summaryrefslogtreecommitdiff
path: root/usr.bin/openssl
AgeCommit message (Collapse)Author
2015-04-15Only set the cipher list if one was specified and actually check the returnJoel Sing
value from SSL_CTX_set_cipher_list(). Also remove pointless getenv() handling. ok bcook@ doug@
2015-04-14Move verify externs into the header file.Joel Sing
2015-04-14Convert openssl(1) s_time to new option handling.Joel Sing
ok doug@
2015-04-14Clean up and improve openssl(1) errstr:Joel Sing
- Use BIO_new_fp() instead of BIO_new()/BIO_set_fp() and handle NULL return value in a more appropriate manner. - Use stroul() instead of sscanf() with appropriate error checking. ok doug@
2015-04-13Convert openssl(1) errstr to new option handling.Joel Sing
ok bcook@ doug@
2015-04-11Put back a goto end that was unintentionally removed.Joel Sing
Spotted by doug@
2015-04-11Convert openssl(1) pkeyparam to new option handling.Joel Sing
2015-03-22Since Windows needs BIO_sock_init() before you can call any networkingBrent Cook
functions, and ocsp and s_time need networking enabled too, this just moves BIO_sock_init() up into main() as a catch-all for all of the commands. Of course, it is a no-op on any other platform. ok @guenther
2015-03-05subtraction is not comparison. the difference of two longs is not goodTed Unangst
to place in an int. from Christian Neukirchen ok deraadt
2015-03-02use correct formatter (int, because of type promotion after operations)Brent Cook
ok jsing@
2015-02-28Reduce usage of predefined strings in manpages.Anthony J. Bentley
Predefined strings are not very portable across troff implementations, and they make the source much harder to read. Usually the intended character can be written directly. No output changes, except for two instances where the incorrect escape was used in the first place. tweaks + ok schwarze@
2015-02-25No need to use O_DIRECTORY when opening ".", O_RDONLY will suffice.Todd C. Miller
OK guenther@
2015-02-25Avoid NULL pointer deref in hashinfo_free() when calling from error paths.Doug Hogan
Also, nuke debugging printfs per jsing and bcook. ok bcook@, jsing@
2015-02-22While slick, this isn't accessing multiple directories concurrently, soPhilip Guenther
using *at functions is equivalent to chdir()ing, which eases portability. Tested with mixes of absolute and relative paths. Eliminate a FILE leak too. prodded by jsing@
2015-02-18fix coverity 105350 and 10345Bob Beck
ok miod@, doug@
2015-02-15Use "In" to mark up include files, instead of wrongly wrapping with Aq.Anthony J. Bentley
Aq is not the same as <> in non-ASCII situations, so this caused incorrect output in some places. And it provided no semantics besides. ok schwarze@
2015-02-12qsort() compare functions MUST use memcmp() instead of bcmp() to havePhilip Guenther
the correct return value. Prefer memcmp() anyway for portability. ok jsing@ tedu@
2015-02-12swap limits.h for sys/limits.hBrent Cook
ok jsing@
2015-02-11Enable building with -DOPENSSL_NO_DEPRECATED.Doug Hogan
If you didn't enable deprecated code, there were missing err.h and bn.h includes. This commit allows building with or without deprecated code. This was not derived from an OpenSSL commit. However, they recently enabled OPENSSL_NO_DEPRECATED in git and fixed these header problems in a different way. Verified with clang that this only changes line numbers in the generated asm. ok miod@
2015-02-10Introduce an openssl(1) certhash command.Joel Sing
This is effectively a reimplementation of the functionality provided by the previously removed c_rehash Perl script. The c_rehash script had a number of known issues, including the fact that it needs to run openssl(1) multiple times and that it starts by removing all symlinks before putting them back, creating atomicity issues/race conditions, even when nothing has changed. certhash is self-contained and is intended to be stable - no changes should be made unless something has actually changed. This means it can be run regularly in a production environment without causing certificate lookup failures. Further testing and improvements will happen in tree. Discussed with tedu@
2015-02-09Remember to zero the ciphers configuration.Joel Sing
2015-02-09Rewrite the openssl(1) ciphers command.Joel Sing
This has the same functionality as the previous version, however uses the new option handling code, uses SSL_CIPHER_get_value() since we no longer care about SSlv2 cipher suites and uses standard I/O functions instead of BIO functions. ok beck@ doug@
2015-02-08Delete commented out code from openssl(1) apps.Doug Hogan
