-05-19Convert ssl3_get_client_kex_gost() to CBS.Joel Sing
ok beck@ tb@
2018-05-19Switch sparc64 to futex(2) based mutexes and condvars.Martin Pieuchot
ok visa@
2018-05-19UI_METHOD *UI_create_method(const char *name).Theo Buehler
^^^^^ tested in a bulk build by sthen ok jsing
2018-05-19Add const to the obj argument of X509_NAME_add_entry_by_OBJ()Theo Buehler
tested in a bulk build by sthen ok jsing
2018-05-19Add const to the 'obj' argument of X509_EXTENSION_create_by_OBJ().Theo Buehler
tested in a bulk build by sthen ok jsing
2018-05-19Add a const qualifier to the aint argument of X509V3_add_value_int()Theo Buehler
Tested in a bulk build by sthen ok jsing
2018-05-19The 'in' argument of ASN1_STRING_to_UTF8() is now adorned with const.Theo Buehler
tested in a bulk build by sthen ok jsing
2018-05-19Add a const qualifier to the STACK_OF(X509_EXTENSION) * arguments ofTheo Buehler
X509V3_get_d2i() and X509V3_extensions_print(), and one to the 'title' argument of the latter function. tested in a bulk build by sthen ok jsing
2018-05-19Add a const qualifier to the 'key' argument of i2o_ECPublicKey() andTheo Buehler
one to the last argument of each one of i2s_ASN1_OCTET_STRING(), s2i_ASN1_OCTET_STRING(), i2s_ASN1_INTEGER(), i2s_ASN1_ENUMERATED(), and i2s_ASN1_ENUMERATED_TABLE(). tested in a bulk build by sthen ok jsing
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 23:41:58 +0000