summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-04-15Just like every web browser expands until it can read mail, every modularMiod Vallat
library expands until it has its own dlfcn wrapper, and libcrypto is no exception. Remove the non-dlfcn DSO methods. This causes public DSO_METHOD_{beos,dl,vms,win32} to disappear (major bump coming soon). Note that portable software ought to use DSO_METHOD_openssl instead of picking the backend directly (which makes one wonder why the backends are exposed, as it is unlikely that more than one can work on your system). ok beck@ deraadt@
2014-04-15remove FIPS mode support. people who require FIPS can buy something thatTed Unangst
meets their needs, but dumping it in here only penalizes the rest of us. ok beck deraadt
2014-04-15Go home, VMS, you're drunkMiod Vallat
2014-04-15remove FIPS mode support. people who require FIPS can buy something thatTed Unangst
meets their needs, but dumping it in here only penalizes the rest of us. ok miod
2014-04-15In EC_POINT_invert(), actually check the correct function pointer for NULLMiod Vallat
before attempting to invoke it; trivial one-liner in OpenSSL RT #2569 ignored for 2.5 years.
2014-04-15No licence.Miod Vallat
2014-04-15Moved to regress/lib/libcrypto.Miod Vallat
2014-04-15Remove the GOST engine: It is not compiled or used and depends on theReyk Floeter
"dynamic engine" feature that is not enabled in our build. People who need it can still pull it out of the Attic; if it is to have a Russian engine just because it's a Russian engine. OK deraadt@ beck@
2014-04-15Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternityBob Beck
with the bearded ones... some API's that nobody should be using will dissapear with this commit.
2014-04-15Toss a `unifdef -U OPENSSL_SYS_WINDOWS' bomb into crypto/bio.Joel Sing
ok miod@
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15As we now remove it permanently, we no longer need NO_WINDOWS_BRAINDEATHBob Beck
as a build time option... ok deraadt@ miod@
2014-04-15Remove VMS code.Joel Sing
ok miod@ beck@
2014-04-15Replace the old OpenSSL PRNG by direct use of arc4random_buf(), keeping theMiod Vallat
existing RAND interfaces unchanged. All interfaces allowing external feed or seed of the RNG (either from a file or a local entropy gathering daemon) are kept for ABI compatibility, but are no longer do anything. While the OpenSSL PRNG was required 15+ years ago when many systems lacked proper entropy collection, things have evolved and one can reasonably assume it is better to use the kernel (system global) entropy pool rather than trying to build one's own and having to compensate for thread scheduling... <RANT> Whoever thought that RAND_screen(), feeding the PRNG with the contents of the local workstation's display, under Win32, was a smart idea, ought to be banned from security programming. </RANT> ok beck@ deraadt@ tedu@
2014-04-15remove a test directory. If anyone wants something this again, this isTheo de Raadt
the wrong place and it will need heavy lifting. Love the .bat files and the reference to pre-draft pthreads code at MIT. ok beck
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversionsBob Beck
where the return value is ignored changing to (void) snprintf. ok deraadt@
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-15remove pentium specific benchmark codeJonathan Gray
ok miod@
2014-04-15First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5. There is still a huge amount of inconsistency within these headers.
2014-04-15correct cases of code occuring directly after goto/break/returnJonathan Gray
ok miod@ guenther@
2014-04-14revert 1.2 and define OPENSSL_NO_EC_NISTP_64_GCC_128 again, it has a downsideStuart Henderson
(breaks ssh ecdsa keys)
2014-04-14Flense all use of BIO_snprintf from ssl source - use the real one instead,Bob Beck
and allow for the normal posix mandated return values instead of the nonstandard one from BIO_snprintf. ok miod@
2014-04-14make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miodTed Unangst
2014-04-14Remove eng_cryptodev.c (merged into old-name hw_cryptodev.c); moveMiod Vallat
undo the move of crypto/engines/eng_padlock to engines/e_padlock. Requested by reyk@. Note that eng_padlock is not compiled in currently.
2014-04-14used for windows dll builds onlyMiod Vallat
2014-04-14unifdef -U OPENBSD_DEV_CRYPTO and OPENSSL_OPENBSD_DEV_CRYPTO. This code was theMiod Vallat
early attempt at getting kernel-assisted crypto(4) used by libcrypto, before the engine API existed, and has been #if 0'd out for ages anyway. No API/ABI change.
2014-04-14So the OpenSSL codebase does "get the time, add it as a random seed"Theo de Raadt
in a bunch of places inside the TLS engine, to try to keep entropy high. I wonder if their moto is "If you can't solve a problem, at least try to do it badly". ok miod
2014-04-14convert the use of OPENSSL_DIR_XXX functions to opendir() and frends.Bob Beck
ok deraadt@
2014-04-14remove auto-generated dependencies from the old unused build system, soTheo de Raadt
that it is easier to find code pieces. They are getting in the way. ok miod
2014-04-14Remove the GMP engine: It was an experimental engine using libgmp asReyk Floeter
an alternative backend for BIGNUM calculations. It is PoC code that is not enabled in OpenSSL and probably not used by anymore. ok deraadt@
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14Remove the CAPI engine: It is a backend for the Windows CryptoAPI andReyk Floeter
could be maintained in an external package. "it should probably go" beck@
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14replace PTR_SIZE_INT (only used for VMS) with uintptr_t, tweaks from jca@,Stuart Henderson
makes sense to beck@
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14First pass at applying KNF to the OpenSSL code, which almost makes itJoel Sing
readable. This pass is whitespace only and can readily be verified using tr and md5.
2014-04-14Revert previous. I don't known why cvs blame tells me I committed this,Martin Pieuchot
but after cross-checking with 1.0.1g sources, they are not coming from my change.
2014-04-14Revert to 1.1 minus the VMS stuff, I accidentally committed this chunkMartin Pieuchot
in my last change.
2014-04-14Remove the nuron engine. The static engine is not standalone and theReyk Floeter
FPGA-based device is long obsolete.
2014-04-14Remove the nCipher CHIL engine. It is not standalone and depends onReyk Floeter
external libraries that aren't covered by the same license.
2014-04-14Don't bother compiling files which end up containingMiod Vallat
#if OPENSSL_SYS_NOTYOURS <whole file> #endif
2014-04-14remove last vestiges of OPENSSL_SYS_XXX from src/sslBob Beck
ok deraadt@
2014-04-14two SHUTDOWN2 got away; noticed by beckTheo de Raadt