From OpenSSL commits: 6f91b017bbb7140f816721141ac156d1b828a6b3 75d0ebef2aef7a2c77b27575b8da898e22f3ccd5 a2b18e657ea1a932d125154f4e13ab2258796d90 ok miod@, jsing@
2015-02-07Modify BSIZE to BUFLEN to avoid redefinition on HP-UX.Brent Cook
HP-UX defines BSIZE in its <sys/param.h>, and there is a route where its getting included as a side-effect. I tracked back to at least from HP-UX 9.0 ca. 1993, up to the latest, so the user namespace is polluted. from kinichiro <kinichiro.inoguchi@gmail.com> ok miod@, jsing@
2015-01-24Convert openssl(1) sess_id to the new option handling.Doug Hogan
input + ok jsing@
2015-01-24Convert openssl(1)'s rsa.c to the new option handling code.Doug Hogan
input + ok jsing@
2015-01-13Document the openssl s_client -proxy feature.Alexander Bluhm
OK jmc@
2015-01-13Add the possibility to use the openssl s_client tool with an httpAlexander Bluhm
proxy. Implement the -proxy feature in the same hackish way as -starttls. OK jsing@
2015-01-13Implement more thorough error checks:Lawrence Teo
- Check the return value of every relevant function call. - If BIO_new() returns NULL instead of a valid BIO, do not attempt to blindly use the NULL value as a BIO throughout the rest of the code. - Ensure that bio_out is freed by BIO_free_all() at the end of all error paths. ok doug@
2015-01-08Convert spkac.c to the new option handling code.Doug Hogan
input + ok jsing@
2015-01-08Convert pkcs8.c to the new option handling code.Doug Hogan
Minor KNF in a few places too. input + ok jsing@
2015-01-08Convert asn1pars.c to the new option handling.Doug Hogan
Also, removed a few useless if null checks. input from bcook@ input + ok jsing@
2015-01-05Convert openssl(1) passwd to new option handling.Joel Sing
ok doug@
2015-01-05Zap a reference to .rnd, which is likely the last RANDFILE remnant onLawrence Teo
this man page. ok jsing@
2015-01-03Check the return values of several reallocarray() calls. While here,Lawrence Teo
also check the return value of an adjacent malloc() call. ok jsing@
2015-01-02Remove ifdef statements for TIMES and USE_TOD; they don't do anything,Lawrence Teo
apart from introducing a bug where the -elapsed option is not listed in the usage output when it should be. feedback/ok bcook@ jsing@
2015-01-01Provide option types for binary AND, binary OR and silently discarding anJoel Sing
option.
2015-01-01Convert the openssl(1) enc command to the new option parsing and usage.Joel Sing
With input from doug@
2014-12-28Fix subtle typo.Joel Sing
2014-12-28Allow a default option to be specified by having a NULL name, but a validJoel Sing
option type. In this case process the option as per normal.
2014-12-28Provide an option type that allows for a callback function to consume anJoel Sing
arbitrary number of arguments. This will allow for more complex option handling as required by some of the openssl(1) applications.
2014-12-28Teach option parsing that a single hyphen denotes the end of named optionsJoel Sing
(as currently only implemented by some of the openssl(1) applications).
2014-12-28Provide a mechanism for option parsing to return the number of argumentsJoel Sing
that it has consumed. This allows for the handling of multiple unnamed arguments, including lists of filenames.
2014-12-28Only accept a single unnamed argument - the existing behaviour is toJoel Sing
silently accept multiple unnamed arguments, ignoring all except the last. This behaviour was already inconsistent between openssl(1) applications; apply the principal of least surprise. This will also simplify the addition of upcoming functionality.
2014-12-28Slightly simplify options parsing logic.Joel Sing
2014-12-28Provide two different function pointers for option function callbacks. ThisJoel Sing
allows for simpler code in the common cases and will allow for further extension to support the complex cases.
2014-12-24Clean up CIPHERS and related sections:Lawrence Teo
- Sync cipher strings with the ones that are actually implemented. - Remove CIPHERS SUITE NAMES (the actual cipher suites can be obtained via "openssl ciphers -v"), CIPHERS NOTES, and CIPHERS HISTORY sections. - Stop mentioning export cipher suites since they have already been removed. feedback from deraadt@ and jmc@ ok jmc@
2014-12-19CA.sh and CA.pl are goneLawrence Teo
2014-12-19Sync message digest algorithms with the ones actually implemented inLawrence Teo
"openssl dgst". feedback/ok jmc@
2014-12-14Remove redundant NULL checks before free - BN_free(), BIO_free_all() andJoel Sing
EC_GROUP_free() all have implicit NULL checks.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-21 02:54:52 +0000